Wah-Kit (“we”, “us”) provides free tools for preparing and sending WhatsApp messages at wah-kit.com. This policy explains what information we handle, why, and the choices you have. We have written it in plain language; if anything is unclear, write to us at [email protected].
Who we are: Wah-Kit is an independent online service, and is responsible for your personal data under this policy. Contact: [email protected].
1. Using the tools without an account
- Your text stays on your device. Text you type, paste or format in the text formatter is processed in your browser. It is not sent to or stored on our servers, unless you choose to save it as a template (see below).
- Links and QR codes are created in your browser. The numbers and messages you enter are not sent to us.
- Preferences such as your chosen typing language or the last number you sent to are saved in your own browser’s storage so the page remembers them. You can clear them at any time by clearing your browser’s site data.
- Contact us. If you send us a message, we keep the message, the name and email address you choose to give, and the page you came from, so we can read it and reply. We also keep a scrambled form of your connection’s IP address for an hour-by-hour limit against spam; it cannot be turned back into your address.
- Sending to WhatsApp. When you use “Send on WhatsApp” or open a link, your message is passed to WhatsApp (operated by Meta) through a wa.me link. From that point WhatsApp’s own privacy policy applies.
2. If you create an account
Some features, such as saving contacts, need an account. When you sign in with Google we receive and store:
- your name, email address, profile picture and Google account ID (to identify your account);
- the contacts and groups you choose to save: names, WhatsApp numbers or group links, any labels, birthdays and email addresses, and the details you keep in your own fields (for example an amount, a due date or a payment link);
- the names you give those fields, and any message templates, tasks, drafts for review, business pages, events and checklists you choose to save, and your replies to events and ticks on checklists;
- basic account information such as when you joined, your plan, and when you last used a saved contact.
We do not receive your Google password, and we do not access your Gmail, Google Drive, Google Contacts or any other Google data.
Payments
If you buy a paid plan, the payment is handled by Stripe, and the plan is sold through Link, Stripe’s merchant of record service. Stripe and Link collect your payment details, name and billing address under their own privacy policies; Wah-Kit never sees or stores your card details. Stripe tells us your plan, its status and renewal date, and a Stripe customer reference, which we keep to manage your subscription.
3. Contacts and templates you save
Contacts, field details and templates you save belong to you. We store them only so that you can find and use them in Wah-Kit; filling a template in with a contact’s details happens in your browser. We never message your contacts, share them, or use them for marketing. Please save only contacts and details you are entitled to keep, such as for your own students, customers, members or family, and avoid storing sensitive information such as bank card numbers or passwords in fields.
Emails about new features. After you first sign in, we ask whether you’d like an occasional email about new Wah-Kit features. We only send these if you say yes, and we keep a record of your choice and when you made it. Every such email has an unsubscribe link, and you can change your choice any time under Email preferences in your account menu. Emails about your account or payments are sent whatever you choose. If we use a newsletter service to send these emails, we give it only your name and email address for that purpose.
Business pages are public. If you make a business page, everything you put on it (business name, description, WhatsApp number, notice, hours, address and social media names) can be seen by anyone with the link, and by search engines unless you switch off “Let Google show my page”. Please only add details you’re happy to share publicly. We count visits to your page so you can see them; we don’t record who the visitors are. Deleting the page removes it straight away.
Events and replies. Anyone with an event’s link can see the event details you enter (title, date, time, place and details) and the totals of replies, but not who replied. When you reply to an event, its organiser sees your name, your answer, the number of guests and any note you add, and can download them. Other people see your name only if the organiser chooses to show who’s coming, and then only to people who have replied too. You can change or remove your reply until replies close. Deleting an event deletes its replies; deleting your account deletes your events and your replies.
Shared checklists. Only the people on a checklist can see it: its name, items, and who has ticked what. The organiser also sees the WhatsApp numbers they typed in for each person, to send invites and reminders; nobody else does. Each person joins with their own invite link and a Wah-Kit account, and appears under the name the organiser gave them. You can leave a checklist at any time, which removes your ticks. Deleting a checklist deletes it for everyone; deleting your account deletes the checklists you organise and takes you off the others.
Drafts for review. If you send a draft for review, the person you choose sees that draft and your name when they sign in to Wah-Kit with the email address you saved for them. They don’t see your contacts or anything else. A draft is deleted when the reviewer marks it as sent or you withdraw it, and in any case after 30 days. When you choose a reviewer, Wah-Kit tells you whether that email address has a Wah-Kit account; to protect members’ privacy this only works for your own saved contacts and a limited number of times a day.
4. Visitor statistics
We use Cloudflare Web Analytics to count visits and see which pages are used. It does not use cookies and does not identify you personally.
5. Where your information is kept
The website and account data are hosted by Cloudflare. Data may be processed in data centres outside your country. Sign-in is provided by Google. We use these providers only to run Wah-Kit.
6. What we never do
- We do not sell your personal data or your contacts.
- We do not read or store the messages you write in the editor, other than templates you choose to save.
- We do not send messages on your behalf.
7. Keeping and deleting your data
We keep account data while your account is open. You can download your saved contacts or delete your account at any time from your account page. Deleting your account removes your account, saved contacts and templates from our systems within 30 days, apart from anything we must keep by law.
8. Security
All connections use HTTPS. Sign-in sessions are protected with signed, secure cookies, and each account can only access its own data. No system is completely secure, but we take reasonable steps to protect your information.
9. Your rights
You can ask to see, correct or delete the personal data we hold about you, or withdraw your consent, by writing to [email protected]. We respond in line with applicable data protection laws, including Singapore’s Personal Data Protection Act.
10. Children
Wah-Kit accounts are not intended for children under 13.
11. Changes to this policy
If we change this policy we will update the date at the top of this page, and tell account holders about important changes.
12. Contact
Questions about privacy: [email protected]