Privacy Policy

1. Introduction

WAConversionTracking (“WACT,” “we,” “our,” or “us”) is a conversion tracking solution that helps businesses measure and attribute Google Ads campaigns that lead to WhatsApp conversations.

This Privacy Policy explains how we collect, use, store, and share information when you use our services, including our Meta app integration with the WhatsApp Business API.

By using our Services, you agree to the practices described in this policy.

We are committed to protecting your privacy and complying with all applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws. We also comply with Meta’s Platform Terms and Developer Policies.

2. Information We Collect

2.1 Information You Provide

- Business name and contact details

- WhatsApp Business account details (WABA ID, phone number ID)

- Authentication credentials and access tokens

- Business profile information and account settings

2.2 WhatsApp Integration Data

- Business phone numbers and account identifiers

- Message metadata (timestamps, delivery status, read receipts)

- Contact information from your WhatsApp Business account

- Business profile information

We do not collect or store the content of WhatsApp messages. Only metadata required for conversion tracking is processed.

2.3 Google Ads Integration Data

- Google Click IDs (GCLID)

- User identifiers (UIDs) for attribution mapping

- Campaign and conversion data

- Ad performance metrics

2.4 Automatically Collected Information

- Service-related, diagnostic, and performance data

- IP addresses, browser type, and operating system details

- Usage patterns and feature interactions

- Webhook event data from Meta/WhatsApp

- API request and response logs

- Security and authentication logs

- Cookies (session, functional, and analytics cookies)

This information is collected automatically through cookies, server logs, and similar technologies as you interact with our Services. We use it to operate, secure, and improve the platform. You can control cookie preferences through your browser settings or our Cookies Settings page. We do not use automatically collected information to identify you beyond what is necessary to provide and protect the Services.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Core Services

- Provide WhatsApp Business messaging functionality

- Track conversions from Google Ads to WhatsApp conversations

- Map GCLIDs and UIDs for accurate attribution reporting

- Deliver and support our tracking and reporting features

3.2 Service Improvement

- Analyze usage patterns to improve our Services

- Develop new features and functionality

- Optimize performance, reliability, and user experience

- Conduct research and analytics for business insights

3.3 Safety and Security

- Detect, prevent, and address fraud, abuse, or misuse

- Protect against unauthorized access and security threats

- Ensure platform safety and enforce our Terms of Service

3.4 Legal Compliance

- Comply with laws, regulations, and legal requests

- Maintain records as required by law

- Respond to regulatory or court orders

3.5 Use of Meta/WhatsApp Data

Data received from Meta/WhatsApp (such as account identifiers, message metadata, and webhook events) is used solely to provide WhatsApp Business functionality and conversion tracking services.

We retain the content of WhatsApp messages only as long as necessary for attribution and tracking, after which it is deleted.

We do not sell, license, or share WhatsApp data with third parties for their independent use.

We retain WhatsApp metadata only as long as necessary for attribution and tracking, after which it is deleted.

4. How We Use Your Information

4.1 Limited Use of Google User Data

WAct's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy 

(https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Specifically:
- We only use Google Ads data to provide WhatsApp-to-Ads conversion attribution as described in this Privacy Policy.

- We only use Google Drive data (via the drive.file scope) to create and write to spreadsheets we create on the user's behalf for logging WhatsApp lead data. We do not access any other Drive files.

- We do not use Google API data for advertising purposes, including retargeting, personalised, or interest-based advertising.

- We do not allow humans to read Google API user data unless:
 (a) we have the user's explicit consent for specific messages, 
  (b) it is necessary for security purposes such as investigating abuse,
  (c) it is needed to comply with applicable law, or 
  (d) the data is aggregated and used for internal operations in accordance with applicable privacy laws.

- We do not sell Google API user data or share it with third parties for their independent use.

5. Information Sharing and Disclosure

5.1 Meta/WhatsApp

We share necessary data with Meta to enable WhatsApp Business API functionality. This includes account identifiers, message metadata, and webhook events, in accordance with Meta’s Platform Terms and WhatsApp’s Privacy Policy.

5.2 Google Ads

We share conversion data with Google Ads to attribute conversions to campaigns. This includes GCLIDs and related metrics.

5.3 Service Providers

We may share information with trusted third-party providers who assist us with:

Cloud hosting and infrastructure

Data analytics and processing

Customer support

Security and fraud prevention

5.4 Legal Requirements

We may disclose information if required by law, regulation, or valid legal request.

5.5 Business Transfers

If WACT is involved in a merger, acquisition, or sale of assets, data may be transferred to the successor entity in compliance with applicable law.

6. Data Security

We implement technical and organizational measures to protect your information, including:

Encryption in transit (HTTPS/TLS) and at rest

Role-based access controls and multi-factor authentication

Regular access reviews, audits, and staff training

Secure cloud infrastructure and security

Ongoing monitoring and incident response procedures

7. Data Retention

Account Data: Retained until account deletion or 3 years of inactivity

Message Metadata: Retained for up to 12 months (unless deletion is requested)

Conversion Data: Retained for 24 months for attribution purposes

Analytics Data: Retained in anonymized form for up to 36 months

Legal/Regulatory Data: Retained as required by law

8. Your Rights and Choices

You may exercise your rights under GDPR, CCPA, and other applicable laws, including:

Access: Request a copy of your data

Portability: Export your data in machine-readable format

Correction: Update or correct your information

Deletion: Delete your account and associated data

Opt-Out: Disable analytics/tracking or unsubscribe from communications

9. International Data Transfers

Your information may be transferred to and processed in countries outside your own. We ensure adequate safeguards through:

Standard Contractual Clauses (SCCs)

Adequacy decisions where applicable

Binding Corporate Rules (if intra-group)

10. Children’s Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we discover such data, it will be promptly deleted.

11. Data Deletion Requests (Meta Requirement)

If you wish to delete data collected by our Meta app (WAConversionTracking):

Log in to your WACT account and use the “Delete Account” option in your dashboard; or;

Send an email to support@waconversiontracking.com with subject line: Meta App Data Deletion Request.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will:

Post the updated policy on our website

Display in-app notices

13. Contact Information

Data Controller
WACONVERSIONTRACKING FOR SOCIAL MEDIA APPLICATIONS DEVELOPMENT & MANAGEMENT
Dubai, United Arab Emirates
Email: support@waconversiontracking.com

14. Regional Privacy Rights

14.1 European Union (GDPR)

You have the right to: access, rectify, erase, restrict processing, port data, object to processing, and withdraw consent.

14.2 California (CCPA)

You have the right to:

Know what personal data we collect

Request deletion of personal data

Opt out of sale of personal data

Access your personal information

Receive equal service and pricing regardless of exercising these rights