LEGAL DOCUMENTATION · ISO/IEC 27001 & Meta BSP Verified

Terms of Service & Conditions

Governing rules, compliance frameworks, and high-concurrency message throughput agreements for customers utilizing the WapiCloud enterprise API routing infrastructure.

schedule Effective Date: October 15, 2024 verified Version 2.4 (Enterprise Reissue) Jurisdiction: Meta BSP Tier-1
gavel Dispute & Arbitration
INFRASTRUCTURE UPTIME SLA 99.95% Guaranteed Tier-4 AWS & Meta Edge Proxies
POLICY FRAMEWORK Meta Cloud API 2024 BSP Business Messaging Rules
DATA RESIDENCY EU / US / APAC Isolates Zero-retention payload vault
REVISION STATUS Certified Active Applies to all live Webhooks
01

Agreement to Terms

These Terms of Service (“Terms”) constitute a legally binding agreement made between you, whether personally or on behalf of an enterprise entity (“Customer”, “you”), and WapiCloud Inc. (“WapiCloud”, “we”, “us”), concerning your access to and use of the WapiCloud developer portal, high-throughput REST APIs, message brokers, analytics dashboards, and webhooks (collectively, the “Platform”).

By provisioning an API key, initializing a webhook handshake, or deploying automated WhatsApp campaigns through WapiCloud, you certify that you have read, understood, and agreed to be bound by these Terms, in addition to Meta Platforms, Inc.’s terms referenced herein.

info
Corporate Authority Representation

If you are entering into these Terms on behalf of an organization, company, or governmental entity, you represent and warrant that you possess full administrative legal authorization to bind said entity to all operational stipulations and payment commitments.

02

WhatsApp Cloud API & Meta Policy Compliance

WapiCloud functions as a recognized Tier-1 Business Solution Provider (BSP) overlay and infrastructure orchestration gateway built on top of the official Meta WhatsApp Business Cloud API. Consequently, all usage of the Platform is subject to Meta’s global developer terms:

verified_user WhatsApp Business Policy

Direct compliance with WhatsApp’s commerce and messaging policy regarding prohibited industries (pharmaceuticals, weapons, adult products, unapproved lending).

layers Template Pre-Approval System

All business-initiated outbound conversations must strictly use pre-approved Message Templates verified through Meta Cloud API algorithms prior to transmission.

warning
Direct Quality Rating Enforcement (WABA Phone Tiering)

Meta dynamically calculates your WhatsApp Business Account (WABA) Quality Rating based on user spam flags, blocks, and response rates. Should your quality score degrade to “LOW” or “FLAGGED”, Meta may unilaterally throttle outbound messaging tiers from 100k/day down to 1k/day. WapiCloud accepts no liability for rate restrictions imposed directly by Meta automated moderation.

03

Account Registration, API Secrets & Security

To provision live webhooks and invoke endpoint calls, you must register a corporate account and provide verifiable Meta Business Manager verification records. You are exclusively responsible for preserving the confidentiality of system credentials:

  • check_circle API Key Rotation: Enterprise customers are mandated to rotate production access tokens at minimum every 90 days or immediately upon suspicion of compromise.
  • check_circle Webhook Verification Signature: You must configure and validate the SHA-256 HMAC signature headers on all ingress webhook payload URLs to verify legitimate origin.
  • check_circle Credential Exposure: Committing live production tokens to public version control repositories (e.g., GitHub, GitLab) will trigger immediate automated credential revocation by our edge surveillance monitor.
fingerprint Mandatory Multi-Factor Authentication (MFA) on all Workspace Administrator accounts.
ENFORCED
04

Acceptable Use Policy & Anti-Spam Mandate

WapiCloud enforces an absolute zero-tolerance standard regarding unsolicited bulk messaging, unauthorized cold outreach, and scraping. Every mobile subscriber contacted via WapiCloud API endpoints must have provided demonstrable prior consent.

how_to_reg
Explicit Opt-In Protocol Opt-in must clearly state the business name and message scope (e.g., order tracking, two-factor OTP, or promotional updates via SMS/Web form checkbox).
do_not_disturb_on
Frictionless Stop / Opt-Out Support All interactive flows must process keywords such as “STOP”, “CANCEL”, “UNSUBSCRIBE” instantly within automated webhooks and discontinue contact.
speed
Concurrency & Rate Limit Bounds Default plan tier caps concurrency at 250 requests/second. Burst queuing above contracted limits will return HTTP 429 (Too Many Requests).
gpp_bad

Failure to adhere to anti-spam opt-in guidelines empowers WapiCloud to immediately isolate workspace routing queues without prior refund obligations.

02

Billing, Conversation Credits & Subscriptions

WapiCloud applies a dual billing model comprising: (a) Monthly Platform Subscription, and (b) Per-Conversation Meta WhatsApp Gateway Fees.

Conversation Category 24h Session Window Meta Pass-Through Platform Margin
Marketing Initiated by Business Per Meta country card $0.0015 / conv
Utility & Alerts Initiated by Business Per Meta country card $0.0010 / conv
Authentication (OTP) Time-sensitive Codes Per Meta country card $0.0008 / conv
Service / Inbound Initiated by Customer 1,000 free / month tier $0.0005 / conv

Unused monthly prepaid conversational credits roll over for 60 days before expiration. Account balances falling below zero will encounter immediate automated queue throttling until the balance is reconciled.

06

Service Level Agreement (SLA) & Credits

WapiCloud commits to providing enterprise platform availability of not less than 99.95% during each billing cycle, excluding scheduled maintenance windows announced at least 72 hours in advance.

SLA Downtime Credit Thresholds Live API Metric: 99.98% Past 90 Days
99.95%+ 0% Credit 99.0% - 99.94% 10% Credit 95.0% - 98.9% 25% Credit < 95.0% 50% Credit
SLA claims must be filed within thirty (30) calendar days of the qualifying outage event.
07

Intellectual Property & Message Payload Rights

As between the parties, you exclusively own all rights, title, and interest in and to customer contact lists, conversational transcript payloads, and creative asset templates uploaded to the platform.

Data Retention & Zero-Knowledge Policy

WapiCloud acts solely as an encrypted transit conduit. Incoming webhooks and outbound payloads are transiently buffered in encrypted Redis memory queues solely for transmission acknowledgement and will be purge-scrubbed after 72 hours, unless long-term storage is explicitly provisioned in customer configuration.

08

Limitation of Liability & Disclaimers

EXCEPT WHERE PROHIBITED BY APPLICABLE STATUTE, IN NO EVENT SHALL WAPICLOUD, ITS DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOST REVENUE, LOSS OF DATA, OR LOSS OF BRAND REPUTATION.

WapiCloud specifically disclaims operational liabilities stemming from downstream disruptions initiated directly by Meta Platforms, Inc. (such as WhatsApp global service interruptions, regional telecom gateway outages, or spontaneous policy alterations). Total cumulative liability shall not exceed fees paid by Customer during the prior 3-month term.

09

Suspension & Service Termination

Either party may terminate active subscription plans with thirty (30) days written notice. Immediate suspension without notice may occur if:

block Spam abuse complaints exceed 0.5% of delivered volume
credit_card_off Unpaid invoice exceeds 14 days overdue status
crisis_alert Malicious payload probing or DDoS attempts
security_update_warning Direct Meta WABA account revocation or ban
10

Governing Law & Arbitration

These Terms shall be governed by and construed in accordance with the substantive laws of the State of Delaware, United States, without regard to conflicts of law provisions. Any controversy or claim arising out of or relating to this contract shall be settled by binding arbitration administered by the American Arbitration Association (AAA) in accordance with its Commercial Arbitration Rules.

balance All proceedings must be conducted on an individual basis. You hereby waive class action and representative dispute participation.
LEGAL COUNSEL & DPO DIRECTORY

Have questions about our enterprise terms?

Our legal department and Data Protection Officer (DPO) are available to review customized Data Processing Addendums (DPAs), standard contractual clauses (SCCs), and BAAs.

mail legal@wapicloud.io | security dpo@wapicloud.io