WhatsApp Business with AI in 2026: What Meta Allows, What It Costs and How to Stay GDPR Compliant

In short: An AI chatbot that answers questions about your business on WhatsApp is allowed. On 15 January 2026 Meta banned only AI assistants that are the product themselves, such as general-purpose chatbots like ChatGPT. To run a bot you need the WhatsApp Business Platform, not the free app. Since 1 October 2026, replies to customer messages cost money too once a phone number sends more than 1,000 of them a month. If you message customers first, you pay per template message, around 11 cents for marketing in Germany. You need opt-in, a path to a human and, in the EU since August 2026, a notice that an AI is answering.

We rewrote this article in October 2026. The previous version quoted response times, a 34 percent rise in customer satisfaction and costs per conversation, without a source. It also described a WhatsApp integration with handover and CRM logging that you cannot set up yourself in EchoCall today. Both are gone. What works today is described further down. The prices reflect Meta's change of 1 October 2026: since then, replies to customer questions cost money too once a free allowance is used up.

Why WhatsApp matters for service and less for advertising

In Germany, WhatsApp is the messenger. According to ibi research at the University of Regensburg, more than 80 percent of people over 16 use it. [1] The same survey from July 2025 also shows: more than half follow neither their contacts' status updates nor business channels. Only 5 percent look exclusively at business channels, another 13 percent at both status updates and channels. [1]

That matches what we see day to day. People use WhatsApp to write, not to follow businesses. That makes it a strong channel for service: a quick question, an appointment, the status of an order. For mass advertising it is expensive, because every marketing message costs money, and risky, because annoyed recipients block you.

App or Business Platform: which one fits

WhatsApp comes in two versions for businesses. Only one of them can be connected to an AI agent.

There are two ways onto the platform. Either directly through Meta's Cloud API, which means your own development work. Or through a Business Solution Provider (BSP) that handles setup, the interface and often billing, for its own fee.

A word on the app, because in many businesses it runs on a work phone: if you sync the address book, WhatsApp regularly checks which of your contacts use WhatsApp. For contacts without WhatsApp, it stores hash values of their phone numbers. [9] If customer numbers are in that address book, that is personal data of third parties. Under the GDPR, clarify this with your data protection officer before using the app for work.

What Meta has banned since 15 January 2026, and what it has not

In October 2025 Meta added a section on AI providers to its WhatsApp Business Solution terms, effective 15 January 2026. [2] It covers providers and developers of AI technology such as large language models, generative AI platforms and general-purpose AI assistants. They may not use the business solution to offer this technology when it is the "primary (rather than incidental or ancillary) functionality". Whether that is the case is for Meta to decide at its sole discretion.

The result: OpenAI ended ChatGPT on WhatsApp on 15 January 2026, citing the change in WhatsApp's terms. [13] At the same time, Meta made clear that businesses using AI to serve their customers are not affected. Its example was a travel company running a customer service bot. [2]

Three questions help you decide where you stand:

1. Does the bot answer questions about your products, orders or appointments? Then AI is a tool of your customer service. That remains allowed.
2. Can people ask it anything, from recipes to homework? Then it looks like a general-purpose assistant. Limit it to your topics in the prompt and have it politely decline everything else.
3. Do you sell access to the AI itself? Then the AI is your product, and that is exactly what Meta excludes.

The rules for automated replies

Besides the AI ban, the general WhatsApp Business Messaging Policy applies, last updated on 23 September 2026. [3] Five of its rules matter most for an AI agent.

• The 24-hour window. Automated replies are allowed as long as less than 24 hours have passed since the customer's last message. Every new customer message reopens the window. After that, you may only send templates approved by Meta.
• A path to a human. If you automate replies, you must offer prompt, clear and direct ways to reach a person. Meta lists in-chat handover, a phone number, an email address, web support, a store visit or a support form as examples. [3] So an in-chat handover is not mandatory, but a path to a human is.
• Opt-in before you message first. Before you contact someone, you need their number and their permission. It must be clear that they will receive messages from you, and your business name must be stated. Applicable law comes on top. [4]
• Respect opt-outs. Anyone who no longer wants messages must be removed, even if they say so by email or on the phone. [3]
• Quality. If many recipients block or report your messages, Meta limits your account. [4]

In Germany, competition law adds a further rule. Under Section 7(2) no. 2 of the German Act against Unfair Competition (UWG), advertising by electronic mail requires prior express consent. [10] We recommend treating WhatsApp marketing the same way as email marketing. Other countries have their own rules, so check yours. More on consent is in our guide to AI cold calling and GDPR.

And in the EU, Article 50 of the AI Act has applied since 2 August 2026: people must be told when they are chatting with an AI, unless it is obvious anyway. [11] The simplest way is to say so in the first reply, for example: "This is the digital assistant of Sample Ltd. I can book appointments and answer questions about our services." Background is in our article on AI labelling requirements.

What WhatsApp with AI costs

Costs come in three parts: Meta's fees, a BSP's fee if you use one, and the AI software.

Meta's fees. Since 1 July 2025, Meta has charged per delivered message instead of per conversation. Since 1 October 2026 this also applies to normal replies to customer questions, which Meta calls service messages. [5] Free of charge are:

• the first 1,000 service messages per business phone number and month. Unused messages expire at the end of the month. After that, each reply costs the same as a utility message in the recipient's country.
• messages after a customer has written to you through a click-to-WhatsApp ad. If you reply within the service window, a free window opens that can stay open for up to seven days. [5]

You also pay for marketing, utility and authentication templates. Utility templates within an open service window were free from July 2025 to September 2026. Since October 2026 they are charged as well. The price depends on the recipient's country. Utility and authentication have volume discounts, marketing does not. [5] According to Meta's euro rate card of 1 July 2026, a marketing message to Germany costs about €0.113 and a utility message about €0.046, as summarised by the provider Chatarmin. [6] The binding prices are those shown in your Meta account.

A worked example with assumptions, for recipients in Germany:

The lesson: advertising is the big item in Meta fees, but since October 2026 service is no longer free. An AI agent that answers in one complete message instead of three short ones therefore also saves Meta fees. BSP fees and AI software come on top. When comparing, check whether you are billed per message, per conversation or a flat fee.

GDPR: what to watch out for

The good news first: for the Cloud API, Meta has defined its role clearly.

• Meta is a processor. With the Cloud API, Meta processes messages on behalf of the business and according to its instructions. Message content is kept for a maximum of 30 days. For customers in Europe, the WhatsApp Business Data Transfer Addendum and the Meta Hosting Terms for Cloud API also apply, covering transfers to the US. [7]
• Encrypted up to the Cloud API. Messages are encrypted between the customer and the Cloud API. There they are decrypted and passed on to your system. According to Meta, the Cloud API does not automatically use messages to inform the ads a person sees. [7]
• Choose where data is stored. With "local storage" you decide where message content is kept at rest. [8] For Europe, Germany is among the available locations according to provider documentation. [12] During processing, content may sit in data centres outside that region for up to 60 minutes. [8]

Your own obligations remain:

1. Add the WhatsApp channel and the AI agent to your privacy policy.
2. Sign data processing agreements with the BSP and the provider of your AI software.
3. Document opt-ins so you can prove them if someone complains.
4. Set retention periods, including for chat histories in your own software.
5. Only process health or financial data over WhatsApp after checking it with your data protection officer.

Whether your setup is legally sound depends on the individual case. This article is not legal advice.

Website chat or WhatsApp: the order often decides

Not every business should start with WhatsApp. A chat on your own website has some advantages: no per-message fees, no templates, no 24-hour window and no opt-in just to answer a question. Your visitors are already on your site.

A proven path: start with website chat. After a few weeks, the conversation history shows which questions really come in and where the agent still has gaps. You take that knowledge base with you to WhatsApp later.

What EchoCall offers today: The EchoCall chat agent runs as a chat widget on your website, and on WordPress also as a plugin. It answers around the clock from your knowledge base. Conversations can be handed over to your team in the live inbox, and your team sees the history so far. Visitors can also talk instead of typing in the widget if you enable it. Prices start at €40 for 100 chat sessions a month, and the servers are in Frankfurt and Karlsruhe, Germany. Details are on our pricing page and the GDPR page.

WhatsApp is currently not part of what you can set up yourself in the EchoHub. If WhatsApp is your most important channel, talk to us before you plan.

Checklist: WhatsApp with AI in seven steps

1. Set the goal. Service questions, appointment confirmations or marketing? Costs and consent depend on it.
2. Choose your access. Cloud API directly or a BSP. Ask about storage location, data processing agreement and pricing model.
3. Decide on the number. If the number already runs in a WhatsApp app, clarify the migration with your provider.
4. Limit the bot. Allow only your topics in the prompt and put the AI notice in the first reply.
5. Set up a path to a human. In-chat handover, a phone number or an email address, and one that someone actually reads.
6. Collect opt-ins and create templates. Every template needs Meta's approval before you can send it.
7. Test and measure. Run 20 real customer questions through it. Afterwards, watch how many recipients block you.

Frequently asked questions about WhatsApp Business with AI

Are AI chatbots still allowed on WhatsApp Business in 2026?

Yes, if they serve your customers, for example by answering questions about products, orders or appointments. Since 15 January 2026, Meta only excludes AI providers whose main product is the AI itself, such as general-purpose assistants like ChatGPT.

How much does the WhatsApp Business API cost in Germany?

Since 1 October 2026 Meta also charges for replies to customer messages. The first 1,000 per phone number and month are free, after that each reply costs the same as a utility message. Templates cost about €0.113 for marketing and about €0.046 for utility, according to Meta's euro rate card of July 2026. BSP fees and AI software come on top.

Do I need a Business Solution Provider?

No, you can use Meta's Cloud API directly. That requires your own development work, though. A BSP handles setup and the interface for its own fee.

Is WhatsApp Business GDPR compliant?

With the Cloud API, Meta acts as a processor, keeps message content for a maximum of 30 days and covers transfers to the US by contract. You can set the storage location for data at rest to Germany. Privacy policy, opt-in and data processing agreements remain your job.

Does the bot have to say it is an AI?

In the EU, yes. Since 2 August 2026, Article 50 of the AI Act requires that people are told when they are chatting with an AI, unless it is obvious. The simplest way is a notice in the first reply.

Can I message customers on WhatsApp first?

Only with opt-in, as Meta requires. In Germany, marketing also needs prior express consent under the Act against Unfair Competition. Outside the 24-hour window you may only send approved templates.

Can I use EchoCall with WhatsApp?

WhatsApp is currently not part of what you can set up yourself in the EchoHub. The EchoCall chat agent runs on your website today, with handover to your team. If WhatsApp is essential for you, talk to us first.

Sources

1. ibi research at the University of Regensburg, press release of 11 July 2025, ibi consumer insights on advertising on WhatsApp, German: ibi.de
2. TechCrunch, 18 October 2025, WhatsApp changes its terms to bar general-purpose chatbots: techcrunch.com
3. WhatsApp Business Messaging Policy, as of 23 September 2026: whatsappbusiness.com/policy
4. Meta for Developers, Get opt-in for WhatsApp: developers.facebook.com
5. Meta for Developers, Pricing on the WhatsApp Business Platform, version of 28 September 2026: developers.facebook.com
6. Chatarmin, WhatsApp API Pricing, as of 22 September 2026, with prices from Meta's euro rate card of 1 July 2026: chatarmin.com
7. Meta for Developers, Cloud API data privacy and security: developers.facebook.com
8. Meta for Developers, Local storage: developers.facebook.com
9. WhatsApp, Privacy Policy for the European Region, effective 2 July 2026: whatsapp.com
10. Section 7 UWG, German Act against Unfair Competition, German: gesetze-im-internet.de
11. Regulation (EU) 2024/1689 (AI Act), Article 50: eur-lex.europa.eu
12. 360dialog, Local Storage, supported regions: docs.360dialog.com
13. OpenAI, ChatGPT on WhatsApp ends on 15 January 2026: openai.com

All links were checked on 6 October 2026. Meta's prices and terms change regularly. The current version always applies.

Read next

• AI chat agent for your website
• AI chat agent statistics 2026: figures with sources
• EU AI Act 2026: the AI labelling requirement
• An AI chatbot on WordPress in 5 minutes