ReachPeakAPI

Privacy Policy

Last updated: June 19, 2026

ReachPeak API ("we," "our," or "us") operates the website reachpeakapi.in and provides a WhatsApp Business API messaging platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

By accessing or using ReachPeak API, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

When you use ReachPeak API, we collect the following types of information:

  • Account Information: Name, email address, phone number, and business details provided during registration.
  • Business Data: Business name, type, logo, WhatsApp Business Account credentials (WABA ID, Phone Number ID), and address submitted during onboarding.
  • WhatsApp Messaging Data: Message content, delivery status, recipient phone numbers, template names, and media files sent or received through the WhatsApp Business API via our platform.
  • Contact Lists: Phone numbers and associated contact details (name, email, tags, custom fields) you upload for campaigns.
  • Usage Data: Campaign metrics, message delivery statistics, login activity, feature usage patterns, and device/browser information.
  • Payment Information: Payment references and transaction IDs. We do not store credit/debit card numbers directly; payments are processed through secure third-party payment gateways.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, maintain, and improve the ReachPeak API platform
  • To process your subscription, verify payments, and manage your account
  • To send WhatsApp campaign messages and template messages on your behalf through the Meta WhatsApp Cloud API
  • To receive and display inbound WhatsApp messages from your customers
  • To provide customer support and respond to inquiries
  • To generate analytics and reporting on your campaign performance
  • To detect, prevent, and address fraud, abuse, or security issues
  • To comply with legal obligations and enforce our Terms of Service

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Meta/WhatsApp: Message content and recipient phone numbers are transmitted through the WhatsApp Cloud API as required to deliver your messages.
  • Cloud Infrastructure: Our platform is hosted on Supabase (backed by AWS) with servers located in India (ap-south-1 region).
  • Payment Processors: Payment details are shared with our payment gateway provider to process transactions securely.
  • Legal Requirements: We may disclose information when required by law, legal process, or government request.

4. Data Storage and Security

Your data is stored on secure servers provided by Supabase (AWS infrastructure) in the Asia Pacific (Mumbai, ap-south-1) region. We implement industry-standard security measures including:

  • SSL/TLS encryption for all data in transit
  • Encrypted storage for sensitive credentials (WhatsApp access tokens)
  • Row-Level Security (RLS) policies ensuring tenant data isolation
  • Regular security audits and access monitoring
  • Role-based access control for platform administration

5. Data Retention

  • Messages: Message content and metadata are retained for 90 days, after which they are automatically purged.
  • Campaign Data: Campaign configurations and performance metrics are retained for the duration of your subscription plus 30 days.
  • Account Data: Account information is retained until you request deletion or your subscription is terminated.
  • Logs: System and access logs are retained for 30 days for security monitoring.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Export your contact lists and campaign data
  • Withdraw consent for data processing (which may affect service availability)

To exercise these rights, contact us at privacy@reachpeakapi.in.

7. WhatsApp Business API Compliance

As a WhatsApp Business Solution Provider, we comply with:

  • Meta's WhatsApp Business API Terms of Service
  • WhatsApp Business Messaging Policy
  • WhatsApp Commerce Policy
  • Meta's data handling requirements for Business Solution Providers

We ensure that all messages sent through our platform comply with WhatsApp's messaging policies, including opt-in requirements and template approval processes.

8. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising pixels.

9. Children's Privacy

ReachPeak API is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or concerns:

  • Email: privacy@reachpeakapi.in
  • Website: reachpeakapi.in
  • Data Deletion Requests: reachpeakapi.in/data-deletion