Privacy policy

Last updated: 8 September 2026.

1. Data we process

We process account details, email addresses, usage balances, cryptographic hashes of API keys and technical attempt records. Recipient numbers are masked in activity records. OTP values are not displayed or stored in application logs.

2. Processing purposes

Data is used to operate verification, prevent abuse, account for credits, provide support, verify payments and protect the platform.

3. Service providers

When enabled, the recipient number is temporarily passed to the application’s WAHA session, or to Twilio if selected by the application. Payments are processed on Dodo Payments’ hosted page. We do not sell personal data or store raw OTP values in the database.

4. Retention

Attempt records are retained for operational, security and dispute-resolution needs, then deleted or aggregated. The final retention period must be defined before production launch according to the business’s requirements.

5. Security

We use HTTPS, server-side secrets, cryptographic API-key hashes, webhook signature verification and rate limits. No electronic system is completely free of risk.

6. User rights

Access, correction or deletion may be requested where applicable by contacting privacy@mz3b.com. Information needed for legal and security obligations may be retained.

7. WhatsApp

MZ3B Verify is independent and is not affiliated with WhatsApp or Meta. WAHA is not Meta’s official API. Use of a WhatsApp number is subject to WhatsApp’s terms and policies and may be restricted.

8. Language preference

On your first visit to the homepage, your browser’s language selects Arabic or English. When you change the language manually, we save your choice in a cookie named mz3b_locale for up to one year in this browser. It contains no account key or tracking identifier. You can delete it in your browser settings.