InsideDMInsideDMInsideDM
A shop owner’s finger rests on the trackpad, about to make the connection, while her business partner watches over her shoulder.
Trust & setup · Instagram and WhatsApp

Every opt-in on record. Every send checked. Setup, honestly counted.

Who agreed, on which channel, in their own words, and when — kept per person and checked again before every send. And connecting takes exactly the taps we say it does.

InstagramWhatsApp

One opt-in, start to finish

They agree once. It is kept, checked, and honoured.

Scroll, or tap a move. The customer’s WhatsApp on the left, the record you keep on the right.

WhatsApp
Consent record · what is keptopted in
Person+91 •••• 3210
Channel WhatsApp
PurposeOffers and campaigns
Sourceyour link verified
Their words“Hi! I’d like offers from Nimbus Sound.”
When3 Sep, 18:02

Checked before every send

Keeping your number safe

Every send checks the opt-in, Meta’s 24-hour rule, your approved templates and your own limits before it goes. When Meta refuses a message for someone, that person is held for a day rather than retried— sending again burns template quality, which is scored per phone number.

WhatsApp
Who did not get it, and whyheld back · 120
Asked not to be contacted4
No WhatsApp number with an opt-in61
WhatsApp is limiting messages to them right now3
At your marketing limit12
Held back by your send limit40
Consent, account policy, and billing are checked again by the server.
TemplatesSync from Meta
The Meta-reviewed WhatsApp message library.
weekend_offer_regularsApproved
order_shipped_updateApproved
back_in_stock_alertIn review
flash_sale_v2Rejected
Only approved templates, consent checked.

Honestly counted

Connections

Instagram connects in a popup with Instagram Login — seven screens, all of them Instagram’s. WhatsApp takes your Cloud API details, pasted once. Shopify with a read-only login, Razorpay or Cashfree with API keys, your till with one key.

InstagramWhatsApp
InstagramProfessional account
Connect
Instagram · permissions · in a popup
instagram_business_basic
instagram_business_manage_messages
instagram_business_manage_comments
instagram_business_content_publish
instagram_business_manage_insights

Instagram Login, not Facebook: no Page to pick, no account picker. Seven screens, all of them Instagram’s.

Account connected · You can close this window and return to setup.
Connect WhatsAppCloud API phone number
WABA ID
1029•••••••
Phone number ID
1187•••••••
Access token
••••••••••••••••
Display phone · optional
+91 98•••• 0042
Verified name · optional
Nimbus Sound
Token expires at · optional
2 Nov 2026
Connect

Your business account’s details from Meta Business Manager, pasted once. Stored encrypted.

What we can show in the code

Checked on the server. Encrypted per workspace. Signed on every rail.

A hidden button is not authorization: every action is checked again against live membership. Credentials are encrypted with a key bound to your workspace, each person’s data has its own key, and every webhook from Meta, Shopify and your payment provider is signature-checked before we act on it.

Recent access changes
Every change to who can do what, visible to everyone who can see the team.
Changed priya@nimbussound.in’s role from Manager2h
Created the role “Support lead”2h
Invited ravi@nimbussound.inyesterday
ravi@nimbussound.in joined the workspaceyesterday
How it is kept
Checked on the serverA hidden button is not authorization. Every action is checked again against live membership.
Encrypted, bound to your workspaceCredentials are encrypted with a key tied to your workspace. A copy in another workspace fails to decrypt.
One key per personEach person’s data has its own key. Erase them, and the key goes with it.
Signed webhooks, every railMeta, Shopify, Razorpay and Cashfree are signature-verified before we act. A missing secret is a refusal.
Managed keys, least privilegeSecrets live under a managed key; the running service holds no project-wide roles.

The privacy page is the ceiling

Your customers are yours.

Nothing ships until it is written on the privacy page first — it is the limit on what the product may do, not marketing. Delete your account from inside the product, and the workspace goes with it. Read the policy and the terms yourself.

Delete your account?permanent
Checking what this would remove…
Nimbus SoundThis workspace is deleted with it
Conversations, contacts, orders and connections in this workspace.
Type DELETE exactly to confirm permanent account deletion.
DELETE
Delete permanently

For security, sign out and sign in again before deleting your account.

Read it yourself
Privacy Policy
Your customers are yours
Your conversations don’t train AI
Deletion is engineered, not promised
We say where data actually sits
Consent, and how opt-outs work
An opt-out outlives an erasure
Terms of Service

You get 30 days’ notice before the sub-processor list changes.

Setup

What every other page needs, in one place.

An Instagram professional account and a WhatsApp Business account. A catalog for the selling pages, a payment provider for the paid ones, a till if the counter should earn. Every step can be skipped and done later.

Instagram
Instagram Login · popup
WhatsApp
Cloud API details · pasted
Shopify
Shopify login · read-only
Razorpay
API keys · encrypted
Cashfree Payments
Cashfree
API keys · encrypted
Loyverse
One key · checked every 5 min

Where it goes next

Where it goes next

Tonight

Start with the record kept properly.

Privacy Policy · Terms of ServiceInstagramWhatsApp