Privacy Policy

Last updated: July 18, 2026

1. Who we are

wablia is a CRM for WhatsApp, Instagram and Gmail that lets teams manage customer conversations in a shared inbox. This policy explains what data we process when you use the service, including data received from Google APIs.

2. Data we collect

Account data — name, email address and password (hashed) used to sign in.
Channel data — messages, contacts and conversations from the channels you connect (WhatsApp Business, Instagram, Gmail), needed to provide the shared inbox.
Google user data — when you connect Gmail, we access your Gmail messages (read) and send messages on your behalf (send), using the scopes gmail.readonly and gmail.send. We also store an OAuth refresh token, encrypted at rest, to keep the connection alive.

3. How we use Google user data

Display incoming emails as conversations in your inbox.
Send the replies you write from the app through Gmail.
Identify contacts by their email address.

We do not use Google user data for advertising, profiling, or training machine-learning models, and we do not sell it to anyone. Google user data is only used to provide the inbox features you explicitly connected.

4. Limited Use disclosure (Google API Services)

wablia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Storage and security

Data is stored in Supabase (PostgreSQL) with row-level security isolating each workspace. OAuth refresh tokens and channel access tokens are encrypted at rest with AES-256-GCM. Media attachments are stored in Supabase Storage under per-account paths.

6. Sharing

We do not share your data with third parties except the service providers required to operate the app (Supabase for database and storage, Google/Meta APIs for the channels you connect). No data is sold or shared for marketing purposes.

7. Your rights and revocation

Disconnect Gmail at any time from Settings → Gmail — this deletes the stored connection and stops syncing immediately.
Revoke wablia's access from your Google account at myaccount.google.com/permissions.
Request deletion of your account and data by contacting us at the email below.

8. Contact

For privacy questions or deletion requests, contact us at privacy@wablia.app.