Who we are
Coyot WaBI (“the Service”) is a WhatsApp Business messaging platform operated by Coyot AI (“we”, “us”, “our”). The Service lets merchants manage contacts, message templates, and customer conversations through the WhatsApp Business Platform (Cloud API). We connect to Meta’s WhatsApp Cloud API as a registered Tech Provider. Merchants connect their own WhatsApp Business Account; Meta bills merchants directly for message delivery.
Information we collect
We collect and process the following categories of data:
- Account data — your name, email address, business name, and authentication credentials when you sign up.
- WhatsApp Business Account data — the WhatsApp Business Account ID, phone number ID, display phone number, and a Meta-issued access token, which we store encrypted at rest.
- Contact data — phone numbers, names, and any custom fields you import for the customers you wish to message, along with their opt-in status and source.
- Message data — the content, delivery status, and timestamps of messages sent and received through the Service.
- Usage data — logs and technical metadata necessary to operate, secure, and debug the Service.
How we use your data
- To provide, operate, and maintain the Service.
- To send WhatsApp messages on your behalf to recipients you have a lawful basis to contact.
- To display delivery and read receipts and campaign analytics back to you.
- To secure the Service and prevent abuse or fraud.
- To comply with our legal and regulatory obligations.
Consent and opt-in
You are responsible for obtaining valid opt-in consent from every contact you message through the Service, as required by Meta’s WhatsApp Business Messaging Policy and India’s Digital Personal Data Protection Act, 2023 (DPDPA). We record each contact’s opt-in status, source, and timestamp. Recipients may opt out at any time, and you must honour those requests.
Data sharing
We do not sell your personal data. We share data only with:
- Meta Platforms— to deliver messages via the WhatsApp Cloud API, subject to Meta’s own terms and privacy policy.
- Infrastructure providers — hosting, database, and related sub-processors that operate the Service on our behalf under appropriate confidentiality and security obligations.
- Authorities — where required by law or to protect our legal rights.
Data security
We apply industry-standard safeguards to protect your data. Access tokens issued by Meta are encrypted at rest. Access to data is scoped per organization, and we never expose decrypted access tokens in our interfaces or logs. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organizational measures.
Data retention
We retain personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see below). We may retain limited records where required to meet legal obligations.
Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us at the email below.
Data deletion
To request deletion of your account and all associated data, email hellocoyot@gmail.com with the subject line “Data Deletion Request”. We will process verified requests within 30 days.
Children's privacy
The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.
Contact us
For any questions about this Privacy Policy or your data, contact Coyot AI at hellocoyot@gmail.com.