WA API Hub Logo
WhatsApp API Hub Self-Hosted Developer Platform
Official Policy

Privacy Policy

Effective Date: October 14, 2026 • Last Updated: October 14, 2026

1. Introduction

Welcome to WhatsApp API Hub ("we", "our", or "the Platform"), an open-source, self-hosted WhatsApp automation and REST API gateway developed by Navneet Kumar Yadav. We take the privacy and confidentiality of your personal and business data very seriously.

This Privacy Policy details how we collect, use, store, protect, and process your information when you access or interact with our website, dashboard, APIs, Google OAuth authentication, and Google Contacts integration features.

2. Information We Collect

We only collect the minimum amount of information necessary to deliver our services:

  • Account Credentials: Name, email address, password hash, and optional phone number provided during account registration or Google OAuth login.
  • WhatsApp Session Metadata: Device linkage status, phone number identifier, and push name negotiated through end-to-end encrypted Baileys protocol sessions.
  • Messaging Data & Logs: Recipient phone numbers, message payloads, status timestamps, and error logs created when routing messages through your configured WhatsApp queues.
  • Google User Data (via OAuth): When you choose to authenticate or sync contacts using Google services:
    • Google Sign-In: Your name, email address, Google account profile ID, and avatar image (openid, email, profile).
    • Google Contacts Import: Read-only access to names and phone numbers stored in your Google Contacts address book (https://www.googleapis.com/auth/contacts.readonly), strictly triggered by your explicit click on "Import Google Contacts".

3. Google API Services User Data Policy Compliance (Limited Use Disclosure)

WhatsApp API Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • No Sale of Google Data: We never sell, lease, rent, or trade your Google data, contacts, or personal details to any third parties, data brokers, or advertising networks under any circumstances.
  • No Targeted Advertising: Your Google user data is never accessed or used for advertising, marketing campaigns, retargeting, or profiling purposes.
  • No AI/ML Model Training: Information gathered via Google APIs is never utilized to train generalized artificial intelligence or machine learning models.
  • Human Access Restrictions: No human or employee reads your Google contacts or personal data unless required to resolve a technical error explicitly reported by you, or as mandated by law.

4. How We Use Collected Information

We use your information exclusively for the following operational purposes:

  • To authenticate your identity, prevent fraud, and maintain your private administrator session.
  • To save and synchronize your requested contacts into your personal contact table for broadcasting permitted transactional messages.
  • To establish and maintain the secure WhatsApp socket bridge linking your device to your private queue.
  • To deliver automated webhook callbacks and audit logs to your designated endpoints.

5. Data Retention & Security Measures

We implement modern industry-standard security practices to safeguard all collected data:

  • Encryption in Transit: All HTTP traffic to and from the platform is enforced over Transport Layer Security (TLS 1.2 / TLS 1.3 / HTTPS).
  • End-to-End Encryption: WhatsApp messages transmitted through your linked device leverage the native Noise protocol and Signal protocol cryptographic ratchets.
  • Credential Hashing: Passwords and API secrets are never stored in plaintext and are securely hashed using modern cryptographic algorithms (password_hash with BCRYPT and SHA-256).
  • Session Key Isolation: Multi-tenant WhatsApp credentials and prekeys are isolated per user on disk and protected against unauthorized cross-user access.

6. User Control, Data Deletion & Revocation

You have complete control over your personal data and integrations:

  • Delete Contacts: You can delete any individual contact or flush your contact list at any moment directly from the Contacts Manager.
  • Unlink WhatsApp: Clicking "Disconnect" or "Reset Session" immediately wipes your active WhatsApp cryptographic session files from our servers.
  • Revoke Google Access: You can revoke WhatsApp API Hub's access to your Google Account at any time via your Google Security Settings at Google Account Permissions.
  • Account Deletion Requests: To permanently delete your entire account, API keys, database records, and logs, email us at info.assistgroupofficial@gmail.com. We will process your deletion request within 48 business hours.

7. Third-Party Disclaimers

WhatsApp API Hub is an independent open-source tool. We are not endorsed, affiliated, associated, authorized, or connected in any way with Meta Platforms, Inc., WhatsApp Inc., or Google LLC. WhatsApp and Google are registered trademarks of their respective owners.

8. Contact Information

If you have any questions, inquiries, concerns, or deletion requests regarding this Privacy Policy or our data handling practices, please contact our privacy compliance team:

Primary Maintainer: Navneet Kumar Yadav

Official Email: info.assistgroupofficial@gmail.com

Project Repository: github.com/navneetyadav-code/whatsapp-api