Legal

Privacy Policy

Plain-English summary first. Detailed terms below. We don't sell your data, we don't share it across tenants, and we don't read your customers' messages for any purpose other than running your bot.

Last updated: 1 May 2026 · Effective: 1 May 2026

1. Who we are

WA-B Solutions Ltd. ("WA-B", "we", "us") is a company registered in Ghana (Reg. No. CS-000000-2025) at 2nd Floor, Cantonments Office Park, 14 Olusegun Obasanjo Way, Accra. We provide a SaaS platform that lets businesses sell on WhatsApp and accept Mobile Money payments.

2. Data we collect

From merchants (you)

  • Account details: name, business name, email, WhatsApp number, role.
  • Billing details: MoMo phone number, billing history, plan tier.
  • Usage: dashboard activity, API key usage, support requests.

From your customers (end users of your bot)

  • WhatsApp phone number (E.164 format).
  • Display name as set in their WhatsApp profile.
  • Messages exchanged with your bot, plus any details they share (delivery address, order items).
  • Payment metadata: amount, status, timestamp, transaction reference. We never see the MoMo PIN or full card numbers.

3. How we use it

  • To run your bot: respond to messages, take orders, charge MoMo, deliver receipts.
  • To bill your subscription via Hubtel.
  • To provide aggregated, anonymized analytics in your dashboard.
  • To investigate abuse, fraud, or security incidents.
  • To send you product updates (you can opt out any time).

We do not use your customers' data to train AI, sell ads, or enrich third-party profiles.

4. Where it lives

All production data is stored in a PostgreSQL database hosted on Oracle Cloud Infrastructure (Morocco West / Casablanca region). Encrypted in transit (TLS 1.2+). Nightly database backups are taken when enabled; encryption and retention of those backups depend on the storage destination they're uploaded to.

5. Who we share it with

  • Meta: to send and receive WhatsApp, Instagram, and Messenger messages on your behalf.
  • Paystack: to charge cards and MoMo for order checkout and subscription billing.
  • Hubtel: legacy MoMo processor, kept only to settle any in-flight charge from before we switched to Paystack.
  • Clerk: authentication for merchant dashboard sign-in.
  • Firebase (Google): push notifications to the WA-B mobile app.
  • Cloud infrastructure: Oracle Cloud Infrastructure (Morocco West / Casablanca).
  • Compelled disclosure: only with a valid Ghanaian court order.

6. Your rights

You can, at any time:

  • Export all data in your account (CSV / JSON) from the dashboard.
  • Delete your account: irreversibly purges your data within 30 days.
  • Request access, correction, or deletion of personal data on behalf of your customers.

Email privacy@wa-b.com for any of these. We respond within 7 business days.

7. Cookies

The dashboard itself sets no first-party cookies — sign-in state is kept in your browser's session storage, not a cookie. Our authentication provider, Clerk, may set its own cookies as part of sign-in. We don't currently run any marketing-site analytics or tracking tool. See our Cookie Policy for details.

8. Retention

Active account data: kept while your account is active. Closed accounts: purged 30 days after closure. Billing records: 7 years (Ghana Revenue Authority requirement).

9. Children

WA-B is a B2B service and not intended for anyone under 18.

10. Changes

If we make material changes, we'll notify you on the dashboard and via email at least 30 days before they take effect.

11. Contact

Questions: privacy@wa-b.com · Data Protection Officer: Esi Owusu · WhatsApp: +233 30 000 0000.