Legal • WhatsApp Business API

Privacy Policy

This Privacy Policy explains how PT Kai Labs Indonesia collects, uses, and protects information when businesses and their customers communicate through our WhatsApp Business API integration.

Last updated: September 2026

1. Overview

PT Kai Labs Indonesia (“we”, “our”, or “us”) is a software development company. We operate a WhatsApp Business API integration (whatsapp.kailabs.id) that lets our business clients send and receive WhatsApp messages with their own customers via Meta's WhatsApp Business Platform (Cloud API).

2. Information We Collect

When the API is used, we may process:

  • WhatsApp phone number (sender/recipient)
  • Message content, media, and timestamps sent through the integration
  • Message delivery/read status (message status callbacks)
  • WhatsApp Business Account (WABA) and phone number identifiers
  • Basic technical logs (IP address, request metadata) for debugging and security

3. How We Use Information

  • Deliver, route, and log messages between our clients and their end users
  • Verify webhook requests and secure the integration
  • Provide support, troubleshoot issues, and improve reliability
  • Comply with Meta's WhatsApp Business Platform policies

4. Sharing

We do not sell personal information. Data is shared only with Meta (as required to operate the WhatsApp Business Platform) and with the specific business client on whose behalf a conversation is being handled. We do not share data with unrelated third parties.

5. Data Retention

Message and log data is retained only as long as necessary to provide the service, support debugging, and meet legal obligations, after which it is deleted or anonymized.

6. Security

Webhook traffic is verified using Meta's signed payloads (X-Hub-Signature-256), and access tokens/app secrets are kept server-side. We apply reasonable technical and organizational safeguards, but no system is 100% secure.

7. Your Rights

You may request access to, correction of, or deletion of your data by contacting us, or via our Data Deletion page.

8. Children's Privacy

This service is not directed to children under 13.

9. Policy Changes

Updates will be posted on this page with a revised "Last updated" date.

10. Contact