Privacy Policy

Last updated: April 16, 2026

Prokken ("we", "our", or "us") operates the Prokken WhatsApp CRM & Auto-Responder platform available at prokken.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Account Information

When you register for a Prokken account, we collect your name, phone number, password (stored hashed), and organization name. If you are invited as a team member, we collect the same information when you accept the invitation.

1.2 WhatsApp Data

When you connect a WhatsApp session via QR scan, Prokken acts as a relay between your WhatsApp account and our platform using WAHA (self-hosted WhatsApp Web API). We process:

  • Incoming and outgoing messages (text, images, videos, documents, audio)
  • Contact names and phone numbers from your WhatsApp conversations
  • Message delivery status (sent, delivered, read)
  • Typing and presence indicators

All WhatsApp data is processed on our self-hosted infrastructure. We do not sell or share your WhatsApp messages with third parties.

1.3 Usage Data

We collect information about how you interact with the platform, including pages visited, features used, browser type, IP address, and timestamps. This data helps us improve the service.

1.4 Payment Information

Subscription payments are processed through Stripe. We do not store your credit card number or banking details on our servers. Stripe handles all payment data subject to their own Privacy Policy.

1.5 Uploaded Files

Files you upload (images, documents, media for broadcasts or messages) are stored via Cloudinary on our behalf. These files are only accessible through authenticated API requests.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Prokken platform
  • Process your WhatsApp messages and auto-replies
  • Execute broadcasts to your selected contact lists
  • Authenticate your account and manage sessions
  • Process subscription payments and manage billing
  • Send service-related notifications (via WhatsApp or email)
  • Monitor platform analytics and generate usage reports
  • Detect, prevent, and address technical issues or abuse
  • Improve and optimize the platform

3. Data Sharing & Third Parties

We share your data only with the following:

  • Stripe — for processing subscription payments
  • Cloudinary — for file and media storage
  • WAHA (self-hosted) — for WhatsApp Web API connectivity. WAHA runs on our own infrastructure; no data is sent to external WAHA services.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Storage & Security

Your data is stored on servers managed by us, hosted on Hostinger VPS infrastructure. We implement industry-standard security measures including:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Hashed passwords (never stored in plain text)
  • httpOnly, secure cookies for authentication tokens (never exposed to client-side JavaScript)
  • Role-based access control (admin vs. agent permissions)
  • Regular security updates and monitoring

5. Data Retention

We retain your account data and conversation history for as long as your account is active. If you delete your account or cancel your subscription, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to processing of your data

To exercise any of these rights, contact us at [email protected].

7. Cookies

Prokken uses essential cookies for authentication and session management. For full details, see our Cookie Policy.

8. Children's Privacy

Prokken is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

9. International Data Transfers

Prokken serves users globally, including South Asia, the Middle East, Africa, Latin America, and Southeast Asia. Your data may be processed on servers located in a different country than where you reside. By using Prokken, you consent to the transfer of your data to our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Prokken
Hasibul Islam
Email: [email protected]
Phone: +8801906315901
Website: prokken.com