Privacy Policy

Last updated: 2026-05-30

BizBrain Inbox (operated by MeraCRM, registered in India) collects and processes data on behalf of its customers to provide a WhatsApp webhook forwarding service.

What we collect

  • Account data: email, name, password hash.
  • WhatsApp connection metadata: WABA ID, Phone Number ID, access token (AES-256-GCM at rest), verified business name, display phone number.
  • Webhook payloads: every webhook Meta sends to your connected number, stored for forwarding and activity-feed display.
  • Delivery records: response status, latency, and truncated body for each delivery.

How we use it

  • Deliver inbound WhatsApp webhooks to your destination URLs.
  • Send messages via your connected number through our API.
  • Show you an activity feed for debugging.

Where it lives

All data lives on Cloudflare: D1 (SQLite, APAC region) for connection, message, webhook, and audit records; R2 for inbound WhatsApp media and our log archive; Queues for webhook forwarding; and Cloudflare Email Sending for transactional mail. Access tokens are AES-256-GCM encrypted at rest. No third-party sharing beyond Cloudflare (hosting) and Meta (the underlying API).

Data retention

Webhook payloads and delivery records are retained indefinitely by default. Request deletion at any time via /data-deletion.

Your rights

Right of access, correction, and deletion via your account. Right of erasure via the data-deletion endpoint.

Contact

BizBrain Inbox — MeraCRM
Email: compliances@bizbrain.in