We’re updating our WhatsApp Business Platform Cloud API Terms. These changes will go into effect on September 23, 2026. View a preview of the new terms here.
WhatsApp Business Platform Cloud API Terms
- 1. Introduction
1.1 Cloud API is an application programming interface (API) that allows a business to integrate WhatsApp messaging capabilities either directly or through a third party authorized to use Cloud API on such business’ behalf (a “Solution Provider”, and such business, a “Client”). Cloud API is offered by Meta and allows its users to send and receive messages over the WhatsApp network, create message templates, and configure delivery events programmatically.
1.2 When you sign up for or use Cloud API, you and the company that you are authorized to represent (“you”, “your”, or “Company”) agree to these WhatsApp Business Platform Cloud API Terms (“Cloud API Terms”) with (a) Meta Platforms, Inc., if you are located in the United States, Canada, or Brazil, or (b) Meta Platforms Ireland Limited, if you are located elsewhere (“Meta”, “us”, “we”, or “our”). The contracting entity offering you Cloud API may be an affiliate of Meta, and you may be subject to special provisions, as described here. When you sign up for or use Cloud API on behalf of a company or other legal entity, you represent and warrant that you have full authority to enter into these Cloud API Terms on their behalf. These Cloud API Terms govern your access to and use of Cloud API, whether you are a direct business customer, developer, Client, or Solution Provider. 1.3 Your use of Cloud API is also subject to the below terms, each of which are incorporated herein by reference, with:
- 2. Cloud API
2.1 WhatsApp Business Platform. Cloud API is part of the WhatsApp Business Platform. The WhatsApp Business Platform offers multiple APIs which allow businesses to send or receive messages or use other available features to interact with consumer users on the WhatsApp network (“WhatsApp User(s)”). Cloud API is not provided by WhatsApp. 2.2 Account. To use Cloud API, you must have a business portfolio with Meta Business Suite and enable it to be used with your WhatsApp Business Account (“WABA”) as set forth in the Meta Terms for WhatsApp Business. Your use of Meta Business Suite, and any other Meta-provided services that you choose to use in connection with Cloud API, are subject to separate terms applicable to those services. Meta further offers additional optional services that businesses can choose to use with Cloud API. When you choose to use these services, different terms may apply
- 3. Fees
3.2 Price Transparency. If you are a Solution Provider, you may charge your customary fees to your Clients for technology integration, support, management, and storage services, and applicable taxes related to Cloud API, including, as part of a bundled offering with any other products or services. In addition, if you are authorized to resell Cloud API under separate agreement with Meta, (a) you have sole discretion as to the fees that you charge to Clients for access to and use of Cloud API, and (b) you will clearly disclose to each Client, separate from your fees, the amount that Meta charged you for the Client’s use of Cloud API, and the amount that you charge the Client for its use of Cloud API.
3.3 Suspension. Without affecting our other rights under these Cloud API Terms or the Meta Terms for WhatsApp Business, if you do not pay any fees in accordance with the Meta Terms for WhatsApp Business by the due date, or if you are an invoiced customer and you approach, reach, or exceed the maximum spending limit for your credit line, we may suspend all or part of your access to and use of Cloud API until you make payment in full. We will endeavor to provide you with notice prior to suspension.
- 4. Use of Company Content
4.1 License to Company Content. Subject to these Cloud API Terms, as between you and Meta, you and your licensors retain all copyright, trademarks or any other right, title, and interest, if any, in and to the content, information, and data that you, your Solution Provider, or your Client, as applicable, provides to Meta in connection with your use of Cloud API, including Company Personal Data as defined below (“Company Content”). During the period you are a user of Cloud API, you grant Meta a non-exclusive, worldwide, royalty-free, fully-paid right to use any Company Content, insofar as they are protected by intellectual property or similar rights, to operate, secure and provide Cloud API to you, pursuant to these Cloud API Terms.
4.2 Company Personal Data. When using Cloud API, you make Personal Data available to Meta by you or your Client communicating with data subjects via Cloud API: in particular, phone numbers, message content, personal identifiers, and message details (type, time, etc.) relating to data subjects (“Company Personal Data”). To the extent that Company Personal Data is Processed by either party in relation to these Cloud API Terms, the parties shall comply with the Data Processing Terms set out in Exhibit A to these Cloud API Terms (“Data Processing Terms”). The Data Processing Terms are applicable and expressly incorporated by reference into these Cloud API Terms to that extent. “Personal Data”, “Controller”, “Processor”, and “Processing” in these Cloud API Terms have the meanings set forth in the Data Processing Terms.
Unless we have your permission, are required to do so by law, or are permitted under these Cloud API Terms, we will not retain, use, disclose or otherwise Process Company Personal Data except to provide Cloud API to you, as described in these Cloud API Terms, and will not give access to or information about Company Personal Data to third parties (other than service providers acting only on Meta’s behalf in providing these services to you). You instruct us to Process Company Personal Data on your behalf (or on your Clients’ behalf, if you are a Solution Provider) (a) for the purposes of providing and improving Cloud API, and as otherwise permitted by applicable laws; (b) to store phone numbers and personal identifiers you provide to us for contact book, so long as it is enabled; and (c) to provide insights and metrics about your use of Cloud API, including link tracking. You instruct Meta to aggregate and/or anonymize Company Personal Data (i) to improve Cloud API and other Meta Business Suite tools or products that interact with Cloud API; (ii) to ensure the security and integrity of Cloud API; and (iii) for internal product benchmarking and analytics.
4.3 Your Obligations. You agree: (a) that you are solely responsible for any Company Content; (b) to obtain (or if you are a Solution Provider, ensure your Clients obtain) all necessary rights and have a proper legal basis to allow the use of Company Content as contemplated in these Cloud API Terms, including, when applicable, legally sufficient consent from your Clients and any applicable third party; and (c) that your use and our provision of Cloud API, including Company Content and its use under these Cloud API Terms, will not violate any laws or third party rights, including intellectual property, privacy, or publicity rights. It is your sole responsibility to determine your legal obligations. We make no representations or warranties that Cloud API meet the needs of entities regulated by laws and regulations with heightened confidentiality or other requirements, such as healthcare, financial, or regulated entities. You are solely responsible for any decision to share Company Content or parts of it with any third parties, and Meta is not responsible for use, access, alteration, distribution, or deletion of Company Content by those to whom you, your Solution Provider, or your Client, as applicable, make it available.
4.4 Prohibited Data. Company Content may not contain any information or data that is subject to safeguarding and/or limitations on distribution pursuant to applicable laws and/or regulation (“Prohibited Information”). With regard to health information, you acknowledge that Meta is not a Business Associate or Subcontractor (as those terms are defined in the Health Insurance and Accountability Act, (“HIPAA”)) and that Cloud API is not HIPAA compliant. Meta has no liability for Prohibited Information, notwithstanding anything to the contrary in these Cloud API Terms.
4.5 Deletion of Company Content. When you cease to be a user of Cloud API and after completion of any outstanding delivery of a WhatsApp communication to or from you or, as applicable, your Client, we will delete any remaining Company Content within ninety (90) days, unless we are required by law to retain it for longer. Meta does not provide an archiving service or any backup functionality, and you are solely responsible for creating backups.
4.6 Deletion of Data from your Accounts. Upon termination of these Cloud API Terms, except for data that we retain for a limited amount of time as required by law or best practices related to financial, tax, operational record-keeping, or audits, we will delete any data related solely to Cloud API from your business portfolio and your Meta for Developers account; however, you understand that deleted content may persist in backup copies for a reasonable period of time while deletion is carried out.
4.7 Legal Disclosures and Third Party Requests. You are generally responsible for responding to third party requests, including requests regarding Company Content, such as from regulators, litigants, users, or a law enforcement agency (“Third Party Requests”), but you understand that Meta may make disclosures to comply with applicable legal or regulatory requirements. Meta will undertake to inform you about any requests prior to disclosing Company Content unless prohibited by applicable law. You will first seek to obtain the information required to respond to the Third Party Requests on your own, and will contact us only if you cannot reasonably obtain such information.
4.8 Security of Data. We will implement processes and procedures designed to protect the confidentiality and security of Company Content, including by maintaining appropriate organizational, technical, and physical safeguards that are designed to: (a) protect the security and integrity of Company Content while using Cloud API and (b) guard against the accidental or unauthorized access, use, alteration, or disclosure of Company Content within Cloud API. These processes and procedures include the measures listed in Meta’s Data Security Terms (as updated from time to time, for example, to reflect technological developments) which are expressly incorporated into these Cloud API Terms by reference. 4.9 Security of Cloud API. We may (but have no obligation to) remove or limit access to Company Content and/or Cloud API if we reasonably believe that any Company Content violates these Cloud API Terms, presents a security risk, could harm Cloud API, interferes with others’ ability to use Cloud API, or violates applicable laws or regulations. Meta will provide you with reasonable notice of such action, unless prohibited by law or it needs to act more urgently.
- 5. Company License and Meta’s Rights
Subject to your compliance with these Cloud API Terms, we grant you a limited, revocable, non-exclusive, non-sublicensable, and non-transferable license to use Cloud API solely as authorized in these Cloud API Terms. This license ends upon termination of these Cloud API Terms. Except for this express license, we grant no other licenses or rights to you by implication or otherwise. We reserve all rights in all copyrights, trademarks, domains, logos, trade dress, trade secrets, patents, and other intellectual property rights associated with Cloud API.
- 6. Disclaimer
YOU USE CLOUD API AT YOUR OWN RISK AND SUBJECT TO THE FOLLOWING DISCLAIMERS. WE ARE PROVIDING CLOUD API ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS OR SUITABILITY FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND FREEDOM FROM COMPUTER VIRUS OR OTHER HARMFUL CODE. WE DO NOT WARRANT THAT ANY INFORMATION PROVIDED BY US IS ACCURATE OR COMPLETE; THAT CLOUD API WILL BE OPERATIONAL, ERROR FREE, SECURE, OR SAFE; OR THAT CLOUD API WILL FUNCTION WITHOUT DISRUPTIONS, DELAYS, OR IMPERFECTIONS. THIS SECTION APPLIES ONLY TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND DOES NOT AFFECT OUR OBLIGATIONS AS A PROCESSOR UNDER THE DATA PROCESSING TERMS.
- 7. Solution Providers
7.1 Solution Provider Role. As a Solution Provider you will comply with all obligations between you and your Clients, including how you collect, store, manage, and use your Clients’ content, information and data. You will use Cloud API, and any and all data derived from it, solely for the benefit of each of your respective Clients. The obligations in this provision shall survive any termination of these Cloud API Terms.
7.2 Client Management. You will not allow any Client to access or use Cloud API, including via your service offerings, until and unless such Client has accepted these Cloud API Terms (and the additional terms referred to in Section 1.3), for example via embedded signup and/or onboarding to Cloud API. In the event that your Client has not accepted these Cloud API Terms (and the additional terms referred to in Section 1.3), you represent and warrant that you have accepted these Cloud API Terms (and the additional terms referred to in Section 1.3) on behalf of your Client and that you are authorized by your Client to do so, and you are jointly and severally liable for, and will indemnify us for any harm that results from, your Client’s breach, acts, and omissions with respect to Cloud API, as if they were your own. You may not directly or indirectly assist, enable or encourage your Client to breach any of the provisions of these Cloud API Terms. You will timely notify us if you know or reasonably surmise that your Client has breached these Cloud API Terms.
7.3 Client Access. We may at any time prohibit any of your Client’s use of Cloud API, effective upon notice to you, and you must immediately comply with any such prohibition. You will maintain an up-to-date list of each of your Clients and will provide us with such information upon our request.
- 8. Other Terms
8.1 Access to Cloud API. We may modify, suspend, or terminate your or your Clients’ access to or use of Cloud API or discontinue the availability of Cloud API at any time, to the extent permissible under applicable law, including, if we determine, in our sole discretion, that you or your Clients violate these Cloud API Terms or applicable law or if we deem such action necessary to prevent harm or risk to us, our users, or others.
8.2 Termination of Cloud API Terms. We may terminate these Cloud API Terms at any time for any reason upon notice to you. You may terminate these Cloud API Terms at any time for any reason by providing us written notice. Upon termination of these Cloud API Terms for any reason, you must promptly discontinue all use of Cloud API and pay Meta any unpaid fees incurred prior to termination. Termination of these Cloud API Terms does not automatically terminate any other terms or agreements (including without limitation the agreements referred to in Section 1.3) with respect to any other Meta Products.
8.3 Availability. Cloud API may be interrupted, including for maintenance, repairs, upgrades, or network or equipment failures. You may check the current status of Cloud API at the Meta Status page for Cloud API for details. Cloud API or certain features thereof may not be available in all locations. We reserve the right to discontinue some or all of Cloud API in our sole discretion, including certain features, and to terminate these Cloud API Terms accordingly with notice. 8.4 Force Majeure. We will not be liable for any delay or failure to perform any obligation under these Cloud API Terms if the delay or failure is due to unforeseen events that are beyond our reasonable control, including, but not limited to, a pandemic, epidemic, strike, blockade, war, act of terrorism, riot, natural disaster (or other destructive events), failure or diminishment of power, telecommunications, data networks, or services, or refusal or revocation of a license or authorization by, or act of, a government agency or entity.
8.5 Independent Contractors. The parties are independent contractors. No agency, partnership, joint venture, or employment is created as a result of these Cloud API Terms and neither party has authority to bind the other. You must: (a) not hold yourself out as an agent, legal representative, or employee of Meta (including any affiliates), and not otherwise suggest any affiliation with Meta other than as an authorized user of Cloud API; and (b) not make any legal representations, guarantees, or warranties of any type on behalf of Meta with respect to Cloud API, or describe Cloud API in a manner inconsistent with any descriptions or specifications communicated by Meta to you.
8.6 Additional Meta Terms. These Cloud API Terms are supplemental to the Meta Commercial Terms, as well as all terms and policies incorporated or referenced in the Meta Commercial Terms. You agree that the Meta Commercial Terms apply in connection with your use of Cloud API in addition to these Cloud API Terms and that Cloud API is a “Product” or “Meta Product” for such purposes. For clarity, references in the Meta Commercial Terms to the Commercial Terms include these Cloud API Terms (such as for Sections 4 to 7 of the Meta Commercial Terms). To the extent of any conflict between these Cloud API Terms and the Meta Commercial Terms (or any terms and policies incorporated or referenced in any of them), these Cloud API Terms control with respect to Meta’s provision, and your use of Cloud API. 8.7 Confidentiality. Our communications with you may contain Meta confidential information. Meta confidential information includes any of our materials, communications, and information that we provide to you that are marked confidential or that would normally be considered confidential by a reasonable person under the circumstances. If you receive any such confidential information, you will not disclose it to any third party without our prior written consent. Meta confidential information does not include information that you independently developed, was rightfully given to you by a third-party without a confidentiality obligation, or becomes public through no fault of your own. You may disclose Meta confidential information when compelled to do so by law if you provide us reasonable prior notice, unless a court orders that we not receive notice.
8.8 Changes to Terms. Meta may update these Cloud API Terms from time to time. By continuing to access or use Cloud API after any update, you agree to be bound by it.
8.9 Translations. These Cloud API Terms are written in English. Any translated version is provided solely for your convenience. To the extent any translated version of these Cloud API Terms conflicts with the English version, the English version controls.
Exhibit A
Cloud API Data Processing Terms (“Data Processing Terms”)
These Data Processing Terms apply and are expressly incorporated by reference into the Cloud API Terms to the extent stated in the Cloud API Terms. In the event of any express conflict between the Cloud API Terms and these Data Processing Terms, these Data Processing Terms will govern solely to the extent of the conflict.
Meta and you agree to the following, to the extent required by applicable privacy and data protection laws:
Data Processing. To the extent that Meta acts as a Processor of Company Personal Data, the parties shall comply with the Meta Global Processor Terms available at https://www.facebook.com/legal/terms/Meta-Global-Processor-Terms/ (or a successor location) (the “MGPT”), as supplemented by Section 2 below. The MGPT forms part of these Data Processing Terms and is expressly incorporated herein by reference. Company Personal Data shall be considered Company Personal Data as defined in the MGPT. Supplemental Terms. Notwithstanding anything to the contrary in the MGPT, for the purposes of Meta's Processing of Company Personal Data as a Processor under the Cloud API Terms, the parties agree to supplement the MGPT with the following terms, which shall supersede any conflicting language in the MGPT:
You are the Controller of Company Personal Data and Meta Platforms Ireland Limited is the Processor of Company Personal Data, unless you are located in the United States, Canada or Brazil, in which case Meta Platforms, Inc. is the Processor of Company Personal Data.
In addition to its obligations under the MGPT, where applicable, Meta Platforms Ireland Limited shall rely on appropriate UK GDPR-compliant transfer mechanisms when transferring Company Personal Data that is subject to the UK GDPR to Meta Affiliates (such as Meta Platforms, Inc., acting as its Sub-processor).
Processing Descriptions. In conducting its activities as Processor under these Data Processing Terms in relation to any Company Personal Data, Meta confirms that:
the subject matter, nature, and purpose of the Processing is the provision of Cloud API;
the type of Personal Data is the Company Personal Data Processed by Meta in the provision of Cloud API to you, and the Data Subjects can include your or, where you are a Solution Provider your Clients’, actual and prospective users, customers, employees, suppliers, and clients, but this depends on your and, as applicable, your Clients’ use of Cloud API; and
as between you and Meta, the duration of the Processing is determined by how long you use Cloud API.
Sub-Processors. You acknowledge and agree that Meta may use those entities set out in Exhibit B (List of Agreed Sub-processors) as Sub-processors to Process Company Personal Data.
Definitions. Capitalized terms used in these Data Processing Terms and/or Exhibit B (List of Agreed Meta Sub-processors), but not otherwise defined elsewhere in the Cloud API Terms, shall have the meanings set forth in the MGPT.
Exhibit B
List of Agreed Meta Sub-Processors
In connection with the provision of Cloud API pursuant to the Meta Cloud API Terms, the named entities below may act as Meta Sub-processors*.
“Data Center/Data Storage” means the operation and maintenance of the data centers and equipment that may store Company Personal Data Processed under the Data Processing Terms in the provision of Cloud API.
| Entity Name | Activity | Country |
|---|
| Andale, Inc. | Data Center/Data Storage | US |
Amazon Web Services (AWS)
(only applicable to customers with Cloud API Local Storage enabled) | Data Center/Data Storage | Company’s applicable country |
| Cassin Networks Aps | Data Center/Data Storage | Denmark |
| Greater Kudu LLC | Data Center/Data Storage | US |
| Facebook Operations, LLC | Data Center/Data Storage | US |
| Morning Hornet LLC | Data Center/Data Storage | US |
| Pinnacle Sweden AB | Data Center/Data Storage | Sweden |
| Raven Northbrook LLC | Data Center/Data Storage | US |
| Runways Information Services Limited | Data Center/Data Storage | Ireland |
| Scout Development LLC | Data Center/Data Storage | US |
| Siculus Inc. | Data Center/Data Storage | US |
| Sidecat LLC | Data Center/Data Storage | US |
| Stadion LLC | Data Center/Data Storage | US |
| Starbelt LLC | Data Center/Data Storage | US |
| Vitesse, LLC | Data Center/Data Storage | US |
| Winner LLC d/b/a Ernst LLC | Data Center/Data Storage | US |
*Meta will use Amazon Web Services as a Sub-Processor only if Company has elected to use Cloud API Local Storage.