Privacy Policy

Last Updated: 13 August 2026

1. Introduction

WABisnes CRM ("we", "our", or "us") is operated by Evertech Network Sdn. Bhd. (SSM: 202401003146). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Chrome extension and web dashboard.

2. Information We Handle

We handle the following information only as needed to provide the features you choose to use:

• Account Information: Name, email address, phone number, and password (encrypted) when you register.
• WhatsApp Web Workspace Data: Contact identifiers, names, labels, status tags, message text, media metadata, CRM fields, and the rules, flows, schedules, follow-up state, templates, or forms you create. These are processed locally in your browser to provide the CRM and automation features you enable.
• Subscription and Payment Data: Subscription status, billing history, and payment information or receipts you submit for your WABisnes subscription or a user-configured payment workflow.
• Service and Diagnostic Data: License state, supported feature configuration, and privacy-safe technical diagnostics needed to keep the service reliable and secure.
• Official WhatsApp Data: When you connect the optional Official WhatsApp service, we process the recipients, approved templates, outbound messages, delivery status, and customer replies required to provide cloud campaigns and the Official Inbox. Sensitive values and message content are encrypted at rest and access is restricted to your authorised workspace.

3. WhatsApp Web Extension Data Handling

For WhatsApp Web features, WABisnes processes the workspace data described above locally in the browser so it can display CRM information and perform the workflow you explicitly start or enable. We do not upload WhatsApp content merely for advertising, profiling, or unrelated analytics.

• Authentication and licensing: Your WABisnes sign-in and license state are checked securely with our service.
• AI features: If you explicitly enable or invoke an AI feature, the message content and context needed for that request may be sent securely to WABisnes and its AI service provider to generate the requested result.
• Supported service actions: Data is sent to our service only when you request a cloud-backed CRM, billing, support, or diagnostic action, or when you enable the separate Official WhatsApp service.
• WhatsApp credentials: We do not collect your WhatsApp account password or QR-code login credentials.

4. Chrome Web Store Data Handling and Limited Use

WABisnes uses personal and sensitive user data only to provide or improve its disclosed customer-communication and CRM features, or for closely related security and operational purposes. We do not sell user data, use it for personalised advertising, or transfer it for purposes unrelated to WABisnes. We do not allow people to read personal communications except with your explicit support consent, when required for security or law, or where data has been aggregated and anonymised for internal operations.

5. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process payments and manage subscriptions
• Send important updates about your account and service
• Improve our products and user experience
• Provide customer support

6. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Encrypted password storage using bcrypt
• Regular security audits and updates
• Access controls and authentication

7. Third-Party Services

We use the following third-party services:

• Payment Gateway: ToyyibPay for processing Malaysian payments (FPX, cards, e-wallets)
• AI Services: OpenAI for AI features. Message content and context are sent only when you explicitly enable or invoke an AI feature and only to provide the requested AI result.
• Email: SMTP service for transactional emails
• Meta WhatsApp Cloud API: For the optional Official WhatsApp service, Meta processes messages and delivery events under its own terms and privacy policies.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Personal data is deleted within 30 days
• Transaction records may be kept for up to 7 years for legal compliance
• Anonymized usage data may be retained for analytics
• Official WhatsApp operational records are retained only for the configured support, audit, and legal period; eligible processed webhook records are removed by a bounded retention process

9. Your Rights and Data Deletion

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Export your data
• Opt-out of marketing communications

To request account or personal-data deletion, email evertechnetwork@gmail.com from the email address registered to your WABisnes account. Include your account email and the words Data Deletion Request. We will verify ownership, confirm the request, and complete eligible deletion within 30 days. Records that must be retained for legal, fraud-prevention, billing, or security obligations will be isolated and retained only for the required period.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies for advertising purposes.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: evertechnetwork@gmail.com
• WhatsApp: +60 13-571 9917
• Address: 28B & C, 1st Floor, Jalan Suarasa 8/4, Bandar Tun Hussein Onn, 43200 Cheras, Selangor