← WhatsApp Business Automation
0/15 complete

Module 01 · WhatsApp Business Foundations

Setting Up WhatsApp Business API vs. the Regular App

20 minfocused lesson5practical steps4grounded questions3source links
Open lesson + course map

On this lesson

Course outline

The WhatsApp Business App and WhatsApp Business Platform solve different operating problems. The app fits a small team managing conversations on supported devices. The Platform supports programmatic messaging, templates, integrations, and structured team workflows through Meta or a solution provider. “API” does not mean unlimited messaging, and it does not remove consent or policy duties.

After this lesson, you can write a defensible channel decision and a deployment checklist without buying software before the operating need exists.

// concept

Decide From Constraints

Score the business on six questions:

QuestionApp may be enough when…Platform becomes relevant when…
Teamone small owner-led teammultiple agents need assignment and auditability
Volumeconversations are manually manageablequeues, templates, and integrations reduce missed work
Integrationcopy/paste is controlledCRM, order, or support events must synchronize
Automationgreetings and quick replies sufficegoverned flows and webhooks are required
Reportinga simple log is acceptablefunnel events and ownership need consistent records
Riskfew operators and systems touch dataroles, credentials, retention, and incident response matter

Do not choose the Platform only to look sophisticated. It introduces business verification, template review, technical credentials, vendor costs, and operational monitoring.

// concept

Understand the Messaging Boundary

On the Platform, a user message opens a 24-hour customer-service window after the business reply is delivered. Within that window the business may reply without a template. Outside it, business-initiated contact requires an approved message template. Templates must be used for their approved purpose and can be reviewed, paused, or rejected.

Build the window into the state model:

// prompt — copy me8 lines
contact_id
consent_scope
consent_timestamp
last_user_message_at
service_window_expires_at
template_name_and_category
opt_out_at
assigned_owner

Never implement “if old chat, send anything.” The system should choose an approved, appropriate template or require a human to wait for a new user message.

// concept

Prepare the Production Checklist

Before connecting a number, document:

  • legal business name, public profile, support contact, and privacy notice;
  • number ownership and whether coexistence or migration is supported by the chosen route;
  • Meta Business access owned by the company, not a freelancer’s personal account;
  • least-privilege administrators and recovery owners;
  • consent capture, evidence retention, and opt-out suppression;
  • approved template inventory and the purpose of each template;
  • human escalation, service hours, and outage fallback;
  • webhook authentication, secret storage, retries, and duplicate-event handling;
  • data retention and deletion rules;
  • a sandbox or internal-number test plan before customer traffic.

Features and onboarding details change. Confirm the current official documentation and provider plan before committing a number or campaign.

// worked_example

Worked Example

A Faisalabad apparel brand has two agents, 30–50 daily inbound chats, and a manually maintained COD sheet. It first improves the Business App process: labels, standard replies, an order form, and one owner. The team discovers the true failure is duplicate order entry and missed assignments, not lack of a chatbot.

The Platform decision brief therefore requires: shared ownership, order webhook integration, approved confirmation templates, consent evidence, duplicate-event protection, and a human inbox. The owner runs a 20-order internal pilot before migration. The recommendation states expected workflow benefits and costs but makes no sales guarantee.

// failure_cases

Failure Cases to Diagnose

7 cases to diagnose

  • A contractor owns the Meta account

    transfer control to company-managed identities before launch.

  • Production token pasted into code or screenshots

    rotate it and store secrets only in protected environment configuration.

  • No consent ledger

    do not start campaigns until source, scope, time, and opt-out are recorded.

  • Every notification called marketing or utility casually

    verify current category rules and template approval.

  • Webhook retries create duplicate orders

    require idempotency keys and unique external event IDs.

  • Platform selected without staffing

    automation cannot replace queue ownership and escalation.

  • Number migration assumed reversible

    verify the current provider process and prepare rollback communication.

// pakistan_angle

Pakistan Angle

Map the actual commercial path: COD, bank transfer, wallet, card link, or consultation booking. WhatsApp itself is not proof of payment. Confirm payment through the payment provider or bank record, issue an order reference, and never ask a customer to send a full card number, banking password, PIN, OTP, or unnecessary CNIC image.

Plan for load shedding and mobile connectivity. A written after-hours response, visible service hours, and a queue that survives agent reconnection are more valuable than a bot that promises “instant support” when no human is available. Keep a tested alternate support number or public status channel for outages.

// hands_on

Hands-On Exercise

5 steps

  1. Complete the six-question App-versus-Platform table for one business.

  2. Map the 24-hour window and template boundary into a state diagram.

  3. Create the production checklist with named owners.

  4. Write five internal test cases, including expiry, opt-out, retry, and human escalation.

  5. Produce a decision: stay on App, pilot Platform, or adopt Platform—with evidence.

// completion_rubric

Completion Rubric

6 checks — tick as you verify

0/6

// sources

Sources

3 official sources — check every claim yourself

// check_yourself

Check yourself

4 questions · answers and options are taken word-for-word from this course

0/4

  1. 1 / 4 · diagnose

    Your work shows this failure mode: “Production token pasted into code or screenshots.” What does the lesson tell you to do about it?