Skip to content

Official Document

Privacy Policy

What we store about you, what we use it for, and what you can ask us to do.

Bahasa Indonesia English

Table of Contents

Table of Contents

1. Scope

This policy explains how WatZap Indonesia (“WatZap”, “we”, “us”) collects, uses, stores, shares, and deletes personal data.

It covers the watzap.id website and all of its pages, the app.watzap.id application, and the support services we provide to subscribers.

This policy complements the Terms & Conditions; it does not replace them. Terms not defined here carry the meaning given there, and where the two disagree about data, the Terms & Conditions prevail.

Two roles that must not be confused

  • For your account data — name, email, WhatsApp number, payment details — WatZap acts as the data controller. We decide what that data is used for.
  • For the contact database you upload — your customers’ WhatsApp numbers — you are the controller, and WatZap processes it on your instruction. Section 5 explains what follows from this.

By using WatZap, you agree to this policy. If you do not agree, you have the right to stop (and/or) not to use WatZap.

2. Data We Collect

2.1 Data you provide when you sign up

Your name, email address, WhatsApp number, and payment details. Registration happens at app.watzap.id.

The watzap.id pages themselves have no forms at all: there is no name, email, or phone field you can type into here, so no registration data is collected from this site.

2.2 Data you upload to the application

  • Your contacts’ WhatsApp numbers, along with the names and labels you give them.
  • The content of your broadcast messages and their attachments.
  • The sender WhatsApp numbers you connect to your account.

2.3 Usage data

Account activity records: how many messages were sent, delivery status, broadcast timestamps, and contact import history. This is what makes your plan quota countable and abuse traceable.

2.4 Technical data when you open watzap.id

IP address, browser and device type, the pages you open, and the time of your visit. This site is served through the Cloudflare network, and that data is processed to deliver the page to your device and to block abuse.

2.5 Visit source data

If you arrive here from an ad or an affiliate link, this site stores your campaign parameters (utm_source, utm_medium, utm_campaign, and similar), ad click IDs (fbclid, gclid, ttclid, and similar), and the affiliate code — then appends them to the registration link so your sign-up is credited to the right ad or affiliate. Section 3 has the details.

3. Cookies & Browser Storage

This site stores a few things in your browser. This is the complete list:

  • _wz_track (local storage, 30 days) — where your visit came from: campaign parameters, ad click IDs, and the affiliate code. Used so your sign-up is credited to the ad or affiliate that brought you.
  • wz-lang (local storage, no expiry) — your language choice for this site, so you do not have to pick it again on every visit.
  • WZPCouponDeadline, WZPExitIntentLastClose, WZPHasBeenShownCoupon (cookies, up to 30 days) — so the coupon popup does not reappear over and over and the same code is not handed twice to the same browser.
  • Google Tag Manager cookies (container GTM-PV7XX8N), which loads Google Analytics 4, Google Ads, and the Meta Pixel — including _ga, _gcl_*, _fbp, and _fbc. All three are third-party services governed by their own providers’ privacy policies.

What leaves this site

The coupon popup sends one request to our server. It carries only the list of coupon codes already shown to this browser — no name, no email, no phone number, because this site never asks for any of them.

How to turn it off

Clear or block cookies and site storage in your browser settings. This site works fully without every item above; what you lose is the remembered language choice, and affiliate tracking — and the latter can cost the affiliate who recommended WatZap to you their commission.

4. Purpose & Legal Basis

4.1 What your data is used for

  • Running the service: storing contacts, sending broadcasts, and operating the features included in your plan.
  • Billing and processing payments, including the renewal invoice that is generated automatically as your subscription nears its expiry date.
  • Sending expiry reminders by email and WhatsApp — 7 days and 3 days before your account ends.
  • Sending commercial information about WatZap products and services, as you agreed when you signed up.
  • Keeping the service safe: the user selection process, SPAM investigation, and enforcement against breaches of the Terms & Conditions.
  • Measuring advertising effectiveness and calculating affiliate commissions.
  • Meeting legal obligations, including responding to lawful requests from law enforcement.

4.2 The legal basis for it

  • Performance of a contract — for anything without which the service cannot run at all.
  • Your consent — for commercial information and for advertising measurement cookies. You can withdraw consent at any time; section 10 explains how.
  • Our legitimate interests — for service security, abuse prevention, and billing.
  • Legal obligation — for anything the regulations actually require.

5. The Contact Database You Upload

Someone else’s WhatsApp number is that person’s personal data — not yours, and not ours. This is the section that matters most, because this is where responsibility moves.

5.1 What is your responsibility

  • You are only allowed to import a contact database that has been permitted by the owner of those contacts.
  • You must own your WhatsApp contact numbers, obtained knowingly and legally.
  • You are answerable to the number’s owner for the content of the messages you send them.

5.2 Databases we treat as illegal

WatZap forbids importing an illegal database, by the following criteria:

  • WhatsApp numbers published on social media.
  • WhatsApp numbers published on someone’s website or blog.
  • WhatsApp numbers handed over by another party rather than by the number’s actual owner.

When we find irregularities in the data, our system can stop the import abruptly, and your account may even be suspended with no refund.

5.3 What we do with that database

  • Store it in your account and process it to carry out your instructions — sending broadcasts, filtering, and grouping.
  • Clean out numbers that never interact, automatically, every month. Section 8 has the details.
  • We do not use your contact database to market WatZap products to them, and we do not merge it with any other user’s database.

5.4 If the number’s owner contacts us

If someone who received your broadcast contacts us and asks for their data to be deleted, we forward that request to you as the controller of that data — unless the regulations require otherwise. You are the one who can delete it, because the database sits in your account.

6. Broadcast Message Content

You already agreed to the following two points in section 7 of the Terms & Conditions. This policy neither widens nor narrows them; it only restates them where people would actually look for them:

  • WatZap has the right to view the broadcast content sent by users when needed, without the user’s permission. For example: during a SPAM investigation.
  • WatZap has the right to use the broadcast content sent by users for commercial purposes, without the user’s permission. For example: screenshots of a user’s broadcast results for training material.

The messages you send also pass through WhatsApp to reach their recipients. From that point on, their contents fall under the privacy policy of Meta Platforms, Inc. — outside our control.

7. Sharing Data with Others

WatZap will not sell your data to anyone.

Data is shared only with the parties below, and only as far as necessary:

  • WhatsApp / Meta Platforms, Inc. — the destination numbers and message contents reach them, because that is where the messages are sent.
  • Payment providers — to process subscription and renewal transactions.
  • Infrastructure providers — hosting, content delivery, and transactional email.
  • Google and Meta — visit data from this site, through Google Tag Manager as described in section 3.
  • Law enforcement — where there is a lawful official request under the applicable regulations.

The affiliate who recommended WatZap to you does not receive your contact database, your message contents, or the contents of your account.

8. Retention & Deletion

While your account is active, we keep your data so the service can run. Beyond that, three deletion mechanisms run on their own:

8.1 Monthly database cleaning

  • WatZap will clean user databases automatically every month, without prior notice.
  • What gets cleaned are the WhatsApp numbers you own that have never interacted with you, such as by opening a broadcast.

8.2 Inactive accounts

  • If your account stays inactive for 2 months, our system will automatically delete all data in your account, including the number database and everything else.
  • Before that, we send reminders by email and WhatsApp 7 days and 3 days before your subscription ends.

8.3 Closing your account on request

You may ask WatZap to close your account. Before you do, make sure all of your data has been saved and that nothing is left behind on the WatZap platform.

So: back up your data regularly. Once your subscription expires, your data will be gone.

9. Data Security

WatZap tries as hard as it can to keep your data safe, but WatZap does not guarantee your data. There is no security system that cannot be breached.

Your part in it

  • Keeping your WatZap account credentials confidential. The account can be used by anyone who holds your login information.
  • You are responsible for all activity on your account, including use by more than one person.
  • Not creating an account with a temporary email (such as 10 minutes email) — an account whose email cannot be reached cannot be recovered.

If a breach happens

If a personal data protection failure occurs that affects you, we will notify you and the competent authority in writing no later than 3×24 hours after we become aware of it, as required by Indonesian Law No. 27 of 2022.

10. Your Rights & How to Reach Us

Indonesian Law No. 27 of 2022 on Personal Data Protection gives you the following rights over your personal data:

  • To be informed of our identity, the legal basis, and the purpose of using your data.
  • To access and obtain a copy of your personal data.
  • To correct data that is wrong or inaccurate.
  • To end the processing of, delete, and/or destroy your personal data.
  • To withdraw a consent you previously gave.
  • To postpone or restrict the processing of your personal data proportionately.
  • To object to a decision based solely on automated processing.
  • To claim and receive compensation for breaches of personal data protection rules.

How to make a request

Reach us on WhatsApp or email support@watzap.id, and include the email address you use as your WatZap account so we can match the request to it. WatZap customer service operates during working hours, 09.00 to 18.00 WIB.

What we cannot always grant

  • Requests that conflict with our legal obligations, or that would obstruct law enforcement.
  • Requests about the contact database you uploaded yourself — for that data you are the controller (section 5), and you can delete it straight from the application without asking us.
  • Deleting your account data while you are still subscribed, because the service cannot run without it.

Changes to this policy

This policy may change at any time. The effective date at the top of this page always shows the version currently in force, so check this page from time to time.

Read the Terms & Conditions Chat with us on WhatsApp