Privacy policy

Last updated 14 October 2026. NumberBridge is operated by Qilin Software Lab Private Limited, Howrah, West Bengal, India ("we").

What we collect

  • Account data: name, email, password hash or Google account id, company name.
  • Connection data from Meta when you connect a number: WhatsApp Business Account id, phone number id, display number, verified name, and the access token Meta issues for your assets. Tokens are stored encrypted at rest and used only to deliver the service.
  • Message data: the messages and statuses that flow through your connected numbers, stored so you can read them in the inbox and we can deliver them to your webhook. You can set retention from 1 to 90 days.
  • Technical logs: webhook deliveries, API calls, IP addresses, for security and support.

How we use it

To run the connector you asked for: receive messages from Meta, deliver them to your webhook, send messages you request, show logs, bill your plan. We do not sell data, do not use message content for advertising or model training, and do not read your personal or group chats, which are never shared with the platform.

Meta platform data

We use Meta's WhatsApp Business Platform under Meta's terms. Data received from Meta is used only to provide the service to the account that connected the number, is not shared with third parties except the webhook endpoints you configure, and is deleted when you disconnect a number or delete your account.

Sharing

Sub-processors: Railway (hosting, US/EU), Cloudflare (DNS and edge), Meta Platforms (the messaging platform itself), an email provider for account mail. No other sharing unless the law requires.

Retention and deletion

Messages: per your retention setting, default 30 days. Logs: 90 days. Account and connection data: until you delete the account; see data deletion. Deletion completes within 30 days, backups within 90.

Security

TLS everywhere, tokens encrypted at rest, signed webhooks, least-privilege access for staff, audit logs.

Your rights

Access, correction, export and deletion on request: privacy@numberbridge.io. Grievance officer under India's DPDP Act: the same address, response within 7 days.