← Back to home

Privacy Policy

Last updated: June 15, 2026

1. Who we are

WP Cart Recovery ("we", "our", "us") is a software service that helps businesses identify abandoned sales opportunities in their WhatsApp Business conversations and recover lost leads. Our contact email is [email protected].

2. What data we collect

We collect the following categories of data:

  • Account information: your business name, email address, and hashed password when you register.
  • WhatsApp Business account data: your WhatsApp Business Account ID (WABA ID), phone number ID, and access token when you connect your account via Meta's Embedded Signup.
  • Conversation data: WhatsApp messages delivered to your connected business phone number via the WhatsApp Business API webhook, and/or exported WhatsApp chat files you upload.
  • AI analysis results: purchase intent scores, lead stage classifications, and suggested follow-up messages derived from your conversation data.
  • Push notification tokens: browser push subscription data used to deliver real-time alerts to your device.
  • Usage data: server logs including IP addresses, request timestamps, and browser identifiers.

3. How we use your data

  • To authenticate you and operate your account.
  • To receive WhatsApp messages via webhook and analyze them for purchase intent using AI.
  • To display leads, scores, and suggested follow-ups in your dashboard.
  • To send you browser push notifications when high-intent leads are detected.
  • To maintain service security and diagnose technical issues.

We do not use your conversation data to train AI models. We do not sell your data to third parties.

4. Third-party services

We share data with the following processors to operate the service:

  • Meta Platforms, Inc. — WhatsApp Business API and OAuth authentication. Your use of the WhatsApp connection is subject to WhatsApp's Business Policy.
  • OpenAI, L.L.C. — AI analysis of conversation excerpts. We send minimal, anonymized message content (no phone numbers or contact names). Subject to OpenAI's Privacy Policy.
  • Database and hosting provider — we use a managed PostgreSQL database and cloud hosting. Data is stored in encrypted form at rest and in transit.

5. Data retention

We retain your account data for as long as your account is active. Conversation data and AI analysis results are retained for up to 90 days, after which they are automatically deleted. You may request earlier deletion at any time (see Section 7).

6. WhatsApp user data

When your customers message your WhatsApp Business number, their messages and phone numbers are processed by our service on your behalf. As a business using WP Cart Recovery, you are the data controller for your customers' data. You are responsible for informing your customers how their messages are handled and for complying with applicable privacy laws (including GDPR if applicable) when using our service.

7. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and all associated data.
  • Disconnect your WhatsApp Business account at any time from the dashboard.
  • Object to or restrict certain processing.

To exercise any of these rights, email [email protected] with the subject line "Privacy Request". We will respond within 30 days.

8. Security

All data is transmitted over HTTPS. Access tokens are stored encrypted in our database. We do not log or expose WhatsApp access tokens beyond what is required to operate the service.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to your registered address. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy: [email protected]