WAPit

Privacy Policy

Last updated: 9 July 2026

1. Introduction

WAPit ("we", "us", or "our") is a WhatsApp messaging platform operated from South Africa. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African legislation.

This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform at wapit.co.za (the "Service").

2. Information Officer

Our designated Information Officer can be contacted at:

  • Email: info@wapit.co.za
  • Website: wapit.co.za
  • Location: South Africa

3. Information We Collect

3.1 Account Information

When you register for WAPit, we collect:

  • Full name
  • Email address
  • Phone number
  • Company name
  • Password (stored in hashed format)

3.2 Messaging Data

When you use our messaging services, we process:

  • Recipient phone numbers
  • Message content (text, media URLs, templates)
  • Delivery status and timestamps
  • WhatsApp message IDs

3.3 Payment Information

Payment processing is handled by PayFast (Pty) Ltd. We do not store your credit card or banking details directly. We retain:

  • PayFast transaction references
  • Payment amounts and dates
  • Subscription status and billing history

3.4 Technical Information

We automatically collect:

  • IP address
  • Browser type and version
  • Usage patterns and timestamps
  • API request logs

4. How We Use Your Information

We use your personal information to:

  • Provide and maintain the messaging service
  • Process your messages through the Meta WhatsApp Cloud API
  • Manage your account, subscriptions, and billing
  • Send service-related communications (account verification, billing notifications)
  • Monitor and enforce platform usage limits and policies
  • Prevent abuse, fraud, and spam
  • Comply with legal obligations
  • Improve our service and develop new features

5. Legal Basis for Processing

Under POPIA, we process your personal information based on:

  • Contract: Processing necessary to fulfil our service agreement with you (Section 11(1)(b))
  • Legitimate interest: For platform security, fraud prevention, and service improvement (Section 11(1)(f))
  • Legal obligation: When required by law or regulation (Section 11(1)(c))
  • Consent: Where you have provided explicit consent for specific uses (Section 11(1)(a))

6. Third-Party Data Sharing

We share your information with:

  • Meta Platforms (WhatsApp Cloud API):Recipient phone numbers and message content are transmitted to Meta to deliver your messages. Meta's privacy policy applies to their processing.
  • PayFast (Pty) Ltd: Payment details are processed by PayFast for transaction processing.
  • Google Cloud Platform:Our infrastructure is hosted on Google Cloud (region: europe-west1). Data is processed in accordance with Google's data processing terms.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

7. Cross-Border Data Transfers

Your data may be transferred to servers located outside South Africa (specifically within the European Union via Google Cloud Platform, and to Meta's global infrastructure for message delivery). These transfers comply with Section 72 of POPIA, as the recipient countries provide adequate data protection or we have appropriate safeguards in place.

8. Data Retention

  • Account data: Retained while your account is active, and for 12 months after account closure.
  • Message logs: Retained for 90 days for delivery tracking and dispute resolution.
  • Payment records: Retained for 5 years in accordance with South African tax and financial regulations.
  • API logs: Retained for 30 days for security and debugging purposes.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Encryption in transit (TLS/SSL)
  • Encrypted database connections
  • Password hashing (bcrypt/scrypt)
  • Role-based access controls
  • Regular security reviews
  • API authentication via JWT tokens

10. Your Rights Under POPIA

You have the right to:

  • Access: Request confirmation of what personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Object: Object to the processing of your personal information
  • Withdraw consent: Withdraw previously given consent at any time
  • Complaint: Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@wapit.co.za. We will respond within 30 days.

11. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the operation of the Service and cannot be disabled.

12. Children's Privacy

Our Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: info@wapit.co.za
  • Website: wapit.co.za/contact

15. Information Regulator

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator of South Africa:

  • Website: https://inforegulator.org.za
  • Email: complaints.IR@justice.gov.za
  • Tel: 012 406 4818