At Munnottu WhatsApp API, accessible from our platform, one of our main priorities is the privacy of our visitors and users. This Privacy Policy document outlines the types of information collected and recorded by our platform and how we use it, specifically regarding our Google Drive backup features.
1. Information We Collect
When you use the Munnottu WhatsApp API platform, we collect information necessary to deliver and secure our services:
Account Details: Name, Email, password hashes, and billing details related to your account subscription.
WhatsApp WABA Messages: Message metadata (timestamps, delivery reports, messaging directions, sender/recipient telephone details) and message content strictly required to power your communication dashboard.
Linked Services Data: Secure configuration tokens for third-party services you explicitly connect (such as Meta WABA and Google APIs).
2. Google Drive Integration & Scopes
To enable the chat archiving and backup functionalities, Munnottu WhatsApp API allows you to link your Google Drive account. We access your Google Drive using the following restricted OAuth scope:
Access Restriction: The drive.file scope restricts our platform's permission to only access, read, and write files that were created by the Munnottu WhatsApp API application. Our application cannot view, edit, or delete any other files, sheets, photos, or folders in your Google Drive.
Data Created: The application creates a single root folder named Munnottu Backups containing JSON chat transcripts and media attachments (images, stickers, video, audio) that you choose to back up.
No Data Transfer: We do not transfer, sell, or share data retrieved from your Google Drive with any third parties or external services. All data stays entirely within your own cloud account.
3. How We Protect Your Credentials
When you authorize Munnottu WhatsApp API to write files to your Google Drive account, Google issues OAuth2 Access and Refresh Tokens. We protect these credentials using enterprise-grade security controls:
Tokens are stored securely in a dedicated, access-restricted database table (google_tokens).
Connection sessions are protected using secure HTTP cookies (SameSite Lax, HttpOnly).
4. Your Choices and Rights
You maintain full ownership and control over your data. At any time, you can manage or revoke access options:
Toggle Backups: Turn off background auto-backups instantly via the platform's Google Drive settings tab.
Disconnect Account: Click the "Disconnect Account" button in your dashboard. This action permanently deletes the stored OAuth2 access and refresh tokens from our database.
Revoke Google Consent: You can permanently remove Munnottu WhatsApp API permissions directly through your Google Account Security Permissions page.
5. Contact Us
If you have any questions or require more information about our Privacy Policy or Google API integrations, do not hesitate to contact us: