Privacy Policy

Last updated: September 25, 2026

1. Introduction

Resend ("we", "us", or "our") provides a cloud-based WhatsApp Customer Relationship Management, broadcast automation, and multi-agent communication platform. This Privacy Policy details the types of personal data we collect, how it is processed and secured, and your rights regarding your information.

2. Data We Collect

We collect only the data necessary to provide our CRM services effectively:

  • Account Data: Full name, work email address, hashed passwords, workspace organization details, and assigned user roles.
  • WhatsApp Cloud API Credentials: Meta App IDs, Phone Number IDs, WhatsApp Business Account (WABA) IDs, and Graph API access tokens provided by you to enable messaging through your official WhatsApp Business number.
  • Contact & Customer Lists: Phone numbers, customer names, contact attributes, and custom tags uploaded or synchronized by your workspace administrators.
  • Messaging & Webhook Logs: Inbound and outbound message text, template message statuses (sent, delivered, read, failed), timestamps, and conversation assignment records.
  • Billing Data: Subscription tier, plan limits, and transaction identifiers. Payment processing is handled by third-party processors (such as Stripe or Razorpay); we do not store raw credit card numbers or CVV codes on our servers.

3. WhatsApp & Meta Platform Compliance

Our service operates in integration with Meta Platforms' official WhatsApp Cloud API. By using Resend, you acknowledge and agree that:

  • Message delivery relies on Meta's infrastructure and is governed by the WhatsApp Business Terms of Service and Meta Privacy Policy.
  • You are responsible for obtaining all necessary consent and opt-ins from recipients before initiating broadcast or template messages.
  • We do not sell, rent, or monetize your customer contact directories or message contents with third parties.

4. Cookies & Local Storage

We employ cookies and browser storage solely for functional operation and security:

  • Essential Cookies: Encrypted session identifiers (wacrm_session, wacrm_role) strictly required to maintain secure user authentication, multi-factor verification, and role-based permissions.
  • Preference Storage: Local storage values for interface theme (light/dark mode) and cookie consent status.
  • Optional Telemetry: Aggregated, anonymized website navigation metrics used solely to diagnose platform latency and optimize feature discovery. This telemetry is disabled unless you provide consent.

5. Data Retention & Security

All communications between your browser, our servers, and the Meta Cloud API are encrypted in transit using industry-standard TLS 1.3 encryption. Workspace data is stored in isolated relational databases with role-based access restrictions. We retain customer data as long as your workspace account remains active. Upon account termination or written request, workspace databases and associated contact records are scheduled for permanent purge.

6. Your Rights

Depending on your location, you may have rights under the GDPR, CCPA, or applicable local data protection regulations, including:

  • The right to access and export your workspace contacts and data.
  • The right to rectify inaccurate personal information.
  • The right to request deletion of your account and related records.

7. Contact Information

For any privacy inquiries, data deletion requests, or questions regarding our data practices, please contact us at:

Email: support@resend.in