Privacy Policy

Last updated: 24 September 2026

Wasel is a platform operated by Code Eleven that lets businesses send WhatsApp messages to their customers and receive replies. This page explains what we collect, why, and how it is deleted.

What we collect

  • Account data: your email, and an optional WhatsApp number for password recovery.
  • Project data: project name and your Meta WhatsApp Business account identifiers.
  • Your contacts: the numbers and names you upload.
  • Messages: what you send through the platform, what your customers reply, and delivery status.
  • Card reference: last four digits and a label only — to identify a card, never to charge it.

What we do not collect

  • Full card numbers: the system rejects any input longer than four digits.
  • Verification codes: generated and sent, never stored by us — only your server compares them.
  • Passwords: never stored by us; handled hashed by our authentication provider.

Processors

We rely on Meta Platforms (sending and receiving WhatsApp messages), Supabase (database and authentication) and Vercel (hosting). We do not sell your data or share it for advertising.

Tenant isolation

Each subscriber sees only their own data. Queries are scoped to the owner, and an API key identifies its own project — so no subscriber can reach another's data.

Retention and deletion

Data is kept while your account exists. You can delete your account at any time from the Account page; this permanently removes your account, projects, contacts, messages and templates, and cannot be undone.

Requests from public authorities

If a government or judicial authority asks us for user data, we commit to the following:

  • No request is acted upon before its legality is reviewed and the requesting authority and its legal basis are confirmed.
  • We challenge any request we consider unlawful or broader than its legal basis.
  • We disclose only the minimum data necessary, and never widen the scope of a request.
  • Every request, our response, the legal reasoning and the people involved are documented.
  • Verbal requests are not accepted; requests are in writing, the responsible manager is notified within 24 hours, and where there is doubt a lawyer is consulted before any disclosure.

This is an internal operating policy, not legal advice.

Contact

For any question or deletion request: info@codeeleven.co