Last updated: 16 August 2026
This policy explains what personal data WaHttp collects, why we collect it, and the rights you have over it. WaHttp is a product of JahaSoft Ltd, a company registered in the United Kingdom, with its registered office. For the purposes of UK data protection law, JahaSoft Ltd is the data controller for the information described here.
If you have any questions about this policy, contact us at [email protected].
Who this policy covers This policy applies to visitors to wahttp.com and to account holders who use the WaHttp service. It does not cover the content of the WhatsApp messages you send and receive through the service, which is handled as described under "Message data" below.
Information we collect
Account information. When you create an account we collect your name, email address, and password (stored only as a secure hash). If you subscribe to a paid plan, our payment processor collects and processes your card details; we do not store full card numbers on our systems.
Session data. To connect a WhatsApp number, we store the session credentials that keep that number linked to the service. These credentials are encrypted at rest and are used only to maintain your connection.
Message data. Messages you send and receive pass through our systems so we can deliver them and trigger your webhooks. Message content and metadata (such as sender, recipient, timestamp, and delivery status) may be retained for [retention period] to support delivery, debugging, and the features you use, then deleted. You control what you send.
Usage and technical data. We collect standard technical information such as IP address, browser type, API request logs, and usage analytics per API key. This helps us keep the service secure, diagnose problems, and understand how features are used.
Cookies. Our website uses essential cookies to keep you signed in and, where you consent, analytics cookies to measure usage. You can control non-essential cookies through our cookie banner.
How we use your information We use your data to provide and maintain the service, authenticate you, deliver and monitor messages, process payments, provide support, detect and prevent abuse, and comply with our legal obligations. We rely on the following legal bases: performance of our contract with you (to run the service you signed up for), our legitimate interests (to secure and improve the service and prevent fraud), your consent (for non-essential cookies and marketing), and legal obligation (for tax and compliance records).
How we protect your information All data is encrypted in transit using TLS 1.3. Session credentials and API keys are encrypted at rest. Access to production systems is restricted to authorised personnel, and API keys are scoped by role so each integration has only the access it needs and can be revoked independently. No system is perfectly secure, but we take reasonable steps to protect your data against loss, misuse, and unauthorised access.
Sharing your information We do not sell your personal data. We share it only with service providers who help us run WaHttp (such as our payment processor and hosting and infrastructure providers), who are bound to handle it securely and only on our instructions. We may also disclose data where required by law, to enforce our terms, or to protect the rights and safety of our users and the public. Messages you send are, by their nature, transmitted to the WhatsApp recipients you choose.
International transfers Where data is transferred outside the UK or the European Economic Area, we ensure an appropriate safeguard is in place, such as an adequacy decision or standard contractual clauses.
Data retention We keep personal data only as long as needed for the purposes above or as required by law. Account data is retained while your account is active and for [retention period] afterwards. Message data is retained for [retention period]. You can request deletion of your account at any time.
Your rights Under UK data protection law you have the right to access your data, correct it, delete it, restrict or object to its processing, and request a portable copy. You can also withdraw consent where we rely on it, and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, email [email protected] and we will respond within the timeframes the law requires.
Children WaHttp is not intended for anyone under 16, and we do not knowingly collect data from children.
Changes to this policy We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, notify you.
Contact Email: [email protected]
WaHttp is not affiliated with WhatsApp LLC or Meta Platforms, Inc.