Privacy Policy

Last updated: 17 October 2026

Wago is a WhatsApp Business automation service made by Crawlink ("we", "us"), available on this website and as an Android app. Wago lets businesses connect their WhatsApp Business account and send, receive and automate WhatsApp messages. This policy explains what data we handle, why, who we share it with, how long we keep it, and how to delete it.

Who this applies to

  • Customers — businesses and their team members who sign in to Wago, on the web or in the app.
  • End users — people who exchange WhatsApp messages with a business that uses Wago. For that data the business is the controller and we process it on its behalf.

Data we collect

  • Account data: your name and email address. If you sign in with Google we also receive your Google profile picture and Google's account identifier. If you sign in with email and a password, we store the password only as a salted one-way hash (PBKDF2) — never the password itself — and we record when you confirmed your email address. We keep a record of your signed-in devices (a hashed session token and the browser or app version) so you can stay signed in and so a password change can sign other devices out.
  • Organisation data: organisation name, address, tax number and settings you enter.
  • WhatsApp connection data: the WhatsApp Business Account ID, phone number ID, business ID and the access token granted through Meta (Embedded Signup or a token you paste), used only to operate your account. The token is encrypted at rest and never sent to your browser.
  • Message data: WhatsApp messages sent and received through your number, including phone numbers, profile names, message text, media, locations shared with you, delivery status and timestamps. For numbers connected in coexistence mode, this includes messages sent from the WhatsApp Business app, synced contacts and, if you choose, chat history.
  • Content you create: contacts, templates, catalogues, knowledge bases, workflows and campaigns.
  • Billing data: your plan, usage counts, orders, top-ups and invoices.
  • Technical data: IP address, browser or device type and request logs, kept for security and debugging.

How we use data

  • To sign you in, keep your account secure and send account emails (confirming your address, resetting a password, notices about your account).
  • To deliver and receive WhatsApp messages and show conversations in your console.
  • To run the automations, AI replies and campaigns you configure.
  • To bill for usage, provide support and keep the service secure.
  • To comply with legal obligations and WhatsApp's Business and Commerce policies.

We do not sell personal data and we never use message content for advertising.

WhatsApp Business Platform (Meta)

Wago is a Tech Provider on Meta's WhatsApp Business Platform. When you connect a number, Meta gives Wago access to that WhatsApp Business account through the permissions you approve in Meta's own window. We use that access only to send and receive your messages, manage your message templates, and receive the delivery updates and (for coexistence) the app's messages, contacts and history that Meta sends to the webhook. Message content passes through Meta's systems as part of WhatsApp itself and is governed by Meta's terms and privacy policy as well as this one. You can remove Wago's access at any time from Meta Business Settings → Integrations, or with Remove in Settings → WhatsApp connection.

The Android app

  • The app shows the same Wago console as the website and stores your sign-in on the device.
  • It shows a banner advertisement from Google AdMob under the screen. AdMob may use your device's advertising ID and collect device and usage information to serve and measure ads, as described in Google's privacy policy. You can reset or delete the advertising ID, or opt out of personalised ads, in your phone's settings. No message, contact or account content is shared with AdMob.
  • The app does not use your location, camera, microphone or contacts.
  • Nothing is sold inside the app; plans and top-ups are managed on the website.

Sharing

We share data only with the providers needed to run Wago:

  • Meta Platforms (WhatsApp Business Platform) — to send and receive messages.
  • Cloudflare — hosting, database, file storage and the account emails we send.
  • Google — Google sign-in (if you use it) and, in the Android app, AdMob ads.
  • AI model providers (Groq and Cloudflare Workers AI) — only the text needed to generate a reply or answer from your catalogue, when you use AI features.
  • Razorpay — when you pay for a plan or top-up online, the payment is processed by Razorpay Software Private Limited. Your card, UPI or bank details go to Razorpay, never to us; we keep the order, amount and invoice.
  • DataMold (also by Crawlink) — only if you connect it, the fields your workflows save there.
  • CalendarBook (also by Crawlink) — only if you connect it, the name and WhatsApp number a booking is made under, and the bookings your workflows look up or cancel.
  • Authorities, when required by law.

Retention

We keep account and message data while your account is active. Conversations keep a rolling window of recent messages. When you delete your account or your organisation, the data is deleted straight away from the live service and from backups within 30 days, except bills and paid top-ups, which we keep for eight years because Indian tax law requires it.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider; WhatsApp access tokens are additionally encrypted with our own key. Each organisation's messages are stored in its own isolated database. Sign-in attempts and account emails are rate-limited. Access is limited to people who need it to run the service.

Your rights

You can access, correct, export or delete your data, and withdraw consent, from your account or by writing to us. End users who messaged a business should contact that business first; we will help it respond.

Deleting your account and data

You can delete your Wago account yourself, at any time:

  1. In the console or the Android app, open Settings → Profile and choose Delete my account. If nobody else uses your organisation, it is deleted with everything in it — conversations, contacts, templates, workflows, campaigns, files, API keys and the WhatsApp connections. If others use it, only your account is removed.
  2. Or email support@crawlink.com from your account's email address with the subject "Wago account deletion", and we delete it within 30 days.

The full steps, and what is kept, are on Delete your account. To stop Meta sharing data with Wago, remove Wago from Meta Business Settings → Integrations; requests made through Facebook can be checked on Data deletion status.

Children

Wago is a business service and is not directed to anyone under 18.

Changes

We will post changes on this page and update the date above. Significant changes are emailed to account owners.

Contact

Crawlink, Bengaluru, Karnataka, India. Write to support@crawlink.com