Updated 25 September 2026

Privacy policy

We use account, message, and payment details to run Delta Messaging. We do not sell them.

Account

We store your name, email, and a hash of your password. We also store the time you accepted these policies. We do not store the password itself.

Workspaces and messages

For each workspace we store:

• The workspace name and the WhatsApp number you link.
• Contacts you add, and whether a contact has opted out.
• Message text, media you attach, the recipient, and delivery status.
• Replies that arrive on the linked phone.

We use this to send, to show what happened, and to post events to webhook addresses you choose.

Keys and webhooks

An API key is shown once. After that we store a short prefix and a hash of the secret, not the secret itself. Webhook addresses and their signing secrets are stored so we can deliver events to you.

Payments

Paystack processes card and M-Pesa payments. We send Paystack the amount, your email, and the card or M-Pesa number you enter for that charge. We do not store the full card number or the security code.

When you leave card renewals on, we store Paystack’s reusable authorization, the card brand, and the last four digits, and we use them for later renewals. Turning renewals off in billing stops those charges. The authorization can remain so you can turn renewals back on.

We keep a payment record: the workspace, the amount, the date, and Paystack’s reference.

Who else receives data

• WhatsApp, through the phone you linked, receives the messages you send.
• Paystack receives the payment details for a charge.
• A webhook you add receives the events you selected, at the address you entered.

How long we keep it

We keep account, message, and payment records while the account is open. Closing the account deletes the workspaces you own and the data that belongs to them. Payment records can remain for as long as we need them to show that a charge was made.

Your choices

From the dashboard you can update your name and email, turn card renewals off, revoke API keys, and close the account.