Privacy Policy
Effective Date: August 1, 2025
Last Updated: August 1, 2025
1. Introduction
This Privacy Policy describes how we collect, use, and protect your personal information when you use our virtual WhatsApp number service. By using our service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Information
We collect the following types of personal information:
- Full name and contact details
- Primary phone number
- Email address
- Payment information (processed through Stripe)
- Account credentials and authentication data
- Device information and IP addresses
- Usage patterns and service interaction data
Collection Methods
Information is collected through:
- Registration and account setup forms
- Payment processing systems
- Automated technologies including cookies and analytics tools
- Direct communications with our support team
- Third-party service integrations
Third-Party Sources
We may receive information about you from:
- Payment processors (Stripe)
- Analytics providers (Google Analytics 4)
- Advertising platforms (Google Ads, Facebook Ads)
- Database hosting services (Supabase)
3. How We Use Your Information
Primary Purposes
We process your personal information for:
- Providing and maintaining our virtual WhatsApp number service
- Processing payments and managing subscriptions
- Authenticating user identity and preventing fraud
- Providing customer support and technical assistance
- Improving service functionality and user experience
- Ensuring compliance with legal obligations
Marketing and Communications
We use your email address and phone number to:
- Send service-related notifications and updates
- Deliver promotional materials and special offers
- Conduct customer satisfaction surveys
- Provide technical support communications
Legal Basis for Processing
Our legal basis for processing includes:
- Contract performance for service delivery
- Legitimate business interests for service improvement
- Consent for marketing communications
- Legal compliance for regulatory requirements
4. Information Sharing and Disclosure
Service Providers
We share information with trusted third-party service providers:
- Stripe: Payment processing and subscription management
- Supabase: Database hosting and data storage
- Vercel: Application hosting and deployment
- Google: Analytics and advertising services
- Facebook/Meta: Advertising and marketing services
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
Legal Requirements
We may disclose information when required by law, court order, or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Respond to government requests
5. Your Rights and Choices
Access and Control Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and associated data
- Restrict processing of your information
- Data portability where technically feasible
Marketing Opt-Out
You may opt out of marketing communications by:
- Using unsubscribe links in emails
- Contacting our support team
- Adjusting preferences in your account settings
California Consumer Privacy Act (CCPA) Rights
California residents have additional rights including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising privacy rights
To exercise CCPA rights, contact us at the information provided below.
6. Data Security
Security Measures
We implement industry-standard security measures including:
- Encryption of data in transit and at rest
- Secure payment processing through PCI-compliant providers
- Regular security audits and vulnerability assessments
- Restricted access controls and authentication requirements
- Employee training on data protection practices
Data Breach Notification
In the event of a data breach affecting your personal information, we will:
- Notify affected users within 72 hours when feasible
- Report incidents to relevant authorities as required
- Take immediate steps to secure systems and prevent further unauthorized access
Data Retention
We retain personal information for:
- Active accounts: Duration of service relationship
- Inactive accounts: 12 months after last activity
- Payment records: 7 years for tax and legal compliance
- Marketing data: Until opt-out request or account deletion
7. Cookies and Tracking Technologies
Types of Cookies Used
- Essential Cookies: Required for service functionality
- Analytics Cookies: Google Analytics 4 for usage statistics
- Advertising Cookies: Google Ads and Facebook Ads for targeted marketing
- Preference Cookies: Store user settings and preferences
Third-Party Tracking
We use third-party services that may track your activity:
- Google Analytics 4 for website and service analytics
- Google Ads for advertising measurement
- Facebook Pixel for social media advertising
Cookie Management
You can manage cookies through:
- Browser settings to block or delete cookies
- Opt-out tools provided by advertising networks
- Privacy settings in your account dashboard
Do Not Track Signals
Our service does not currently respond to Do Not Track browser signals, but you can disable tracking through the methods described above.
8. Children's Privacy
Age Restrictions
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Parental Notice
If we become aware that we have collected information from a child under 13, we will:
- Delete the information immediately
- Terminate any associated account
- Notify parents or guardians when contact information is available
Age Verification
We implement reasonable age verification procedures including:
- Age confirmation during registration
- Terms of service acknowledgment
- Payment method verification (typically requires adult)
9. International Data Transfers
Your information may be transferred to and processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for international transfers through:
- Standard contractual clauses
- Adequacy decisions where applicable
- Service provider privacy certifications
10. Updates to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated through:
- Email notification to registered users
- Prominent notice on our website
- In-app notifications where applicable
Continued use of our service after policy updates constitutes acceptance of the revised terms.
11. Contact Information
For questions about this Privacy Policy or to exercise your rights, contact us:
Email: support@virtualwhatsapp.com
For CCPA-specific requests, please include "CCPA Request" in your subject line and provide sufficient information to verify your identity.
This Privacy Policy is designed to comply with applicable privacy laws including CCPA, COPPA, and general data protection principles. Users are advised that specific rights may vary based on jurisdiction and applicable law.