Privacy Policy
- W-Vault is a personal messaging tool. It receives the WhatsApp messages you send to its WhatsApp Business number so its operator can read, keep and answer them.
- Your messages are stored encrypted. They are never sold, never used for advertising, and never shared with other customers.
- You can ask for your data to be deleted at any time by emailing raoof.r12@gmail.com. See how to delete your data.
1. Who we are
W-Vault (Meta app ID 1306158711456072) is operated by Mohammad Raouf Abedini, an individual based in Sydney, Australia ("we", "us"). W-Vault is part of the open-source comms gateway. We decide how the information described here is used, and we are responsible for it.
Contact: raoof.r12@gmail.com
2. What this policy covers
This policy covers information we receive when you message, call or interact with our WhatsApp Business number through the WhatsApp Business Platform (Cloud API) operated by Meta. It does not cover WhatsApp itself. Meta's own use of your information is described in the WhatsApp Privacy Policy. W-Vault does not use Facebook Login and receives no data from Facebook or Instagram accounts.
3. Information we collect
We collect only what WhatsApp delivers to us when you interact with our number:
| Information | Examples | Source |
|---|---|---|
| Identifiers | Your WhatsApp phone number or WhatsApp ID and, where WhatsApp provides them, your username or user ID | WhatsApp, when you message us |
| Profile name | The name shown on your WhatsApp profile | |
| Message content | Text, and media or documents you choose to send (photos, files, voice notes), reactions and replies | You, through WhatsApp |
| Message metadata | Message IDs, timestamps, and delivery and read statuses of messages we send you | |
| Group activity | If you are in a WhatsApp group our number belongs to: your messages there, and when you join or leave | |
| Contact details you give us | Anything you choose to tell us in a conversation, such as your name or email | You |
We do not collect your location, contacts list, device information, browsing information or payment information. This website sets no cookies and runs no analytics or tracking.
4. How we use it
- To communicate with you: to read and reply to your messages, and to send messages you have agreed to receive. This is necessary to provide the conversation you started, and it is our legitimate interest in answering you.
- To keep a record of our conversations: so we can follow up and refer back to what was said.
- To keep the service secure: for example, to confirm that each message genuinely came from WhatsApp and to reject forged ones.
In line with the WhatsApp Business Messaging Policy, we use information we receive about you, other than the content of our conversations, only as reasonably necessary to support messaging with you. We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.
We message you only after you have given us your number and agreed to hear from us. Reply STOP, or tell us in any words, and we will stop messaging you.
5. Who we share it with
We do not share your information with other customers or with third parties for their own purposes. We use a small number of service providers who process it on our behalf:
| Provider | What they do | What they can see |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Delivers messages between you and us | Messages in transit, as described in Meta's Cloud API data privacy documentation |
| Cloudflare | Holds messages that arrive while our computer is offline, for up to 30 days, then deletes them | Only encrypted data it cannot read. The decryption key never leaves our computer. |
| Anthropic (Claude) | An AI assistant we may use to help read, summarise or draft replies | Only the message content we choose to give it, when we ask for help, under Anthropic's terms and privacy policy |
We may also disclose information if the law requires it, or to protect the rights, safety or security of anyone.
6. Where it is stored and how it is protected
- Your messages are stored on the operator's own computer, in an encrypted database (SQLCipher) that only the operator can open.
- While our computer is offline, incoming messages wait in an encrypted mailbox run on Cloudflare. They are encrypted with a key held only on our computer.
- Every message is checked against WhatsApp's signature before we accept it, and every change we make is recorded in a tamper-evident audit log.
Our service providers may process data outside Australia, including in the United States and the European Union, under their own safeguards.
7. How long we keep it
- Messages waiting in our Cloudflare mailbox: deleted as soon as we collect them, and in any case after at most 30 days.
- Our conversation history: kept while we have an ongoing conversation or relationship with you, and deleted when you ask or when it is no longer needed.
- Meta's copies: Meta keeps messages for up to 30 days to operate the service, as described in Meta's documentation.
8. How to delete your data
You can ask us to delete everything we hold about you at any time:
- Email raoof.r12@gmail.com with the subject "W-Vault data deletion", or send the word DELETE to our WhatsApp number.
- Tell us the WhatsApp number you messaged us from, so we can find your data. We may ask you to confirm the request from that number.
- We delete your messages, media and identifiers from our records within 30 days and confirm to you when it is done.
Deleting your data does not delete the messages in your own WhatsApp app. To remove those, delete the chat in WhatsApp.
9. Your rights
Depending on where you live, including under the Australian Privacy Act 1988 and the EU and UK GDPR, you may have the right to:
- access the information we hold about you;
- correct it;
- delete it;
- restrict or object to how we use it;
- receive a copy of it.
To use any of these rights, email raoof.r12@gmail.com. We will reply within 30 days. If you are not satisfied, you can complain to your local privacy regulator. In Australia, that is the Office of the Australian Information Commissioner.
10. Children
W-Vault is not directed at children under 16. We do not knowingly collect information from them. If you believe a child has messaged us, contact us and we will delete their information.
11. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your information, we will tell you before it takes effect. Every earlier version is kept in the public history of this page.
12. Contact
Mohammad Raouf Abedini, Sydney, Australia · raoof.r12@gmail.com