Last updated 29 September 2026

Privacy notice

Draft, to be reviewed. This is a plain-language placeholder written for a small service. It has not been reviewed by a lawyer yet and may change.

This notice explains what WhatsHive stores when you use the dashboard, the API or the request form, where it lives and what we do with it. Workspace owners decide which numbers and contacts are added, and are responsible for having permission to message those people.

1What we collect

To run your workspace we store:

Account details for you and your teammates: name, username or email, role and a hashed password.
WhatsApp data for the numbers you link: chats, messages, media, delivery status and group names, plus the contacts and lists you import.
Things you create: templates, quick replies, automation rules, broadcasts, API keys and webhook settings.
Technical logs: sign-ins, API requests and webhook deliveries, used for reports, security and debugging.

When you fill in the request form we keep what you entered (name, email, phone, company and your answers) so we can reply.

2How WhatsApp is connected

Numbers are linked as a WhatsApp linked device, the same way WhatsApp Web works. Messages still travel through WhatsApp, which processes them under its own terms and privacy policy. WhatsHive is independent and is not affiliated with WhatsApp or Meta.

3Where data is stored

WhatsHive runs on infrastructure we operate in India. Data is kept in a MongoDB database, either on MongoDB Atlas or on servers we host ourselves, and uploaded media is stored alongside it. Connections use HTTPS, passwords are hashed, and two-factor sign-in is available for every account.

4How we use it

To send, receive and show your messages, and to run the automations and reports you set up.
To keep the service secure, prevent abuse and fix problems.
To contact you about your workspace, your account or important changes.

5What we don't do

We don't sell your data, show ads, or use your messages or contacts for anything other than running your workspace. We don't message your contacts on our own behalf.

6Service providers

We rely on a small number of providers to run WhatsHive, such as hosting, the database service and, if enabled on the request form, Cloudflare Turnstile to block spam. They only process data as needed to provide their service.

7Cookies and local storage

We use a session cookie to keep you signed in, a small cookie that tells the homepage you're signed in, and browser storage to remember your light or dark theme. There are no advertising or third-party tracking cookies.

8How long we keep data

Inbox history is kept for the period set in your workspace settings. Other data stays while your workspace is active. When a workspace is closed we delete its data within a reasonable time, except where we must keep records by law. Request-form entries that don't become a workspace are deleted once they're no longer needed.

9Your choices

You can ask to see, correct, export or delete your data by writing to [email protected]. If you're a contact of a team that uses WhatsHive, please reach out to that team first; we'll help them respond.

Questions? Write to [email protected].