Back to OpenBSP

Privacy Policy

OpenBSP processes WhatsApp Business messages, contact records, template metadata, campaign delivery events, and audit logs only to provide the messaging workspace selected by each tenant.

Each tenant remains responsible for collecting and proving lawful consent before sending marketing messages. OpenBSP stores consent state and consent events so outbound gates can enforce Meta policy and privacy requirements.

Access tokens and API keys must be treated as secrets. Production deployments should store them encrypted, restrict access by role, and rotate them when a team member or integration no longer needs access.

This project is still under active development. Before using it with real customers, review local privacy laws, Meta WhatsApp Business Platform terms, retention periods, and data processing agreements with counsel.