Privacy Policy

Last updated: April 15, 2026

This policy describes how the hosted version of OpenBSP at web.openbsp.dev handles your data. If you self-host OpenBSP, this policy does not apply — you control your own deployment.

What we collect

• Account information — When you sign in with Google, we receive your email address, name, and profile picture.
• Organization data — Any organizations, contacts, agents, templates, API keys, and webhooks you create.
• WhatsApp messages — Messages sent and received through WhatsApp accounts you connect, including text, media, and metadata (sender, timestamp, delivery status).
• Usage data — Logs of API calls, Edge Function invocations, and billing events for operating the service.

How we use it

• Routing WhatsApp messages between Meta's WhatsApp Business API and your AI agents or team members.
• Storing your conversations so you can access them from the web interface.
• Billing and usage reporting.
• Troubleshooting and security.

Third parties

We use the following processors to operate the service:

• Supabase — hosts the database, authentication, and Edge Functions.
• Meta (WhatsApp) — delivers messages to and from your WhatsApp accounts.
• Google — provides sign-in and, optionally, Gemini-based media preprocessing for accounts that enable it.
• LLM providers (OpenAI, Anthropic, Google, Groq, etc.) — only when you configure an AI agent to use them. Messages sent to those providers are subject to their own privacy terms.

Your rights

• Access — Your data is available through the web interface at any time.
• Export — You can export your data via the REST API.
• Deletion — You can delete your organization at any time, which removes associated contacts, conversations, and messages. Request full account deletion by contacting us.

Cookies

We use session cookies for authentication. We do not use tracking or advertising cookies.

Data retention

Data is retained for as long as your account is active. Deleted data is removed from active databases immediately; backups may retain data for up to 30 days.

Contact

For privacy questions, contact us through the WhatsApp Community or by opening an issue on GitHub.

Changes

We may update this policy. Material changes will be announced in the community channel.