Privacy Policy

Effective Date: August 1, 2025
Last Updated: August 1, 2025

1. Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you use our virtual WhatsApp number service. By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We collect the following types of personal information:

• Full name and contact details

• Primary phone number

• Email address

• Payment information (processed through Stripe)

• Account credentials and authentication data

• Device information and IP addresses

• Usage patterns and service interaction data

Collection Methods

Information is collected through:

• Registration and account setup forms

• Payment processing systems

• Automated technologies including cookies and analytics tools

• Direct communications with our support team

• Third-party service integrations

Third-Party Sources

We may receive information about you from:

• Payment processors (Stripe)

• Analytics providers (Google Analytics 4)

• Advertising platforms (Google Ads, Facebook Ads)

• Database hosting services (Supabase)

3. How We Use Your Information

Primary Purposes

We process your personal information for:

• Providing and maintaining our virtual WhatsApp number service

• Processing payments and managing subscriptions

• Authenticating user identity and preventing fraud

• Providing customer support and technical assistance

• Improving service functionality and user experience

• Ensuring compliance with legal obligations

Marketing and Communications

We use your email address and phone number to:

• Send service-related notifications and updates

• Deliver promotional materials and special offers

• Conduct customer satisfaction surveys

• Provide technical support communications

Legal Basis for Processing

Our legal basis for processing includes:

• Contract performance for service delivery

• Legitimate business interests for service improvement

• Consent for marketing communications

• Legal compliance for regulatory requirements

4. Information Sharing and Disclosure

Service Providers

We share information with trusted third-party service providers:

• Stripe: Payment processing and subscription management

• Supabase: Database hosting and data storage

• Vercel: Application hosting and deployment

• Google: Analytics and advertising services

• Facebook/Meta: Advertising and marketing services

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Legal Requirements

We may disclose information when required by law, court order, or to:

• Comply with legal processes

• Protect our rights and property

• Prevent fraud or security threats

• Respond to government requests

5. Your Rights and Choices

Access and Control Rights

You have the right to:

• Access your personal information

• Correct inaccurate data

• Delete your account and associated data

• Restrict processing of your information

• Data portability where technically feasible

Marketing Opt-Out

You may opt out of marketing communications by:

• Using unsubscribe links in emails

• Contacting our support team

• Adjusting preferences in your account settings

California Consumer Privacy Act (CCPA) Rights

California residents have additional rights including:

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of sale of personal information

• Right to non-discrimination for exercising privacy rights

To exercise CCPA rights, contact us at the information provided below.

6. Data Security

Security Measures

We implement industry-standard security measures including:

• Encryption of data in transit and at rest

• Secure payment processing through PCI-compliant providers

• Regular security audits and vulnerability assessments

• Restricted access controls and authentication requirements

• Employee training on data protection practices

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours when feasible

• Report incidents to relevant authorities as required

• Take immediate steps to secure systems and prevent further unauthorized access

Data Retention

We retain personal information for:

• Active accounts: Duration of service relationship

• Inactive accounts: 12 months after last activity

• Payment records: 7 years for tax and legal compliance

• Marketing data: Until opt-out request or account deletion

7. Cookies and Tracking Technologies

Types of Cookies Used

• Essential Cookies: Required for service functionality

• Analytics Cookies: Google Analytics 4 for usage statistics

• Advertising Cookies: Google Ads and Facebook Ads for targeted marketing

• Preference Cookies: Store user settings and preferences

Third-Party Tracking

We use third-party services that may track your activity:

• Google Analytics 4 for website and service analytics

• Google Ads for advertising measurement

• Facebook Pixel for social media advertising

Cookie Management

You can manage cookies through:

• Browser settings to block or delete cookies

• Opt-out tools provided by advertising networks

• Privacy settings in your account dashboard

Do Not Track Signals

Our service does not currently respond to Do Not Track browser signals, but you can disable tracking through the methods described above.

8. Children's Privacy

Age Restrictions

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Parental Notice

If we become aware that we have collected information from a child under 13, we will:

• Delete the information immediately

• Terminate any associated account

• Notify parents or guardians when contact information is available

Age Verification

We implement reasonable age verification procedures including:

• Age confirmation during registration

• Terms of service acknowledgment

• Payment method verification (typically requires adult)

9. International Data Transfers

Your information may be transferred to and processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for international transfers through:

• Standard contractual clauses

• Adequacy decisions where applicable

• Service provider privacy certifications

10. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through:

• Email notification to registered users

• Prominent notice on our website

• In-app notifications where applicable

Continued use of our service after policy updates constitutes acceptance of the revised terms.

11. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: support@virtualwhatsapp.com

For CCPA-specific requests, please include "CCPA Request" in your subject line and provide sufficient information to verify your identity.

This Privacy Policy is designed to comply with applicable privacy laws including CCPA, COPPA, and general data protection principles. Users are advised that specific rights may vary based on jurisdiction and applicable law.