WABlast (Registration No. 2026/279975/07) ("we", "our", "us") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable South African law. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights as a data subject.
By using WABlast you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use the Service.
WABlast is a South African SaaS business providing WhatsApp bulk messaging services. We act as the responsible party under POPIA for the personal information of our clients (account holders). Our clients act as responsible parties for the personal information of their own contacts (message recipients).
Contact: info@wablast.co.za | WhatsApp: +27 65 744 6230
| Category | What we collect | Why |
|---|---|---|
| Account information | Name, email address, hashed password | To create and manage your account |
| Billing information | Subscription plan, payment status, billing dates | To manage your subscription. Card details are handled entirely by PayFast — we never see or store them. |
| Usage data | Number of messages sent, campaigns run, credits used, send timestamps | To enforce plan limits, display your usage history, and improve the Service |
| Message content | Templates you create and messages sent through the platform | Stored to enable campaign reporting and inbox functionality |
| Contact lists | Phone numbers and names you import for campaigns | Used only to send your messages. Never shared or used for any other purpose. You own this data. |
| Incoming messages | Reply messages from your recipients | Stored to power your inbox. Visible only to you. |
| Opt-out records | Phone numbers of recipients who have opted out | To prevent sending to opted-out numbers — required by law |
| Push notification subscriptions | Browser push subscription endpoint and encryption keys | To send you real-time inbox notifications when recipients reply. Stored only if you grant notification permission. Deleted automatically if the subscription expires. |
| Technical data | Browser type, IP address, session tokens | For authentication, security, and debugging. Not used for profiling or advertising. |
We do not use your information for advertising, profiling, or any purpose not listed above.
We share your information with the following third parties only as necessary to operate the Service:
| Provider | Purpose | Data location | Their policy |
|---|---|---|---|
| Supabase | Database, authentication, and edge functions | EU (Frankfurt) | supabase.com/privacy |
| PayFast | Payment processing and recurring billing | South Africa | payfast.co.za |
| Meta Platforms | WhatsApp message delivery via the Business API | Meta infrastructure | whatsapp.com/legal |
| Cloudflare | Web hosting and CDN | Global CDN / ZA PoP | cloudflare.com |
| Resend | Transactional email delivery | EU | resend.com/privacy |
| Google Fonts | Typography | Google CDN | policies.google.com |
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
When you upload contact lists to WABlast, you act as the responsible party under POPIA for the personal information of those contacts. This means you are legally required to:
WABlast provides opt-out management tools to assist with compliance. Responsibility for POPIA compliance with your recipients rests with you.
The Consumer Protection Act Amendment Regulations, 2026 (Government Gazette No. 54521, effective 15 April 2026) introduced a national opt-out registry administered by the National Consumer Commission (NCC) and mandatory compliance obligations for all direct marketers in South Africa.
As a WABlast account holder who uses the platform to send marketing communications, you operate under WABlast's direct marketer registration. WABlast (Pty) Ltd is the registered direct marketer for all marketing communications sent through the Platform, and WABlast's identification is automatically appended to every marketing message as the compliance signature required by the CPA Amendment Regulations. You are therefore not required to register with the NCC yourself. You remain responsible for:
WABlast assists compliance by providing automatic opt-out handling (recipients who reply STOP, UNSUBSCRIBE, CANCEL, REMOVE, OPT OUT, or similar keywords are automatically blocked from future messages), the WABlast direct marketer identification on every marketing message, Meta-approved message templates, and full message delivery records. If you circumvent or bypass the Platform's opt-out controls and contact a person who has opted out — through the Platform or by any other means using data obtained through it — WABlast bears no responsibility or liability for that contact. Responsibility for lawful consent and message content rests solely with you.
Non-compliance with the CPA may result in administrative penalties of up to R1,000,000 or 10% of annual turnover, whichever is greater.
| Data type | Retention period |
|---|---|
| Account profile and credentials | For the duration of your account, plus 30 days after deletion |
| Campaign logs and usage data | 12 months from the date of the campaign |
| Incoming and outgoing messages | 12 months from receipt/send date |
| Opt-out records | Indefinitely — required to prevent illegal re-sending |
| Payment records | 5 years — required for tax and accounting compliance |
| Technical logs | 90 days |
No security system is 100% impenetrable. In the event of a data breach that affects your personal information, we will notify you as required by POPIA.
WABlast uses the following browser storage mechanisms:
We do not use advertising cookies, tracking pixels, or any third-party analytics that profile your behaviour.
As a data subject under POPIA, you have the right to:
To exercise any of these rights, contact us at info@wablast.co.za or WhatsApp +27 65 744 6230. We will respond within 30 days.
WABlast is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately.
Your data is stored on Supabase infrastructure in the EU (Frankfurt, Germany). The EU maintains adequate data protection standards as recognised internationally. When Meta delivers messages via the WhatsApp API, message content may transit Meta's global infrastructure. By using WABlast you consent to these transfers.
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email at least 14 days before they take effect, and update the "Last updated" date at the top of this page. Continued use of the Service after the effective date constitutes acceptance.
For any privacy-related queries, requests, or complaints, contact our information officer at: info@wablast.co.za or WhatsApp: +27 65 744 6230
Email: support@wablast.co.za
If you are not satisfied with our response you may lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.
© 2026 WABlast (Reg. 2026/279975/07) · Made in South Africa 🇿🇦 · Terms of Service