Privacy Policy
Last updated: March 10, 2026
1. Introduction
Vesper ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp API Gateway service (the "Service"). By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your full name, email address, and password (stored as a bcrypt hash). If you subscribe to a paid plan, we collect billing information through our payment processor (iyzico).
2.2 Usage Data
We automatically collect information about your use of the Service, including API requests, session activity, message counts (not content), IP addresses, browser type, and access timestamps. This data is used for rate limiting, billing, and service improvement.
2.3 WhatsApp Data
When you connect a WhatsApp session through our Service, we process WhatsApp session credentials and message metadata. We do not store the content of your WhatsApp messages beyond what is necessary for delivery and webhook dispatch.
2.4 Cookies
We use essential cookies for authentication (JWT tokens) and language preferences. We do not use tracking or advertising cookies. You can manage cookie preferences through your browser settings.
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process transactions and send billing notifications
- To send transactional emails (account verification, password reset, support ticket updates)
- To monitor usage and enforce subscription limits
- To detect and prevent fraud, abuse, and security incidents
- To respond to support tickets and customer inquiries
- To comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal data. We may share information with:
- Payment processors (iyzico) to process payments
- Email service providers (Brevo/SMTP) to send transactional emails
- Infrastructure providers (Hetzner) for hosting
- Law enforcement when required by applicable law
5. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords (bcrypt), API key authentication, rate limiting, and HMAC-signed webhooks. However, no method of transmission over the Internet is 100% secure.
6. Data Retention
We retain your account data for as long as your account is active. Usage logs are retained for 90 days. WhatsApp session data is deleted when you disconnect a session. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
7. Your Rights (GDPR)
If you are a resident of the European Economic Area (EEA), you have the following rights:
- Right of Access — Request a copy of your personal data
- Right to Rectification — Correct inaccurate or incomplete data
- Right to Erasure — Request deletion of your personal data
- Right to Restrict Processing — Limit how we use your data
- Right to Data Portability — Receive your data in a portable format
- Right to Object — Object to certain types of processing
To exercise these rights, contact us at privacy@vesper.dev.
8. International Data Transfers
Your data is processed and stored on servers located in the European Union (Hetzner, Germany). We do not transfer your personal data outside the EEA unless necessary for service delivery, and only with appropriate safeguards in place.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: privacy@vesper.dev