Privacy Policy

Last updated: 2026-05-30

BizBrain Inbox (operated by MeraCRM, registered in India) collects and processes data on behalf of its customers to provide a WhatsApp webhook forwarding service.

What we collect

• Account data: email, name, password hash.
• WhatsApp connection metadata: WABA ID, Phone Number ID, access token (AES-256-GCM at rest), verified business name, display phone number.
• Webhook payloads: every webhook Meta sends to your connected number, stored for forwarding and activity-feed display.
• Delivery records: response status, latency, and truncated body for each delivery.

How we use it

• Deliver inbound WhatsApp webhooks to your destination URLs.
• Send messages via your connected number through our API.
• Show you an activity feed for debugging.

Where it lives

Cloudflare D1 (SQLite) in the APAC region. Access tokens AES-256-GCM encrypted at rest. No third-party sharing beyond Cloudflare (hosting) and Meta (the underlying API).

Data retention

Webhook payloads and delivery records are retained indefinitely by default. Request deletion at any time via /data-deletion.

Your rights

Right of access, correction, and deletion via your account. Right of erasure via the data-deletion endpoint.

Contact

BizBrain Inbox — MeraCRM
Email: fill in