Privacy Policy
Last updated: September 25, 2026
1. Introduction
WhatsScale is operated by Zenedge Consulting, registered in the Netherlands. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our WhatsApp automation platform.
By using WhatsScale, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.
2. Data We Collect
Account Information
- Email address
- Password (encrypted)
- Account preferences and settings
WhatsApp Data
- WhatsApp session information required to send messages
- Contact names and phone numbers you interact with
- Message content and media you send through our platform
- Message delivery status and timestamps
Usage Data
- Features used and actions taken within the dashboard
- API usage and request logs
- Error logs for troubleshooting
AI Automation Builder
- If you build automations by conversation in the Automations tab, we keep what you type or attach (images, PDFs, CSV and text files), what the assistant does with it, and the automation it produces
- Your conversation is processed by the AI service providers we use to run the assistant, acting on our behalf. They may not use it to train their own models
- With your consent, shown before your first conversation, we use conversations to make the assistant better for you and for other WhatsScale users. We do not use the messages your automations send or receive for this
- Files you attach are used only inside the conversation, and are deleted if you close the conversation without turning its automation on
Product Analytics
To understand and improve onboarding, we record product-usage events tied to your authenticated account, such as:
- Which onboarding steps you reach and complete
- The industry segment you select
- Which experience variant you were shown (for A/B testing)
- Aggregate funnel and feature-adoption metrics
These analytics events never include your message content or recipient phone numbers, and we use no anonymous or cross-site tracking for them — every event is linked only to your logged-in account.
3. How We Use Your Data
We use your data to:
- Provide and maintain the WhatsScale service
- Send WhatsApp messages on your behalf
- Process scheduled messages at your specified times
- Display analytics and message history in your dashboard
- Send important service notifications (e.g., security alerts)
- Improve our platform based on usage patterns
- Run the AI automation builder, and, with your consent, improve it
- Respond to support requests
4. Data Storage and Security
Your data is stored securely using industry-standard practices:
- Data is stored on secure servers within the European Union
- All data transmission is encrypted using TLS/SSL
- Passwords are hashed and never stored in plain text
- API keys are generated securely and can be regenerated at any time
- Access to production systems is restricted and logged
5. Third-Party Services
We use the following third-party services to operate WhatsScale:
- Supabase - Database and authentication (EU region)
- DigitalOcean - Server hosting (EU region)
- Resend - Transactional emails
- pip0 - Workflow automation engine and AI automation builder (self-hosted, EU region)
- AI service providers - Run the AI automation builder's assistant on our behalf. Where they are outside the EU, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses
These providers have their own privacy policies and are GDPR-compliant. We do not sell your data to any third parties.
6. Your Rights (GDPR)
As a user in the European Union, you have the following rights under GDPR:
- Right to Access - Request a copy of your personal data
- Right to Rectification - Request correction of inaccurate data
- Right to Erasure - Request deletion of your data
- Right to Portability - Request your data in a portable format
- Right to Object - Object to certain processing of your data
- Right to Withdraw Consent - Withdraw consent at any time
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
7. Cookies
WhatsScale only uses essential cookies required for the service to function, specifically for authentication and session management. We do not use tracking cookies, advertising cookies, or any non-essential cookies. As these are strictly necessary cookies, no consent is required under GDPR.
8. Data Retention
We retain your data as follows:
- Account data - Retained while your account is active
- Message history - Retained for 90 days, then automatically deleted
- Media files - Retained for 24 hours, then automatically deleted
- Usage logs - Retained for 30 days for troubleshooting
- AI builder conversations - Retained while your account is active. Files attached to a conversation you close without turning its automation on are deleted when it closes
When you delete your account, all associated data is permanently removed within 30 days. Deleted data may remain in database backups for up to 6 months, until those backups expire. Backups are used only to restore the service after a failure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our website. Your continued use of WhatsScale after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: