سياسة الخصوصية

English version

WhatsX Privacy Policy

Effective and last updated: July 24, 2026.

Who we are

WhatsX is a business WhatsApp operations service available through code-platform.net and its related subdomains. General inquiries may be sent to [email protected]. Privacy and support inquiries may be sent to [email protected].

Data we process

A public subscription request may include the requester's name, company, work email, phone or WhatsApp number, country, expected operating size, intended use, contact preferences, and notes. Submitting it creates a request for human review only; it does not create an account or workspace. We also process subscriber identity and contact details, subscription and workspace settings, authentication and security records, technical logs, WhatsApp integration data, messages and media required to operate a subscriber workspace, and backups produced under configured service settings. Subscribers are responsible for the instructions and lawful basis governing end-customer data placed in their workspace.

The public request form uses Cloudflare Turnstile to distinguish human use from automated abuse. Cloudflare may process the network address, browser details, and security signals needed for that check; WhatsX does not send the form-field contents to Turnstile. See Cloudflare's Turnstile Privacy Addendum.

Google user data

Google Sign-In and identity linking request only openid, email, and profile. We use the stable Google subject, verified email, and potentially the profile name only to match the Google account to an existing authorized WhatsX subscriber or operator. This flow does not request Google Drive access.

Google Drive connection is a separate, optional, user-initiated consent flow. It requests https://www.googleapis.com/auth/drive.file so WhatsX can create folders and upload and manage backup files that WhatsX creates in that user's Drive. We do not request full Drive access. The refresh token is encrypted at rest.

When the service operator connects the administrative Drive destination, it may receive operational backups for tenant workspaces under the configured backup policy. WhatsX also reads Drive storage capacity and current usage and stores the latest measurement and timestamp to preserve a configured storage reserve. This does not grant general access to unrelated Drive files.

We do not sell Google user data or use it for advertising, ad profiles, or training generalized AI models. WhatsX's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting Drive only removes the stored Drive credential, temporary access-token cache, folder pointers, and upload sessions while preserving the local Google identity link for sign-in. Fully unlinking Google also removes that local identity link. Neither action automatically deletes files already uploaded to Drive; they remain under the Drive owner's control until that owner deletes them. Access can also be revoked from Google Account connections.

Use, sharing, and retention

We use data to provide and secure the service, enforce plan limits, operate requested integrations and backups, diagnose failures, provide support, and meet legal duties. We do not sell personal data. We disclose only what is needed to infrastructure and security providers (including Cloudflare Turnstile for public-form abuse prevention), Google or Meta when a subscriber chooses the relevant integration, or authorities when legally required.

Public subscription-request data is retained for no more than 12 months from submission and may be deleted sooner when follow-up no longer requires it, unless a later agreement or legal duty requires limited longer retention. Active account and operational data is retained while needed to provide the service. Local backups follow configured retention. A completed workspace purge removes active workspace data and stored credentials, while limited technical tombstone or security records may remain for resource-safety, audit, or legal needs. Copies previously sent to a user's Drive remain until that user deletes them; other operational backup copies may remain through their applicable retention period.

Security and your choices

We use transport encryption, protected secret storage, workspace isolation, session controls, rate limiting, and two-factor authentication. You can unlink Google, revoke Google access, and request access, correction, or deletion by emailing [email protected]. We may verify your identity before fulfilling a request. WhatsX is a business service and is not directed to people under 18.