Acceptable Use Policy

This Acceptable Use Policy (AUP) keeps WA.cr safe and trusted for everyone, and keeps your senders on every channel, such as your WhatsApp number and your email, in good standing with Meta and with mailbox providers. It forms part of our Terms of Service. By using WA.cr you agree to follow it.

1. Message only people who opted in

You may only message people who have given you valid, demonstrable opt-in to be contacted on the channel you use, whether that is WhatsApp, email, SMS or any other. You must honour every opt-out (such as “STOP” or an unsubscribe) promptly and stop messaging anyone who asks. Buying, renting or scraping lists of phone numbers or email addresses is not allowed.

2. Follow WhatsApp & Meta policies

Your use of WA.cr must comply with the WhatsApp Business Messaging Policy, the WhatsApp Commerce Policy and Meta's platform policies. These rules pass through to you, and Meta can restrict or block senders that breach them.

3. Email

When you send email through WA.cr, from your own domain or from a shared address on WA.cr's sending domain wacr.im, you are the sender. Every email you send must follow these rules:

• Email only people who gave you permission, such as your customers or people who signed up to hear from you, and keep a record of when and how they agreed.
• Never use bought, rented, scraped or appended lists.
• Identify yourself: put your business in the From name, and your business name and a valid postal address in every email. A sender on a shared address must have your business name in its From name.
• Write subject lines that reflect what the email is about.
• Honour every unsubscribe immediately, and never make unsubscribing hard.
• Don't remove or hide the footer or the unsubscribe link in your emails.
• Keep complaints (people marking your email as spam) under 0.1% of the emails you send, and remove addresses that bounce.
• Follow the bulk-sender rules of mailbox providers, and the anti-spam and data-protection laws that apply to you: India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and, where they apply, CAN-SPAM in the United States, the GDPR in the European Union and the United Kingdom, and CASL in Canada.

A business registered in India sends email broadcasts only after it passes our business document check; we may ask any other business for its registration documents before it sends, and a suspended business cannot send. Every broadcast's footer says it is a promotional email from your business, and carries your business name, postal address and contact email, and your privacy policy link when you have set one in Business identity: without a postal address or a contact email, it does not send. We pause your email broadcasts automatically if spam complaints reach 0.1% of what you sent in the last 30 days (once you have sent 1,000), or emails that bounce permanently reach 4% (once you have sent 200). Our team reviews a pause before lifting it. We may also pause or stop your email sending if you break these rules. What the people you email see, and how they can unsubscribe or report you, is set out on our Email sent through WA.cr page.

4. No prohibited or harmful content

You must not use WA.cr to create, send or facilitate:

• spam, deceptive, fraudulent or misleading messages;
• a subject line, title or opening that misleads people about what the message contains;
• sexually explicit or adult content, in a broadcast on any channel;
• illegal goods or services, or items restricted under the WhatsApp Commerce Policy;
• content that is hateful, harassing, violent, sexually exploitative, or harmful to children;
• malware, phishing, or links intended to deceive or harm recipients;
• infringement of others' intellectual property, privacy or other rights.

5. Children

Don't use WA.cr to market to children. Don't track, profile or target advertising at anyone you know to be under 18, which means not sending them broadcasts that measure opens or clicks, and don't process a child's personal data without verifiable consent from a parent or lawful guardian, as section 9 of India's Digital Personal Data Protection Act, 2023 requires.

6. Your duties to the people you message

On every channel, you are the Data Fiduciary for your customers' personal data, and WA.cr processes it on your behalf. You must:

• tell people what you collect and why, when you collect it, and get their consent (or have another lawful reason) before you message them;
• let people withdraw their consent as easily as they gave it, and stop at once when they do, whether they unsubscribe, reply STOP, write back or tell you on the phone;
• answer requests to see, correct or erase their data. WA.cr lets you export one person's data and delete a contact;
• give people a contact for questions and complaints about their data. Set your contact email in Business identity: every email broadcast shows it;
• keep the data you hold accurate and secure, and only for as long as you need it.

7. Don't abuse the platform

• Don't attempt to break, overload, reverse-engineer or gain unauthorised access to WA.cr or its infrastructure.
• Don't evade messaging limits, quality controls or template-approval rules, or send at volumes designed to trigger spam complaints.
• Don't misrepresent your identity or your business.

8. Keep your quality up

WhatsApp rates the quality of your sender based on how recipients respond. Sending unwanted messages leads to blocks and complaints, which can lower your quality rating and trigger messaging limits or a pause by Meta. Mailbox providers judge email the same way: complaints and bounces send your email to spam or get it blocked. Sending relevant, opted-in messages keeps your senders healthy.

9. What happens if this policy is broken

Depending on the severity, we may warn you, throttle or suspend sending, or terminate your account — and Meta may independently restrict your WhatsApp sender. Where the law requires, or where there is a risk to people or the platform, we may act immediately. We mirror Meta's quality and enforcement actions where they apply to your account.

10. Reporting abuse

If you believe someone is misusing WA.cr, or you received a message you did not opt in to, tell us at admin@kdc.in and we will look into it. For an email sent through WA.cr, you can also forward it to abuse@wacr.im, with its full headers if you can.