Help Centre & Comprehensive FAQ

Complete operational guide for gateway, delivery safety, AI CS Assistant, API integrations, and billing.

Contact Support Team

No. Qirim operates under strict privacy and access demarcation principles:
  • Zero Personal Chat Access: The Qirim team and underlying infrastructure do not access, read, download, or monitor personal or family conversations on your WhatsApp account.
  • Pure Transport Relay Function: The Qirim platform acts strictly as a technical transmission bridge to process messages specifically dispatched via your REST API, Broadcast queues, CS Bot workflows, or inbound inquiries opened in your Teams Live Desk.
  • Data Privacy & PDP Compliance: Customer data and message transmission audit records are protected by comprehensive Non-Disclosure agreements and are never sold or transferred to third parties for commercial use.

No. Technically and architecturally, WhatsApp device sessions have strict authorization boundaries:
  • Official Multi-Device Protocol: Pairing via QR Code in Qirim works identically to WhatsApp Web in a desktop browser. This session only acts as a companion client (Linked Device) for sending and receiving messages.
  • No Access to WhatsApp OTP or PIN: Qirim never requests, processes, or stores your WhatsApp registration SMS/phone OTPs or Two-Step Verification PIN.
  • Master Authority Stays on Physical Smartphone: Your primary smartphone retains absolute master control. Qirim has no technical capability to change phone numbers, transfer account ownership, or alter your WhatsApp security settings.
Best Practices to Keep Your WhatsApp Account Secure:
  • Always Enable 2-Step Verification: In WhatsApp on your phone, navigate to Settings > Account > Two-Step Verification, and configure a 6-digit PIN and recovery email.
  • Never Share OTP Codes: Official WhatsApp staff and the Qirim team will never ask for your SMS or phone verification codes.
  • Regularly Audit Linked Devices: Periodically check Linked Devices in WhatsApp on your phone to review all active sessions.
  • Enable 2FA on Qirim Portal: Protect your Qirim web login using Google Authenticator via the Profile & Security menu.

Your WhatsApp authentication keys and tokens are stored inside tightly isolated, sandboxed per-user server directories. Each customer account has dedicated, closed-access storage preventing cross-tenant leakage. All API and webhook transmissions are strictly encrypted via 256-bit SSL/TLS certificates.

Qirim enforces strict privacy-by-design standards:
  • Encrypted Payloads: Stored message contents are encrypted at rest with industrial cryptographic algorithms using unique per-tenant keys. Admin portals cannot inspect raw message payloads.
  • Phone Number Masking: Destination and sender phone numbers in system audit logs are masked to protect consumer contact information.
  • Transmission Status Audits: Superadmin telemetry tracks delivery metadata (timestamps, HTTP response codes, success/failure counts) without reading chat text.

The Single Active Session Protection ensures your Qirim account can only be active in one browser session at any given time:
  • Real-Time Approval Modal: When a new login attempt occurs from another device, your currently active session immediately receives an approval modal showing the IP address, city location, browser agent, and attempt timestamp.
  • Total Access Control: You can click "Yes, Authorize & Logout Here" or "Not Me! Deny & Protect Account" to immediately block suspicious access attempts.
  • Dual OTP Fallback (Email + WhatsApp): If your previous device is offline or inaccessible, you can reclaim session access by submitting BOTH OTP codes dispatched simultaneously to your registered Email and WhatsApp.
  • Self-Service Toggle: This feature can be turned on or off anytime via the Profile & Security dashboard settings.

Qirim integrates an advanced Multi-Tier Delivery Safety Engine:
  • Multi-Tier Dynamic Typing Simulator: Emulates authentic human typing cadence (40–100ms per character) with randomized human pauses before dispatching.
  • Dynamic Spintax Randomizer: Syntax like {Hello|Hi|Good {morning|day}} creates unique variations per recipient, preventing duplicate content flagging.
  • Adaptive Queue Rate Limiting: Configurable randomized intervals (1,500ms – 3,500ms) between transmissions eliminate unnatural burst spikes.
  • Pre-Flight Content Safety Scanner: Proactively checks outbound templates for formatting compliance and high-risk phrasing before batch dispatching.

For new phone numbers (registered less than 3 months ago), follow this recommended warm-up schedule:
  • Week 1: Use the number for natural two-way conversations (sending and receiving) with 10–20 familiar contacts.
  • Week 2: Begin gradual broadcasts of 50–100 messages/day with 5–10 second delay intervals and active Spintax variations.
  • Week 3+: Gradually scale volume up to 500+ messages/day. Ensure recipients are opt-in contacts to maintain positive recipient feedback.

The AI engine reads directly from your customized Knowledge Base (business profile, product catalog, pricing, bank details, FAQs). It constructs polite, contextual responses tailored to your brand voice with zero generic hallucinations.

The system is equipped with an automated Human Handoff Intent Detector. When a customer sends keywords such as "human agent", "talk to support", "complaint", or "return", the AI automatically suspends auto-responses and routes the chat ticket to your Teams Live Desk for immediate staff handling.

Every account receives a secure API Key. Simply include the x-api-key: YOUR_KEY header when dispatching HTTP POST requests to endpoints such as https://qirim.id/api/v1/send-message. We support high-speed OTP delivery, media attachments (images, PDF documents, audio notes, video), and CTA interactive buttons. Complete documentation and code examples for Node.js, PHP, cURL, and Python are available on our API Documentation Page.

Yes! Simply enter your Webhook Endpoint URL under Device Settings. Our server will dispatch real-time JSON payloads for event types:
  • messages.upsert: New inbound messages from customers (text, media, audio, location).
  • messages.update: Real-time message status transitions (sent, delivered, read/blue ticks, failed).
  • connection.update: Device connectivity state changes (connected, connecting, disconnected).

There is no hard recipient limit per campaign, as long as it remains within your plan monthly quota. Our platform utilizes asynchronous background worker queues that throttle and dispatch messages sequentially with safe randomized intervals without freezing your browser.

The account owner can create sub-accounts for customer service and sales staff under the Teams section. Each staff member logs in using their own unique credentials to handle WhatsApp conversations simultaneously without needing direct access to the physical mobile phone.

Payments can be completed instantly via Dynamic QRIS (BCA, Mandiri, BRI, BNI, GoPay, OVO, ShopeePay, DANA) or Manual Bank Transfer with unique 3-digit verification. Once payment is confirmed, invoices are marked PAID automatically and your account limits and quotas are provisioned immediately.