Privacy Policy
Last updated: 28 September 2026
The Code Smith WA is operated by The Code Smith ("we", "us"). This policy explains what information we process when a business connects its WhatsApp Business account to The Code Smith WA, and when people message those businesses.
Information we process
- Business account data: WhatsApp Business Account ID, phone number ID, display phone number and an access token issued by Meta when the business completes Embedded Signup. Tokens are stored encrypted.
- Messages: messages exchanged between the business and its customers on WhatsApp, including the customer's WhatsApp number and profile name, message content and delivery status. If the business uses the WhatsApp Business app together with The Code Smith WA, recent chat history and contacts it chooses to share may be synced.
- Enquiry details: details a customer chooses to share in chat (for example name, company, website, email and a preferred meeting time), which are passed to the business.
- Admin users: email address and a hashed password for people who log in to the dashboard.
How we use it
- To receive and send WhatsApp messages on the business's behalf through Meta's WhatsApp Business Platform.
- To generate automated replies using an AI model, based on the business's own information.
- To notify the business about new enquiries by email.
We do not sell personal information and do not use it for advertising.
Service providers
Messages are delivered by Meta Platforms (WhatsApp). Automated replies are generated using an AI model provider (currently OpenAI) through our self-hosted AI platform. Email notifications are sent through our email provider. Data is hosted on servers we operate.
Retention
We keep message and enquiry data for as long as the business uses The Code Smith WA, or until deletion is requested. When a business disconnects, its data is deleted within 30 days unless the law requires us to keep it.
Your choices
If you message a business that uses The Code Smith WA, you can ask that business, or us, to delete your data. See Data deletion instructions. You can stop automated messages at any time by replying STOP or blocking the number in WhatsApp.
Security
Access tokens are encrypted at rest, admin passwords are hashed, and all traffic uses HTTPS.
Contact
The Code Smith — prashant@thecodesmith.tech