LEGAL DOCUMENTATION
· ISO/IEC 27001
& Meta BSP Verified
Terms of Service & Conditions
Governing rules, compliance frameworks, and high-concurrency message throughput
agreements for customers utilizing the WapiCloud enterprise API routing infrastructure.
schedule
Effective Date: October 15, 2024
—verified
Version 2.4 (Enterprise Reissue)
—Jurisdiction: Meta BSP Tier-1
INFRASTRUCTURE UPTIME
SLA99.95%
GuaranteedTier-4 AWS & Meta Edge
Proxies
POLICY
FRAMEWORKMeta Cloud API
2024BSP Business Messaging
Rules
DATA RESIDENCYEU / US / APAC
IsolatesZero-retention payload
vault
REVISION STATUSCertified
ActiveApplies to all live
Webhooks
01
Agreement
to Terms
These Terms of Service (“Terms”) constitute a legally binding agreement made between
you, whether personally or on behalf of an enterprise entity (“Customer”, “you”), and
WapiCloud Inc. (“WapiCloud”, “we”, “us”),
concerning your access to and use of the WapiCloud developer portal, high-throughput
REST APIs, message brokers, analytics dashboards, and webhooks (collectively, the
“Platform”).
By provisioning an API key, initializing a webhook handshake, or deploying automated
WhatsApp campaigns through WapiCloud, you certify that you have read, understood, and
agreed to be bound by these Terms, in addition to Meta Platforms, Inc.’s terms
referenced herein.
info
Corporate
Authority Representation
If you are entering into these Terms on behalf of an organization, company, or
governmental entity, you represent and warrant that you possess full
administrative legal authorization to bind said entity to all operational
stipulations and payment commitments.
02
WhatsApp
Cloud API & Meta Policy Compliance
WapiCloud functions as a recognized Tier-1 Business Solution Provider (BSP) overlay and
infrastructure orchestration gateway built on top of the official Meta WhatsApp Business Cloud API. Consequently, all
usage of the Platform is subject to Meta’s global developer terms:
verified_user
WhatsApp Business Policy
Direct compliance with WhatsApp’s commerce and messaging policy regarding
prohibited industries (pharmaceuticals, weapons, adult products, unapproved
lending).
layers
Template Pre-Approval System
All business-initiated outbound conversations must strictly use pre-approved
Message Templates verified through Meta Cloud API algorithms prior to
transmission.
warning
Direct Quality Rating Enforcement (WABA Phone Tiering)
Meta dynamically calculates your WhatsApp Business Account (WABA) Quality Rating
based on user spam flags, blocks, and response rates. Should your quality score
degrade to “LOW” or “FLAGGED”, Meta may unilaterally throttle outbound messaging
tiers from 100k/day down to 1k/day. WapiCloud accepts no liability for rate
restrictions imposed directly by Meta automated moderation.
03
Account
Registration, API Secrets & Security
To provision live webhooks and invoke endpoint calls, you must register a corporate
account and provide verifiable Meta Business Manager verification records. You are
exclusively responsible for preserving the confidentiality of system credentials:
check_circleAPI Key Rotation: Enterprise
customers are mandated to rotate production access tokens at minimum every 90
days or immediately upon suspicion of compromise.
check_circleWebhook Verification Signature: You
must configure and validate the SHA-256 HMAC signature headers on all ingress
webhook payload URLs to verify legitimate origin.
check_circleCredential Exposure: Committing live
production tokens to public version control repositories (e.g., GitHub, GitLab)
will trigger immediate automated credential revocation by our edge surveillance
monitor.
fingerprintMandatory Multi-Factor
Authentication (MFA) on all Workspace Administrator accounts.
ENFORCED
04
Acceptable
Use Policy & Anti-Spam Mandate
WapiCloud enforces an absolute zero-tolerance standard regarding unsolicited bulk
messaging, unauthorized cold outreach, and scraping. Every mobile subscriber contacted
via WapiCloud API endpoints must have provided demonstrable prior consent.
how_to_reg
Explicit
Opt-In ProtocolOpt-in must
clearly state the business name and message scope (e.g., order tracking,
two-factor OTP, or promotional updates via SMS/Web form checkbox).
do_not_disturb_on
Frictionless
Stop / Opt-Out SupportAll interactive
flows must process keywords such as “STOP”, “CANCEL”, “UNSUBSCRIBE”
instantly within automated webhooks and discontinue contact.
speed
Concurrency
& Rate Limit BoundsDefault plan
tier caps concurrency at 250 requests/second. Burst queuing above contracted
limits will return HTTP 429 (Too Many Requests).
gpp_bad
Failure to adhere to anti-spam opt-in guidelines empowers WapiCloud to immediately
isolate workspace routing queues without prior refund obligations.
02
Billing,
Conversation Credits & Subscriptions
WapiCloud applies a dual billing model comprising: (a) Monthly Platform Subscription,
and (b) Per-Conversation Meta WhatsApp Gateway Fees.
Conversation Category
24h Session Window
Meta Pass-Through
Platform Margin
Marketing
Initiated by Business
Per Meta country card
$0.0015 / conv
Utility & Alerts
Initiated by Business
Per Meta country card
$0.0010 / conv
Authentication (OTP)
Time-sensitive Codes
Per Meta country card
$0.0008 / conv
Service / Inbound
Initiated by Customer
1,000 free / month tier
$0.0005 / conv
Unused monthly prepaid conversational credits roll over for 60 days before expiration.
Account balances falling below zero will encounter immediate automated queue throttling
until the balance is reconciled.
06
Service
Level Agreement (SLA) & Credits
WapiCloud commits to providing enterprise platform availability of not less than 99.95% during each billing cycle,
excluding scheduled maintenance windows announced at least 72 hours in advance.
SLA
Downtime Credit ThresholdsLive API Metric: 99.98% Past
90 Days
SLA claims must be filed
within thirty (30) calendar days of the qualifying outage event.
07
Intellectual Property & Message Payload Rights
As between the parties, you exclusively own all rights, title, and interest in and to
customer contact lists, conversational transcript payloads, and creative asset templates
uploaded to the platform.
Data Retention
& Zero-Knowledge Policy
WapiCloud acts solely as an encrypted transit conduit. Incoming webhooks and
outbound payloads are transiently buffered in encrypted Redis memory queues solely
for transmission acknowledgement and will be purge-scrubbed after 72 hours, unless
long-term storage is explicitly provisioned in customer configuration.
08
Limitation
of Liability & Disclaimers
EXCEPT WHERE PROHIBITED BY APPLICABLE STATUTE, IN NO EVENT SHALL WAPICLOUD, ITS
DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR INDIRECT,
CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST
PROFIT, LOST REVENUE, LOSS OF DATA, OR LOSS OF BRAND REPUTATION.
WapiCloud specifically disclaims operational liabilities stemming from downstream
disruptions initiated directly by Meta Platforms, Inc. (such as WhatsApp global service
interruptions, regional telecom gateway outages, or spontaneous policy alterations).
Total cumulative liability shall not exceed fees paid by Customer during the prior
3-month term.
09
Suspension
& Service Termination
Either party may terminate active subscription plans with thirty (30) days written
notice. Immediate suspension without notice may occur if:
blockSpam abuse complaints exceed
0.5% of delivered volume
credit_card_offUnpaid invoice exceeds 14
days overdue status
crisis_alertMalicious payload probing or
DDoS attempts
security_update_warningDirect Meta WABA account
revocation or ban
10
Governing
Law & Arbitration
These Terms shall be governed by and construed in accordance with the substantive laws
of the State of Delaware, United States, without regard to conflicts of law provisions.
Any controversy or claim arising out of or relating to this contract shall be settled by
binding arbitration administered by the American Arbitration Association (AAA) in
accordance with its Commercial Arbitration Rules.
balanceAll proceedings must be conducted on an individual basis. You hereby waive class
action and representative dispute participation.
LEGAL COUNSEL & DPO DIRECTORY
Have questions about our enterprise terms?
Our legal department and Data Protection Officer (DPO) are available to review
customized Data Processing Addendums (DPAs), standard contractual clauses (SCCs),
and BAAs.
mail
legal@wapicloud.io
|security
dpo@wapicloud.io