CodSender

    Privacy Policy

    CodSender (codsender.com, app.codsender.com) is a WhatsApp Business messaging platform built on the official Meta WhatsApp Cloud API. Businesses use it to connect their WhatsApp number, answer customers in a shared team inbox, send approved message templates and, if they enable it, an AI assistant that drafts or sends replies. This policy explains what data we receive (including data from Meta), why we use it, who processes it for us, and how you can have it deleted. CodSender is operated by Mohamed Loutfi, Casablanca, Morocco, who is responsible for this data. Last updated: October 13, 2026.

    1. Information We Collect

    We only collect what is needed to run the service:

    Account information: the name, email address, phone number and password (stored hashed) of the business owner and team members who use CodSender, and billing details of the subscription.

    Data we receive from Meta (Platform Data): when a business connects its number through Meta Embedded Signup, Meta gives us an access token, the WhatsApp Business Account ID, phone number ID, display name, business profile and message-template status. We use the permissions whatsapp_business_management and whatsapp_business_messaging only to provide the messaging features the business asked for.

    Messages and media: the WhatsApp messages, photos, videos, voice notes and documents exchanged between the business and its customers, together with the customer's WhatsApp phone number and profile name, so the business can read and answer them in the inbox.

    Business data: contacts, labels, notes, orders, product catalogs and automations that the business creates or imports into CodSender, and any support request you send us.

    We also collect some technical data automatically:

    Technical data: IP address, browser and device type, log and security events, collected to keep the service secure and working. We do not use advertising trackers inside the app.

    2. How We Use Your Information

    • To send and receive WhatsApp messages on behalf of the business through the WhatsApp Cloud API, and show them in the team inbox.
    • To manage the business's WhatsApp assets: phone number registration, message templates, business profile and webhooks.
    • To run the optional AI assistant: when the business turns it on, the text of a conversation (and the transcript of voice notes) is processed by an AI model to draft or send a reply, read product information, or prepare an order for the business.
    • To provide support, keep the service secure, prevent abuse and fix problems.
    • To bill the subscription and send service notices.
    • We never sell personal data, never use WhatsApp messages or Meta Platform Data for advertising, and never use them to build profiles about people.

    3. Who Processes the Data (Service Providers)

    We do not sell or rent personal information. We share it only with these providers, who process it on our behalf and only to run CodSender:

    • Meta Platforms (WhatsApp Cloud API): delivers the messages between the business and its customers.
    • Contabo GmbH (France / Germany): hosts our servers and database, where the data is stored.
    • Google Cloud — Vertex AI / Gemini (United States): processes conversation text and voice notes only when the business enables the AI assistant. Google does not use this data to train its models.
    • Cloudflare, Inc. (United States): network security and content delivery for our websites.
    • Integrations the business chooses: if a business connects its own store, CRM or delivery company, the data it selects is sent to that service on the business's instruction.
    • Legal obligations: when required by a valid law, court order or legal process. We review each request and disclose the minimum necessary.

    4. Cookies

    We use essential cookies to keep you signed in and protect your session. We do not use advertising cookies inside the app. You can block cookies in your browser, but you will not be able to sign in.

    5. Data Retention and Deletion

    We keep data while the business's account is active. When a business deletes a WhatsApp channel, the Meta connection is revoked and that channel's conversations, messages and contacts are deleted from our database. Any request to delete an account or remaining data (including media files) is completed within 30 days, except billing records the law requires us to keep. Database backups are overwritten after 7 days. To ask for deletion, visit codsender.com/data-deletion or email [email protected].

    6. Your Rights

    Depending on where you live, you can:

    • Access and correct your personal information
    • Ask us to delete your data (codsender.com/data-deletion)
    • Receive your data in a portable format
    • Object to or limit some processing, including turning off the AI assistant
    • If you are a customer who chatted with a business that uses CodSender, that business controls your conversation; you can contact it directly or write to us and we will forward your request.

    To exercise these rights, contact us at: [email protected]

    7. Data Security

    Data is encrypted in transit (HTTPS), access tokens and secrets are kept on the server and never shown in the browser, every business can only see its own data, and access to our servers is restricted to key-based login. No method of transmission over the internet is 100% secure, but we work to protect your data and will notify affected businesses of any breach as required by law.

    8. Changes to This Policy

    We may update this policy from time to time. Changes are published on this page with a new "Last updated" date. Questions: [email protected].