Privacy Policy, Terms of Service & Data Deletion

This website is operated by DONOTHING, located at 3-50/1 1, Jayashree, Kuloor Kavur Rd, Kavur, Gandhinagar, Mangalore, KARNATAKA 575015, India. Contact: human@donothing.agency.
Udyam Registration No: UDYAM-KR-11-0108781

This policy covers our website https://donothing.agency and our Meta App doNothing WABA (App ID: 951956931249602) which provides WhatsApp Cloud API infrastructure via Meta Embedded Signup and Facebook Login for Business.

1. Privacy Policy

Information We Collect

A. Website: When you contact us by email at human@donothing.agency, you voluntarily provide your name, email address, and message contents. Our web server automatically logs basic technical information such as IP address, browser type, and pages visited for security and operational purposes. We do not require you to create an account to browse the site.

B. Via Meta Platform: When a business authorizes our App doNothing WABA via Embedded Signup, we collect and process the following data via Meta Graph API:

We do not collect or access personal Facebook profiles, friends lists, or timelines beyond what is needed to complete Embedded Signup.

How We Use Information

We do not sell, rent, or share your personal information for advertising purposes. We do not use WhatsApp message content to train AI models. We do not use data for our own marketing.

Tech Provider Role — Data Processor

When we provide infrastructure to client businesses (for example BYON numbers onboarded via Embedded Signup), we act as a Data Processor / Service Provider on behalf of that business. The client business is the Data Controller and controls message content, recipients, and retention. We process data only per client instructions and Meta's Platform Terms, WhatsApp Business Terms, and Business Tools Terms.

Sharing of Information

We do not sell or rent your personal information. We share only where required to operate the service:

We do not share WhatsApp message content with third parties except Meta for delivery.

Cookies

This website does not use advertising or tracking cookies. Any cookies used are strictly necessary for basic functioning and security of the site.

Third-Party Services

Our contact page embeds a Google Maps view to show our registered location. Your use of that map is subject to Google's Privacy Policy. Our App integrates with Meta's WhatsApp Cloud API, subject to Meta's Privacy Policy, WhatsApp Business Terms, and Meta Platform Terms.

Data Security

All traffic to https://api.donothing.agency/webhook/whatsapp is served over TLS 1.2+ (TLS 1.1 and below refused) with Let's Encrypt certificates. Every webhook delivery is verified using X-Hub-Signature-256 HMAC-SHA256 with our App Secret and REQUIRE_SIGNATURE=true; unsigned or invalid requests are rejected with 401. Endpoint responds 200 OK in under 100ms before processing and binds to loopback only behind a reverse proxy. Service runs as a dedicated non-login system account with write access limited to its log directory. Access tokens and secrets are held outside application code in root-owned files (mode 0640) readable only by that service account, and are never written to code, logs, or version control. Web server access logs strip query strings so verify tokens are never persisted.

Data Retention

Your Rights

You may request access to, correction of, or deletion of personal information you have shared with us by emailing human@donothing.agency. For WhatsApp service data, see Data Deletion Instructions below.

Children's Privacy

We do not knowingly collect data from children under 13. Our services are business-to-business.

2. Terms of Service

By using donothing.agency and authorizing App doNothing WABA, you agree:

  1. You are authorized to manage the Facebook Business and WhatsApp Business Account (WABA) you connect.
  2. You are responsible for compliance with WhatsApp Business Terms, Commerce Policy, Business Messaging Policy, and Meta Platform Terms for all messages sent via your numbers.
  3. You are responsible for obtaining required opt-ins and consents from your end-users for WhatsApp messaging.
  4. Our service is provided as-is for WhatsApp Cloud API infrastructure. We do not guarantee message delivery, which depends on Meta and carrier networks and WhatsApp quality rating.
  5. You may revoke our App access at any time via Facebook Business Settings > Integrations > System Users / Connected Apps.
  6. We may suspend or terminate service for policy violations, security risks, or non-payment per your contract with DONOTHING.
  7. Fees, SLAs, and support terms are per your separate service agreement with DONOTHING, not per this public page.

3. Data Deletion Instructions

A. Website Data

To delete enquiry data, email human@donothing.agency with subject “Data Deletion Request - Website” including your email and date of enquiry. We will delete within 7 business days.

B. App doNothing WABA Data

To request deletion of data associated with our Meta App:

  1. Email human@donothing.agency with subject “Data Deletion Request - WABA [Your WABA ID]”
  2. Include your Facebook Business ID, WABA ID, and Phone Number ID(s) to be deleted
  3. Optional: Include screenshot of Business Settings showing the App connected
  4. We will: revoke and delete access tokens, delete webhook logs, delete message content and WABA mappings for your business within 7 business days, and confirm completion by email.

Immediate Revocation: You can immediately revoke access and delete tokens by removing our App from Facebook Business Settings > System Users > Apps or Business Settings > Integrations > Connected Apps. This automatically invalidates tokens and stops future data collection.

If you need assistance, contact human@donothing.agency.

Contact

For any questions about this policy, contact DONOTHING at human@donothing.agency.

© 2026 DONOTHING is the registered legal entity, operating as doNothing. All rights reserved.
Udyam Registration No: UDYAM-KR-11-0108781

Last updated: 11 August 2026