← Back

Privacy Policy

Last updated: October 2026

1. Introduction

Welcome to 5MinutesAPI, operated by Ride All (Private) Limited. We are committed to protecting your personal data and respecting your privacy. This comprehensive privacy policy outlines how we handle, process, and secure your information when you utilize our high-speed WhatsApp Cloud API gateway, Dedicated WABA services, and Instant API integrations.

2. Data Collection & Google OAuth

To provide our enterprise-grade routing services, we collect specific data points:

  • Account Identity: Your name, email address, and billing details managed securely via our payment processor (Lemon Squeezy).
  • Meta Business Data: WhatsApp Business Account ID (WABA ID), Phone Number ID, and necessary access tokens to route messages to Meta's Edge servers.
  • Telemetry & Logs: Message delivery statuses (Sent, Delivered, Read, Failed) provided by Meta webhooks to power your real-time analytics dashboard and auto-refund engine.

Google Workspace & OAuth Data Policy:

5MinutesAPI utilizes Google OAuth for secure, frictionless authentication. We strictly collect only your Email Address, Name, and Profile Picture to provision your workspace. We do not request, require, or access your personal emails, Google Drive files, or contacts. Your OAuth data is never sold or shared with third-party marketing agencies.

3. How We Use Your Data

Your data is strictly utilized to operate the API infrastructure:

  • API Routing: To authenticate your requests and route your payloads securely to the Official Meta Cloud API.
  • Automated Billing: To process micro-second refunds to your wallet when a message fails to deliver to an unregistered WhatsApp number.
  • Security Operations: To prevent spam, fraud, and ensure compliance with Meta's messaging policies.

4. End-to-End Encryption & Security

We act as a stateless routing gateway. We do not permanently store the textual content of your outbound WhatsApp messages. Your payloads are processed in-memory by our Golang infrastructure, encrypted via TLS 1.3, and dispatched to Meta. WhatsApp delivers the messages using the Signal Protocol, ensuring true end-to-end encryption between the Meta servers and the end-user's device.

5. Data Sharing and Sub-processors

We do not monetize your data. Information is shared only with strictly vetted sub-processors required to run our infrastructure, such as Supabase (database hosting) and Lemon Squeezy (payment processing). All sub-processors are bound by stringent GDPR and CCPA compliant Data Processing Agreements (DPAs).

6. Your Rights & Data Deletion

Under global privacy frameworks (including GDPR), you retain the right to access, rectify, or request the complete erasure of your data. You may delete your account and revoke our access to your Meta Business Manager at any time via your dashboard settings, which will instantly trigger a hard-delete of your API keys and webhook configurations from our servers.

7. Contact Compliance

For data subject access requests, privacy inquiries, or compliance documentation, please contact our Data Protection Officer at:

support@5minutesapi.com