This policy covers a private automation service operated by one individual for their own infrastructure. It is not a product, it is not offered to the public, and no account can be created on it. Its only purpose is to let the operator receive alerts from, and send instructions to, systems they own.
The operator alone. Messaging will be limited to an explicit allowlist of the operator's own phone numbers, and the service will not process, store, or answer a message from any other sender.
The service requests no contact list, address book, location, payment information, advertising identifier, or biometric data, and infers none.
To deliver the operator's own infrastructure alerts to the operator, and to carry the operator's replies back. There is no other use. Content is never used for advertising, profiling, or model training, and is never sold, licensed, or shared with an advertiser, data broker, or analytics provider.
Meta Platforms operates WhatsApp and necessarily processes messages in transit under its own terms. Cloudflare hosts this page, and will host the public endpoint that receives WhatsApp's delivery callbacks once the service is in operation. No other processor is used. This page runs no analytics, loads no third-party resource, and sets no cookies.
A message held at the public endpoint awaiting collection will be deleted once collected, and no later than 24 hours after arrival, the queue retention limit on the free plan. Records the operator keeps on their own systems are retained only while useful for diagnosing that infrastructure.
The service is designed so that an inbound callback is accepted only when its cryptographic signature verifies, so that credentials live in an encrypted secret store and never in source control, and so that message bodies are not written to logs at the public endpoint. These are design commitments for the service, not a description of any additional system.
Because the only intended participant is the operator, there is no third-party data to export. The operator will be able to stop the service and delete its stored messages at any time. Anyone who believes their information reached this service in error may write to the address below, and it will be deleted.
The service is not directed to children and is not available to anyone other than its operator.
If this policy changes, the date above changes with it.