Bodhinox Connect

Platform and permissions

How Bodhinox Connect uses the WhatsApp Business Platform

This page explains, for businesses and for Meta reviewers, how Bodhinox Connect connects to WhatsApp, what it does with the access you give it, who bills you for what, and how to remove that access and your data.

In short

  • Bodhinox Connect is software that runs on the WhatsApp Business Platform from Meta, using the Cloud API that Meta hosts.
  • Each business connects its own WhatsApp Business Account and phone number through Meta's Embedded Signup. The account and number stay in that business's Meta business portfolio.
  • For WhatsApp messaging we use two core permissions: whatsapp_business_messaging to send and receive messages, and whatsapp_business_management to manage templates and phone numbers. A few other Meta permissions are asked for only when you turn on the feature that needs them.
  • Meta bills WhatsApp message charges to the business directly. Our plan prices do not include them.
  • A business can disconnect at any time, from Bodhinox Connect or from Meta, and can delete its data from Bodhinox Connect.

WhatsApp and Meta are trademarks of Meta Platforms, Inc. Bodhinox Connect is not affiliated with or endorsed by Meta.

Connecting with Embedded Signup

Businesses connect WhatsApp to Bodhinox Connect through Embedded Signup, a guided window that Meta provides and runs. We never ask for your Facebook password, and we never see it.

  1. In Bodhinox Connect, the workspace owner or an admin chooses to connect a WhatsApp number. Meta's window opens.
  2. You log in to Facebook in that window and pick, or create, your Meta business portfolio.
  3. You pick, or create, the WhatsApp Business Account to use.
  4. You add a phone number, verify it with the code Meta sends by SMS or voice call, and set the display name customers will see.
  5. Meta shows exactly which permissions Bodhinox Connect is asking for, and for which accounts. You approve them.
  6. Bodhinox Connect receives access for the accounts you selected, registers the number on the Cloud API and subscribes to its message updates. The number is then ready in your inbox.

You keep ownership. The WhatsApp Business Account, the phone number, its display name and its templates all belong to your business in Meta. Bodhinox Connect only works with the accounts you chose in this window. If you leave, you take the account and number with you, along with your approved templates.

Permissions we use and why

PermissionWhat Bodhinox Connect does with it
whatsapp_business_messagingSends the messages your team, campaigns, flows and AI agent write: text, media, templates, buttons, lists, product messages and WhatsApp Forms. Receives your customers' messages and the sent, delivered, read and failed status of every message you send, so they appear in your inbox and reports.
whatsapp_business_managementReads your WhatsApp Business Account and its phone numbers, quality rating and messaging limit. Creates and submits the message templates you build, reads their review status and category, and deletes templates when you ask. Creates and publishes the WhatsApp Forms (Meta Flows) you build. Registers phone numbers and subscribes Bodhinox Connect to account updates, such as template reviews, quality changes and account notices.

Other Meta permissions, used only if you turn on the feature

These are asked for in a separate Meta permission window, at the moment you switch the feature on. If you never use the feature, Bodhinox Connect never asks for them.

  • catalog_management: syncs your Meta catalogue so you can send product messages.
  • whatsapp_business_manage_events: sends the conversion events you choose to enable back to Meta.
  • ads_read: reads results for your click-to-WhatsApp ads, so you can see which ads start chats.
  • leads_retrieval, pages_read_engagement, pages_manage_metadata and pages_manage_ads: receive the answers people submit in your Facebook lead forms, so the leads appear as contacts.

We use this access only to run the features you use in your workspace. We do not use it to message anyone on our own behalf, and we do not read or change accounts, Pages or ad accounts you did not select.

Templates and Meta approval

To start a conversation, or to message a customer more than 24 hours after their last message, WhatsApp requires an approved template. You write templates in Bodhinox Connect and choose a category: Marketing, Utility or Authentication. We submit them to Meta for you.

Meta decides whether a template is approved, and in which category. Bodhinox Connect cannot approve a template or change Meta's decision. We show each template's status as Meta reports it: in review, approved, rejected, paused or disabled, with Meta's reason where it gives one. Inside the 24-hour customer service window, your team can reply freely without a template.

UtilityApproveden

order_shipped

Hi {{1}}, your order {{2}} has shipped. Track it here.

Track order
An approved utility template.
MarketingIn reviewen

festive_early_access

Hi {{1}}, our festive collection is live, with early access for past customers until Sunday.

Reply STOP to stop offers

A marketing template waiting for Meta's review.

Who bills what

  • Meta charges for WhatsApp messages, per message, based on the template category and the recipient's country, at Meta's published rates. These charges are billed by Meta to the payment method on your WhatsApp Business Account. Under Meta's current pricing, replies inside the 24-hour customer service window are free.
  • Bodhinox Connect charges only for its plan, in INR with GST extra. Plan prices do not include Meta's charges, and we do not add a markup to them.

See pricing for plans.

How we handle data

When you connect a number, Bodhinox Connect stores what it needs to run your workspace:

  • your WhatsApp Business Account, phone number and display name identifiers;
  • the access token Meta issues for those accounts;
  • messages sent and received on the number, with media, delivery and read statuses, and the contacts they belong to;
  • your templates, their review results, and account notices from Meta.

How we protect it:

  • Data is encrypted in transit (HTTPS), and access tokens are encrypted at rest.
  • Access tokens stay on our servers. They are never sent to the browser or shown to any user, including your own team.
  • Each workspace's data is separated in the database, so one workspace cannot read another's.
  • Roles (owner, admin, agent and viewer) control what each person in your team can do.
  • We do not sell personal data, we do not use workspace data to advertise to anyone, and we do not use it to train AI models.
  • We do not receive your personal Facebook profile, friends or posts.

Your messages and contacts belong to your business. The privacy policy covers this in full, including the service providers we use and how long data is kept.

Disconnecting and deleting data

Disconnect a number in Bodhinox Connect

The workspace owner or an admin opens Settings and disconnects the WhatsApp number. Sending and receiving stop, no new data arrives from that number, and we delete our access token for it.

Remove our access in Meta

You can also remove Bodhinox Connect from your Meta business portfolio settings, or from your Facebook settings under Business integrations. Meta then withdraws our access. When Meta tells us the access was removed, we mark the number as disconnected in your workspace.

Delete your data

Disconnecting keeps your past conversations in the workspace so you can still read and export them. To erase them, the workspace owner deletes the workspace from Settings → Privacy & access. The workspace can be restored for 30 days in case it was a mistake. After that its contacts, conversations, media, campaigns, orders and settings are erased, except billing and tax records the law requires us to keep. You can export a copy first.

If you messaged a business that uses Bodhinox Connect, that business controls your data. Reply STOP to stop its campaigns, and ask the business to delete your data. If you cannot reach it, write to us. The full steps are on the data deletion page.

Messaging rules

Every business on Bodhinox Connect agrees to Meta's WhatsApp Business Messaging Policy and Commerce Policy and to our own rules. In short: get opt-in before you message people, honour STOP and opt-outs at once, never use bought or scraped lists, and do not promote anything WhatsApp prohibits. Opt-outs are respected across campaigns, flows and automations. Read the acceptable use and messaging policy and our terms of service.

Questions

For questions about this page, our use of Meta permissions, or a data request, write to uday@bodhinox.com. Bodhinox Connect is operated by Bodhinox in India.

Privacy policyData deletionAcceptable use