Privacy Policy
Last updated: July 2026
This Privacy Policy explains what information WA Hero ("we", "us") collects when you use our website and dashboard at wahero.org and my.wahero.org, and how we use it.
1. Information We Collect
When you create an account and use the service, we collect:
- Account information: your name, email address, and a securely hashed password (we never store your password in plain text).
- WhatsApp connection data: the phone number you link to your account, and connection status.
- Message metadata: the recipient number, message content, delivery status, and timestamps for messages sent through our API, so you can view your own send history and we can diagnose delivery issues.
- Billing information: your selected plan, wallet balance, invoice and payment records. We do not directly store card numbers — crypto payments are processed by NOWPayments, and manual payments only store the reference you submit.
- Support tickets: any messages you send us through the support system.
- Technical data: basic session cookies used to keep you logged in.
2. How We Use Your Information
- To operate your account and deliver messages through your connected WhatsApp number.
- To process billing, generate invoices, and apply wallet top-ups.
- To send you account-related emails: email verification, password resets, invoice/payment notices, and maintenance announcements.
- To provide customer support when you contact us.
- To detect abuse, enforce our Terms & Conditions, and keep the service secure.
3. WhatsApp Message Content
Messages sent through your account pass through our servers to reach WhatsApp. We log the message content and recipient number so you can review your own sending history and so we can help troubleshoot delivery problems. We do not read, sell, or share this content with third parties except as required to operate the service.
4. Third-Party Services
We use the following third parties to operate WA Hero:
- NOWPayments — for processing cryptocurrency payments, if you choose that payment method.
- Your configured SMTP provider — to send verification, password reset, and notification emails.
We do not sell your personal data to advertisers or any other third party.
5. Data Storage & Security
Your password is hashed before storage and is never stored or transmitted in plain text. Your WhatsApp session credentials are stored securely on our server and are isolated per account. We take reasonable technical measures to protect your data, but no online service can guarantee absolute security.
6. Data Retention & Deletion
We retain your account data for as long as your account is active. If your account is terminated — whether by your own request, by an administrator, or automatically due to prolonged non-payment — all associated data (messages, invoices, wallet history, support tickets, and WhatsApp session credentials) is permanently deleted from our systems. This action cannot be undone.
7. Your Rights
You may request a copy of the data associated with your account, or request that your account and all associated data be deleted, by contacting support through your dashboard or emailing us.
8. Cookies
We use a single session cookie to keep you logged in. We do not use third-party advertising or tracking cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of WA Hero after changes are posted means you accept the revised policy.
10. Contact
Questions about this policy can be sent via the Support section of your dashboard, or to support@wahero.org.