What Rapio does with personal data, in plain words. Where a rule comes from how the product actually works, we say so.
Rapio is software that businesses use to send WhatsApp marketing messages to their own customers. That means two different sets of personal data pass through it, and they are not treated the same way.
Your account data. When someone signs up, we hold their name, email address, the workspace they belong to and their role. Rapio is the controller of this data.
Your customers' data. When you upload a customer list, we hold phone numbers and, if your file includes them, first name, last name and email address. We also hold the results of what you sent: delivered, read, clicked, and whether someone opted out. You are the controller of this data and Rapio is the processor. We process it to run the service you asked for, and for nothing else. We do not sell it, we do not use it to train anything, and we do not message your customers on our own behalf.
Meta. The messages go through the WhatsApp Business Cloud API, so Meta processes them. Meta keeps message content for at most thirty days and deletes user identifiers thirty days after the final delivery status. That retention is Meta's, not ours, and we cannot change it.
Your WhatsApp Business Account carries a setting that sends read, reply and delivery signals to Meta so it can optimize marketing message delivery. It is on by default on Meta's side, it belongs to your account rather than to Rapio, and if you leave it on you need to say so in your own privacy notice and consent text. We show its state; we do not change it for you.
Infrastructure providers. Hosting, database and email delivery are run by third parties acting as sub-processors under contract. They process data on our instructions and cannot use it for their own purposes. Details sent through the forms on this website are delivered to our email and to a spreadsheet, both on Google Workspace.
That is the whole list. There is no advertising network, no data broker and no analytics vendor.
This marketing site sets no cookies and runs no tracking scripts. No analytics, no advertising pixels, no session recording. Nothing about your visit is stored unless you send us one of the forms below. That is why you were not asked to accept anything when the page loaded.
Waitlist and contact forms. When you send one of the forms, your details come straight to Rapio: they arrive as an email and as a row in a spreadsheet, both on Google Workspace. They are your name, your email address and, if you gave them, your phone number, company, company size and job title, together with the boxes you ticked and the time you sent them. We use it only to contact you about Rapio, because you agreed to that on the form. We message you on WhatsApp only if you ticked that box, and you can stop those messages at any time by telling us so. We delete these details after 24 months, or sooner if you ask us to.
The product itself, behind the login, uses a session cookie so that you stay signed in. It is required for the service to work and is not used for tracking.
Someone can ask you to erase what you hold about them. The product has a form for it, under workspace settings, and we complete such requests within thirty days.
The deletion is real: the contact record, the message history and the rows in campaign reports all go, and campaign totals are recalculated afterwards, so past reports will show smaller numbers.
One thing to understand before you use it. Erasing a person is not the same as adding them to the opt-out list. An erased person is no longer on your opt-out list either, which means that if you upload them again they can be messaged again. If the request was "stop messaging me", the opt-out list is the right tool; if it was "delete what you have about me", this one is.
Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, and to object to how it is processed.
If you are one of our customers, write to privacy@getrapio.com. If you received a WhatsApp message from a business using Rapio and want your data removed, contact that business directly: they hold the list, we only process it for them. If you cannot reach them, write to us and we will pass the request on.
Rapio's own infrastructure is operated in the European Union. Meta processes WhatsApp messages on its own infrastructure, and its supported storage regions do not include Turkey; where a data location is chosen for a WhatsApp Business Account, Germany is the closest option.
Access tokens are stored encrypted. Access to production data is limited to the people who need it to run the service. Every webhook we receive from Meta is verified with a signature before it is processed.
Rapio is a business tool and is not directed at children. We do not knowingly collect data from anyone under sixteen.
If this policy changes in a way that affects you, we will tell you by email before the change takes effect. The date at the top of this page always reflects the current version.
Rapio, LLC
131 Continental Dr, Suite 305
Newark, DE 19713, United States
privacy@getrapio.com