Privacy Policy

1. Information We Collect

To provide our automated WhatsApp marketing and account warming services, we collect information across three main categories:

• Account Information: Your name, business name, email address, password hash, and billing information when registering an account on app.witsent.online.
• Instance & Session Telemetry: WhatsApp Web session tokens (stored encrypted at rest), proxy connection statuses, sender phone number identifiers, and account warming telemetry required to coordinate automated peer warming.
• Campaign & Contact Data: Broadcast recipient phone numbers, customized merge tags, spintax templates, and dispatch logs (sent, delivered, read status).
• Technical Usage Data: IP address, browser type, operating system, and timestamp logs for fraud prevention, abuse detection, and infrastructure health monitoring.

2. How We Use Your Information

We strictly use the collected data for the following legitimate purposes:

• To orchestrate and execute scheduled WhatsApp messaging campaigns requested by you.
• To facilitate automated peer-to-peer account warming cycles to preserve sender trust.
• To provide real-time delivery tracking, read rates, and error diagnostics.
• To detect and prevent fraudulent account creation, malicious DDoS attacks, and systemic abuse.
• To bill subscription fees and communicate system service updates or security advisories.

3. End-to-End Encryption & Message Security

WhatsApp employs the Signal Protocol for end-to-end encryption between client devices and recipients. Witsent operates as a client orchestration layer:

Your session authentication keys are encrypted using AES-256-GCM before storage. Our engineering staff cannot read your end-to-end encrypted chat histories. Broadcast logs and contact records are retained strictly for the duration requested by your retention policies or account life cycle.

4. Data Sharing & Third-Party Processors

We do not sell personal data. We only share necessary data with trusted infrastructure providers bound by strict data processing agreements:

• Cloud Hosting & Database: Vercel, Supabase/AWS (SOC 2, ISO 27001 certified).
• Proxy Providers: Dedicated residential proxy networks strictly for routing WhatsApp web websocket connections.
• Payment Processors: Stripe or approved merchant processors for handling subscription upgrades (Witsent never stores raw credit card numbers).

5. International Data Transfers & GDPR Compliance

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you retain statutory rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal information.
• The right to export your contact lists and campaign histories (data portability).
• The right to restrict or object to automated data processing.
• The right to withdraw consent at any time without affecting lawful processing prior to withdrawal.

To exercise any of these rights, email us at [email protected].

6. Cookie Policy

We use strictly necessary session cookies to maintain your login session on app.witsent.online and anonymized analytics cookies to measure site performance and visitor interactions. We do not use third-party cross-site advertising trackers.

7. Data Retention & Account Deletion

When you delete your account or disconnect a WhatsApp instance from Witsent, we immediately purge the associated session tokens, instance credentials, and contact lists from our active databases within 14 days, unless legally required to retain transaction receipts for tax purposes.

8. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our security protocols, please reach out directly: