Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how Sagwass, a product operated by SUBANDGAIN LTD ("Sagwass", "we", "us", or "our"), collects, uses, discloses, retains, and protects information in connection with our WhatsApp Business messaging platform available at https://sagwass.com (the "Service"). By accessing or using the Service, you agree to the practices described in this Policy.

1. Who this Policy applies to

This Policy applies to two groups:

• Business Users — the businesses and their team members (owners and agents) who register for and operate a Sagwass workspace.
• End Users — the individuals who message a Business User's WhatsApp number and whose conversations are handled through Sagwass.

For messages exchanged between Business Users and End Users, the Business User is the data controller of that conversation content, and Sagwass acts as a data processor that processes it on the Business User's behalf and instructions. Sagwass is the controller of Business User account and billing data.

2. Information we collect

a. Account and business information

• Name, email address, and password (stored only as a secure hash) of Business Users.
• Business/workspace details such as business name, timezone, and working hours.
• WhatsApp Business Account (WABA) identifiers, phone number IDs, and access tokens that you connect to Sagwass to send and receive messages.
• Billing and subscription information (plan, transaction references). Card details are handled by our payment processor and are not stored on our servers.

b. End-User and messaging data (WhatsApp Business Platform)

When End Users contact a Business User, we process, on the Business User's behalf:

• The End User's WhatsApp phone number and WhatsApp profile name.
• The content of messages (text, and media such as images, documents, and audio), message timestamps, and delivery/read status.
• Contact records, labels, notes, and conversation assignment created by Business Users.

c. Technical and usage information

• Log data such as IP address, browser type, device information, and pages accessed.
• Authentication cookies (including a secure, httpOnly session cookie) strictly necessary to keep you signed in and to secure the Service.
• Webhook events and API responses received from Meta relating to your messages and message templates.

3. How we collect information

• Directly from you when you register, configure a workspace, or contact support.
• From Meta / the WhatsApp Business Cloud API when End Users message your connected number and through webhooks and Graph API calls you authorize.
• Automatically through cookies and server logs as you use the Service.

4. How we use information

• To provide, operate, secure, and maintain the Service, including sending and receiving WhatsApp messages, running campaigns from approved templates, and automating replies.
• To authenticate users and enforce workspace and role-based access.
• To route and assign conversations, apply working-hours logic, and deliver features you enable.
• To process subscriptions and payments, and to prevent fraud and abuse.
• To provide customer support and respond to your requests.
• To comply with legal obligations and the WhatsApp Business and Meta Platform Terms.

We do not sell your personal information or End-User data, and we do not use WhatsApp message content for advertising or for training unrelated products.

5. How we share information

We share information only as necessary and with appropriate safeguards:

• Meta Platforms — to transmit and receive messages via the WhatsApp Business Cloud API, as required to deliver the Service.
• Service providers — hosting, storage, and payment processors that process data under contract and on our instructions.
• Business Users — End-User conversation data is made available to the Business User who owns the WhatsApp number the End User contacted.
• Legal and safety — when required by law, regulation, legal process, or to protect the rights, property, or safety of Sagwass, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. Messaging and contact data is retained on behalf of the Business User until the Business User deletes it, closes their workspace, or requests deletion. We may retain limited information where required for legal, accounting, or security purposes. When retention is no longer required, we delete or anonymize the information.

7. Data security

We use industry-standard safeguards including encryption of sensitive credentials (for example, WhatsApp access tokens are stored encrypted at rest), encrypted transport (HTTPS/TLS), hashed passwords, httpOnly session cookies, and role-based access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International data transfers

Your information may be processed and stored in countries other than your own. Where data is transferred internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

9. Your rights and choices

Depending on your location, you may have the right to:

• Access, correct, or update your personal information.
• Request deletion of your personal information ("right to be forgotten").
• Object to or restrict certain processing, and request data portability.
• Withdraw consent where processing is based on consent.

Business Users can manage and delete much of their data directly within the Service. To exercise any right, contact us at support@sagwass.com. We will respond within the timeframe required by applicable law.

10. Data deletion requests

Business Users may delete contacts, conversations, and other data from within their workspace, or email support@sagwass.com to request deletion of their account and associated data.

End Users who have messaged a business using Sagwass and who wish to have their data deleted may contact that business directly, or email support@sagwass.com with the WhatsApp number and business involved, and we will act on the request and coordinate with the relevant Business User.

11. Children's privacy

The Service is not directed to individuals under the age of 18 (or the age of majority in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party services and links

The Service integrates with third parties such as Meta and payment processors, and may link to third-party websites. Their processing of your information is governed by their own privacy policies, and we encourage you to review them.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have questions or requests regarding this Policy or your data, contact us: