WhatsApp automation for a small business: the official routes and the rules

WhatsApp automation means messages that software sends or answers for you. Stay on the WhatsApp Business app while one or two people answer chats and its built-in tools are enough. Move to the WhatsApp Business Platform when orders, bookings or a CRM must send messages on their own. Either way, use only official routes, get opt-in first and keep a person within reach.

The WhatsApp Business Platform lets your own software send and receive WhatsApp messages, through its Cloud API. We connect it to the tools you already use, as part of our business automation and AI work: "for notifications and follow-ups. We don't run marketing broadcasts."

How to automate WhatsApp business messages: which route fits

Three official routes automate WhatsApp beyond the Business app's own tools, and one unofficial route is not allowed. A partner, often called a WhatsApp API provider, connects businesses to the platform through its own signup.

WhatsApp Business app vs API: what each route can automate

The Business app automates replies a person would otherwise type. The Business Platform lets your other systems send and receive messages.

On the platform, the useful automations are operational: orders, payments, bookings and deadlines reach the right people. Start with one path, such as a new order on WhatsApp adding a row to your sheet, usually the one that removes the most annoying manual step.

Is WhatsApp automation allowed? Yes, within Meta's rules

Yes, WhatsApp automation is allowed on the official routes. The rules below describe the Business Platform; its template window and messaging limits do not govern ordinary Business app chats. Meta sets them in its WhatsApp Business Messaging Policy, updated on 23 Sep 2026, and in its developer documentation.

Opt-in comes first

Opt-in is a person's clear agreement to receive messages from your business. The policy lets you contact someone only if they gave you their number and you have their opt-in permission. Meta's opt-in rules say the request must state that the person is opting in, name your business and comply with applicable law.

You can collect it on your website, by SMS, through a phone menu or on paper. Meta recommends a separate opt-in for each kind of message, and clear opt-out instructions. Respect every request to stop, on WhatsApp or off it.

Ordinary replies only within the 24-hour window

When a customer messages or calls you, a 24-hour customer service window opens, and each new message or call resets it. Inside it, you can send ordinary replies, which Meta calls service messages, without approval. Once it closes, you can send only pre-approved template messages.

Templates are reviewed and sorted into categories

A template message is written in advance and reviewed automatically by Meta before you can send it. Each is one of three categories, authentication, marketing or utility, and the category affects what Meta charges. Its status can change after approval, based on quality feedback.

Utility templates typically follow something the customer did, such as an order confirmation or update. Add marketing material to one, and Meta moves it to marketing.

Every automated flow needs a route to a person

The policy allows automated replies inside the 24-hour window, but it also requires prompt, clear and direct escalation paths. Its examples include a transfer to a person in the chat, a phone number, an email address or a support form. So every automated flow needs a way out to a human, and a named person behind it.

Messaging limits cap how many people you can reach

A messaging limit caps how many different people you can message outside a customer service window in a moving 24 hours. It is set for your business portfolio, Meta's name for your business account, and every number in it shares one limit. New portfolios start at 250.

Meta's scaling path to 2,000 has three options. Verify your business, have your partner verify it, or send 2,000 delivered messages outside customer service windows within 30 days, using high-quality templates. After that, the limit can rise automatically to 10,000, 100,000 and unlimited while quality stays high.

Unofficial WhatsApp tools can cost you your number

Browser extensions, modified apps and bulk senders that drive an ordinary number can get it suspended. WhatsApp's Terms of Service rule out "bulk messaging, auto-messaging, auto-dialing, and the like".

Its Messaging Guidelines, updated on 23 Sep 2026, also rule out "unofficial clients", and enforcement can mean suspending an account, temporarily or permanently. The number at risk is often the one your customers have saved for years.

What changed in WhatsApp charges in 2025 and 2026

Meta now charges per delivered message, including most service replies beyond a monthly free allowance. Check the date on anything you read about these charges, including this page.

If you use a partner, ask how these changes reach your bill. If you connect directly, check that your Meta account has a payment method and the right billing currency.

Can you use the WhatsApp Business app and the API on the same number?

Yes. A number already on the WhatsApp Business app can also connect to the Cloud API, which Meta's partner documentation calls coexistence. Your team keeps chatting one to one from the app while your systems use the platform. Messages are mirrored between the two, and contacts and recent chat history can be synced.

Messages your team sends from the app stay free, while messages sent through the Cloud API follow Meta's platform pricing. Onboarding goes through a Meta partner or tech provider, and the app must be version 2.24.17 or later. Once the number is connected, some things change:

• Group chats are not synced to the platform.
• Disappearing messages are turned off in one-to-one chats, and view once and live location are disabled there.
• Broadcast lists are disabled, and existing ones become read-only.
• Linked devices are unlinked. You can link them again, except WhatsApp for Windows and WhatsApp for Wear OS.
• Sending speed is fixed at 20 messages per second for the number.

If your team relies on a broadcast list, a group or WhatsApp on a Windows computer, decide what replaces it before you connect.

How to connect WhatsApp to your sheet or CRM

Connect WhatsApp to a sheet or CRM through the Business Platform, so each order or enquiry lands where your team already works. On the Cloud API, every incoming message arrives by webhook, a notice sent the moment something happens, and your sheet or CRM records it from there.

Where an off-the-shelf connector fits, use it; where it doesn't, a developer builds the connection. Either way, settle four things first.

• One contact per number. Match on the phone number, so a repeat customer doesn't become a second record.
• Consent kept with the contact. Record when and where the person opted in, and to which kinds of message.
• What gets copied. Usually the order or booking and a short note, not every line of the chat.
• Who owns the accounts. The Meta business account, the number and any partner account should be in your name; what to do when a developer leaves explains why.

If enquiries also arrive by form and email, our guide to lead follow-up automation covers the order to connect them in. If you are choosing the tool that runs the connection, see n8n, Zapier or Make.

What businesses in India should check: rupee billing and consent

Businesses in India have two more things to check: rupee billing with Meta, and consent under India's data protection rules.

India is its own market on Meta's rate card. The rupee billing deadline above applies if Meta bills you directly and your billing country with Meta is India. If a partner bills you, ask it what changes.

India's Digital Personal Data Protection framework has a phased start. The commencement notification brings the main processing duties and individual rights into force eighteen months after its November 2025 publication. Do not treat the whole framework as already in force. Ask your lawyer which current rules apply and what you need to prepare.

For the planned flow, record what people agreed to receive, explain where their details go and make stopping messages straightforward. Meta's opt-in and opt-out rules apply independently of the Indian framework's phased start. If your store runs on Shopify, our note on selling with Shopify in India covers the store side.

Next step: tell us which WhatsApp messages your team sends by hand today, and what they should connect to. We'll say which route fits, and what the first automation would be.

Reviewed and edited by Online Scope before publishing. Something out of date? Tell us at info@onlinescope.in. How we write the Blog.