Privacy Policy

WIBA ("the Service") is a business messaging platform operated by WIT. Indonesia ("we", "us") of Bandung, Indonesia. WIBA helps businesses manage customer conversations and campaigns on the WhatsApp Business Platform. This policy explains what data we handle and why.

Data we collect

Account data. When a business creates a WIBA workspace we store the company name, user names, work email addresses, and hashed passwords. We never store passwords in readable form.
Customer conversation data. On behalf of each business workspace, we process WhatsApp messages sent to and from that business: message text, sender phone numbers, profile names provided by WhatsApp, delivery status, and timestamps. This data belongs to the business workspace and is processed so the business can answer its customers.
Contact data. Businesses may store customer contact records in WIBA: phone number, name, labels, and marketing consent (opt-in) status with its timestamp.
Technical data. Standard server logs (IP address, browser type, access time) kept for security and troubleshooting.

How we use data

To deliver the Service: showing conversations in the inbox, sending replies and approved template messages through Meta's WhatsApp Business Platform, and producing delivery reports.
To enforce messaging rules: replies outside WhatsApp's 24 hour customer service window are blocked, and campaign messages go only to contacts with a recorded opt-in.
To secure accounts and prevent abuse.

We do not sell personal data. We do not use customer conversation content for advertising.

Data sharing

Messages are transmitted through Meta Platforms, Inc. as the operator of the WhatsApp Business Platform, under Meta's own terms and privacy policy. We share data with no other third parties except where required by law.

Storage and security

Data is stored on servers we control, with access limited to authorized personnel. Access tokens and credentials are stored securely. We retain conversation data for as long as the business workspace remains active; a business may request deletion of its workspace and associated data at any time (see our data deletion instructions).

Your rights

Customers of a business using WIBA can ask that business to access, correct, or delete their data, and we support the business in fulfilling such requests. We comply with Indonesia's Personal Data Protection Law (UU PDP No. 27/2022).

Contact