Legal
Privacy Policy
Last updated: October 2026
BadCompadres Connect ("Connect") is developer infrastructure operated by Badcompadres. It lets software companies ("developers") connect their own customers to the WhatsApp Business Cloud API. This policy explains what data we process and why.
Data we process
- Account data: email address, display name and authentication records of developer users.
- Organization data: organization names, members and roles, projects and environments.
- Customer records created by developers: name, optional email, external identifiers and metadata.
- Technical identifiers: request logs, IP addresses, timestamps and audit events.
Future WhatsApp data
Once Meta integration is enabled, Connect will process WhatsApp Business Account IDs, phone number IDs, message templates, message metadata and content, delivery statuses and webhook events, strictly to provide the service on behalf of the developer and their customer.
Roles
For customer and message data, the developer is the controller and Connect acts as a processor. Developers are responsible for having a lawful basis and the required consents from their end users.
Security
Data is isolated per organization, project and environment at the database layer. Access is role-based, actions are recorded in an append-only audit log, and credentials will be encrypted at rest and handled only server-side.
Retention
Account and organization data is retained while the account is active. Logs are retained for a limited period for security and debugging. Data is deleted or anonymized after a verified deletion request, subject to legal obligations.
Sharing
We do not sell data. We share data with infrastructure providers needed to run the service and, once integrated, with Meta as required to deliver WhatsApp functionality. Meta's own policies apply to data processed by WhatsApp.
Your rights and deletion
You may request access, correction or deletion. See our data deletion instructions.