> ## Documentation Index
> Fetch the complete documentation index at: https://docs.digifist.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance

> WhatsApp messaging policies, consent rules, conversation-window mechanics, phone-number quality, and data privacy — the cross-cutting rules every Galantis feature respects.

WhatsApp's Business Platform is a permission-based channel. Every campaign, automation, inbox reply, and Back-in-Stock notification from Galantis runs through the same compliance pipeline before a message reaches a customer: explicit opt-in, the right conversation window for the message type, an approved template if needed, and clean phone-number quality. Get these five right and the platform stays open. Get them wrong and Meta restricts your account.

<Warning>
  Compliance is not optional and it is not a Galantis policy choice — it's Meta's enforcement, baked into the WhatsApp Business Platform itself. Templates can be paused, throughput can be cut, and phone numbers can be suspended. The guides below explain how Galantis automates each rule so you don't have to police it yourself.
</Warning>

## The five pillars

<CardGroup cols={2}>
  <Card title="Opt-in & consent" icon="circle-check" href="/galantis/whatsapp/compliance/opt-in-consent">
    Marketing requires explicit opt-in. Galantis tracks consent state per customer and refuses sends to anyone who hasn't subscribed.
  </Card>

  <Card title="Conversation window" icon="clock" href="/galantis/whatsapp/compliance/conversation-window">
    The 24-hour customer service window decides whether free-form messages are allowed or a template is required.
  </Card>

  <Card title="Templates vs session messages" icon="message" href="/galantis/whatsapp/compliance/templates-vs-session">
    What each message type is, when each is required, and how to avoid send failures from picking the wrong one.
  </Card>

  <Card title="Quality & deliverability" icon="signal" href="/galantis/whatsapp/compliance/quality-deliverability">
    Phone number quality rating, messaging tiers (1.000 → unlimited per day), and how to keep your number in the green.
  </Card>

  <Card title="GDPR & data privacy" icon="shield" href="/galantis/whatsapp/compliance/gdpr-data-privacy">
    Data deletion via Shopify webhooks, controller/processor relationship, cross-border transfers, and regional regulations (GDPR, LGPD, CCPA).
  </Card>
</CardGroup>

## What every merchant should know on day one

<AccordionGroup>
  <Accordion title="You can only message customers who opted in" icon="key">
    Meta's [Business Messaging Policy](https://business.whatsapp.com/policy) is unambiguous: "You may only contact people on WhatsApp if (a) they have given you their mobile phone number; and (b) you have received opt-in permission." Galantis enforces this — see [Opt-in & consent](/galantis/whatsapp/compliance/opt-in-consent) for how it's captured and tracked.
  </Accordion>

  <Accordion title="Outside the 24-hour window, only approved templates" icon="clock">
    The customer service window opens when a customer messages you. Inside, you can reply freely. Outside, every outbound message must be a Meta-approved template. See [Conversation window](/galantis/whatsapp/compliance/conversation-window).
  </Accordion>

  <Accordion title="Wrong template category is a violation" icon="ban">
    Submitting a marketing message as a Utility template — to bypass marketing restrictions or to save on Meta's per-message cost — is a Meta policy violation. Templates get rejected, and repeat violations downgrade your phone number's quality. See [Templates vs session messages](/galantis/whatsapp/compliance/templates-vs-session).
  </Accordion>

  <Accordion title="Quality is measured per phone number" icon="signal">
    Block rate, report rate, and customer feedback drive a Green / Yellow / Red rating. Yellow throttles you; Red can suspend your number. See [Quality & deliverability](/galantis/whatsapp/compliance/quality-deliverability).
  </Accordion>

  <Accordion title="Customer data deletion is automatic via Shopify" icon="shield">
    Shopify forwards GDPR `customers/redact` and `shop/redact` webhooks to Galantis. Affected records are moved to a `REDACTED` state and removed from all future sends. See [GDPR & data privacy](/galantis/whatsapp/compliance/gdpr-data-privacy).
  </Accordion>
</AccordionGroup>

## Read this section before going live

A campaign that targets non-opted-in customers will not send. An automation that fires outside the conversation window must use a pre-approved template. A customer who replies STOP is excluded from every future send. Reading these five guides before configuring your first campaign saves real troubleshooting time later — and it's how merchants avoid the slow drip of quality-rating damage that takes months to recover from.

## Meta's official policies

<CardGroup cols={2}>
  <Card title="WhatsApp Business Messaging Policy" icon="arrow-up-right-from-square" href="https://business.whatsapp.com/policy">
    The canonical rulebook for what you can and can't do on the WhatsApp Business Platform.
  </Card>

  <Card title="WhatsApp Commerce Policy" icon="arrow-up-right-from-square" href="https://www.whatsapp.com/legal/commerce-policy">
    What products and services are prohibited from being promoted or sold via WhatsApp.
  </Card>
</CardGroup>