Privacy policy

Effective Jul 22, 2026

Prasetya operates Wamen. This policy covers the hosted Wamen identity broker, not the application that sent you here.

Data Wamen handles

• The requesting application origin, redirect address, requested scopes, transaction outcome, and timestamps.
• A keyed, non-reversible lookup derived from your WhatsApp LID. Wamen never stores the raw LID.
• Your verified WhatsApp phone number only when the application requests it and you send a fresh consent message.
• Short-lived hashed message and authorization-code secrets needed to complete sign-in.
• For abuse prevention, your raw IP address briefly in memory and a daily rotating keyed IP hash in short-lived operational events.

Wamen does not request your name, picture, email, or password. It does not persist raw WhatsApp message bodies, raw IP addresses, identity tokens, message tokens, or authorization codes in logs.

Why Wamen handles it

Wamen uses this data to prove control of a WhatsApp identity, return a pairwise identity to the requesting application, enforce rate limits, investigate service failures, and protect the service from abuse. Wamen does not sell personal data or use it for advertising.

Retention

• Principal records remain until verified deletion.
• Phone numbers remain only in the active transaction and are scrubbed immediately after completion or expiry.
• Completed and expired transactions have sensitive fields scrubbed immediately and are deleted after one hour.
• Sanitized operational events are deleted after seven days.

Hosting and subprocessors

The hosted service and primary database run in Singapore. The following providers help deliver the service:

• Contabo: Application and database hosting (Singapore).
• Cloudflare: DNS and encrypted database backup storage (Global).
• Meta/WhatsApp: WhatsApp message transport and linked-device service (Global).

The application you continue to is a separate controller of its own account and session data. Review that application's privacy policy too.

Deletion and contact

Deletion requires a fresh WhatsApp proof. Read the deletion instructions before proceeding.