WhatsApp CRM Without API: How Linked-Device CRMs Work, What You Keep and What You Give Up
How a WhatsApp CRM without API connects your number as a linked device, what you keep and lose compared with the official WhatsApp Business Platform, the rules to respect on pace and opt-outs, PDPA and Do Not Call duties in Singapore, and an account-safety checklist.A WhatsApp CRM without API connects your existing WhatsApp number to a CRM the way WhatsApp Web does, as a linked device, so chats flow into a shared inbox and customer records without registering on Meta's WhatsApp Business Platform. You keep your number and chat history and pay no Meta message fees, but you give up approved templates, bulk sending, the official business badge and the protection of an official integration, so every message must stay at a human pace and respect opt-outs.
Updated: 8 November 2026
This guide explains how the connection works, gives a neutral table of what you keep and lose, sets out the rules you must respect (including the PDPA and the Do Not Call Registry for Singapore numbers), and ends with an account-safety checklist.
How a WhatsApp CRM without API works
A linked device is a computer or browser session connected to a WhatsApp account by scanning a QR code from the phone, the same way WhatsApp Web is set up. A linked-device CRM is software that holds one of those sessions on its own server, reads incoming chats into customer records, and sends your team's replies from the same number.
According to WhatsApp's linked devices help page, a WhatsApp Business account can use up to four linked devices and one phone at a time. Linked devices work without the phone online, but log out if the phone is unused for over 14 days. The same page notes that broadcast lists and status are not supported on linked devices.
What changes is who controls the conversation. WhatsApp sees one linked device. The CRM decides which staff member sees each chat, who owns it, and records which person sent each reply. Customers see your business number as usual. The phone still shows every chat, so the owner keeps a full copy.
WhatsApp now offers a similar team feature inside the Business app. Its multi-agent help page describes assigning chats to agents and up to 10 devices, tied to a paid Meta Verified or Meta One subscription and not available everywhere yet. A CRM adds what the app does not: pipelines, lead owners, follow-up reminders and reporting.
What you keep and what you give up
The official Platform has also changed. With Meta's coexistence onboarding, a supporting provider can connect a number already used in the WhatsApp Business app, keep the app working for one-to-one chats, and share up to 180 days of history. So keeping your number is no longer unique to linked devices. The real differences are below.
| Point | Linked-device CRM | WhatsApp Business Platform |
|---|---|---|
| Setup | Scan a QR code, minutes | Business verification and provider onboarding |
| Existing number and history | Kept, the phone keeps working | Kept with coexistence onboarding, otherwise moved |
| Meta message fees | None | Per delivered message, by category and country |
| Messages outside the 24-hour window | Ordinary chats, so opt-in and pace are on you | Approved templates only |
| Bulk campaigns | Not suitable and against WhatsApp terms | Templates to opted-in customers |
| Verified badge | Only through a paid Meta plan where offered | Official business account badge, on approval |
| Automation status | Unofficial, the number can be restricted | Official, allowed with an escalation path |
| Best for | Teams replying to customers who message first | High-volume reminders, receipts, passcodes |
If your business depends on sending thousands of reminders or passcodes a month, the Platform is the right tool. Our guide to WhatsApp Business API pricing in Singapore explains what that costs.
The rules a linked-device CRM must respect
WhatsApp's own rules
The WhatsApp Business Messaging Policy applies to the Business app and the Platform alike. It requires opt-in permission before you message people, and it says you must respect all requests, on or off WhatsApp, to block, discontinue or opt out of your messages. WhatsApp also says its systems may limit how many messages a business can send based on user feedback.
The consequence of breaking these rules is concrete. WhatsApp's restricted accounts page says an account may be restricted when its activity shows signs of spam, automated or bulk messaging, and that a restricted account cannot start new chats or use linked devices. For a linked-device CRM, that means the inbox stops working until the restriction ends, and repeated abuse can lead to a ban.
PDPA and the Do Not Call Registry in Singapore
The PDPC's Advisory Guidelines on the Do Not Call Provisions (revised 1 February 2021) state that the DNC Provisions apply to any data application that uses a Singapore telephone number, naming WhatsApp, iMessage and Viber. The points that matter for a WhatsApp CRM:
- A specified message is a message whose purpose, or one of its purposes, is to advertise or promote goods or services. Replying to an individual's own request for information about a product is generally not a specified message.
- Check the register. Under section 43 of the PDPA, you must confirm that a Singapore number is not on the relevant DNC register, from a check made within 21 days before sending, unless the person gave clear and unambiguous consent in written or other accessible form.
- Identify yourself. Under section 44, each specified message must identify the sender and say how the recipient can contact you.
- Withdrawal of consent must be put into effect within 21 days.
- Business to business messages sent to an organisation for its own purposes are excluded, but a personal offer to the same person is not.
The PDPA's data protection provisions also apply to the customer data stored in the CRM, so know where it is kept and who can see it.
Account-safety checklist
- Start with the number customers already message you on, not a new number used only for outreach.
- Open WhatsApp on the main phone at least every few days, since linked devices log out after 14 days of phone inactivity.
- Reply quickly to people who message first, and keep cold outreach to small, reviewed daily batches.
- Make every first message to a new contact say who you are and how to stop.
- Treat STOP, or any request to stop, as a block on every route, not one campaign.
- Check the DNC register within 21 days before marketing to +65 numbers without recorded consent.
- Keep consent records in a form you can show later.
- Watch for restriction notices and pause automation at once if one appears.
When the official Platform is the better choice
Choose the Platform if you send templates at volume, need customers to see a verified business badge, run regulated communications that need an official integration, or plan opted-in campaigns to thousands of contacts. Many businesses run both: the Platform for transactional templates and a linked-device inbox for day-to-day conversations on the number staff already use.
Key takeaways
- A WhatsApp CRM without API runs as one linked device and fans chats out to your team.
- You keep your number and pay no Meta message fees, but lose templates, bulk sending and official status.
- WhatsApp can restrict accounts that look automated or bulk, and a restricted account loses its linked devices.
- In Singapore, marketing messages on WhatsApp fall under the PDPA's Do Not Call Provisions.
- Pace, opt-outs, sender identification and consent records are your responsibility, not the tool's.
How Polynusa runs a WhatsApp CRM without API
Polynusa links your number the way WhatsApp Web does. Chats land in a shared Conversations inbox where every reply records the sender, conversations can be assigned one by one or in rotation, and each lead has an owner, a pipeline stage, follow-up reminders and its conversation attached. Polybot, the AI agent, drafts or sends replies from your knowledge base at the autonomy level you choose. Salespeople can get staff numbers managed by an admin; only the owner replies there, never the AI.
The limits are the ones in the table. Polynusa sends no templates and no bulk broadcasts, handles WhatsApp only, and cannot remove the risk that comes with an unofficial integration. It reduces it: sending stays at a human pace, stop requests are honoured, and outreach to new leads needs a person to confirm it each day. See our WhatsApp CRM buyer's checklist, our guide to follow-up messages, and why personal WhatsApp for work loses clients. Visit polynusa.com, see the plans, or start a free trial.
FAQ
Can I use a WhatsApp CRM without the API?
Yes. A linked-device CRM connects your number the way WhatsApp Web does, so you keep your number and history and pay no Meta message fees. You give up templates, bulk sending and official status, and you must follow WhatsApp's rules on automation.
Is the WhatsApp Business API free?
No. Meta charges per delivered message by category and recipient country, with some free allowances such as 1,000 service messages per number per month, and providers usually charge for their software on top.
How does the WhatsApp Business API work compared with a linked device?
The API is an official integration where software sends messages through Meta, using approved templates outside the 24-hour window. A linked device is a session on your existing account, like WhatsApp Web, with no templates and no official status.
What is WhatsApp API automation?
It means software sending or answering WhatsApp messages through the official Platform, for example order updates, reminders or chatbot replies, under Meta's rules and pricing.
Can my number be banned for using a CRM without the API?
It can be restricted or banned if its activity looks like spam, automated or bulk messaging. Keep sending at a human pace, message people who expect to hear from you, and honour every request to stop.
Do Do Not Call rules apply to WhatsApp in Singapore?
Yes. The PDPC's guidelines state that the Do Not Call Provisions cover marketing messages sent through apps such as WhatsApp to Singapore telephone numbers, so check the register or hold clear consent before sending.