Two builds are live. V2 is the stable one — tested, always online, and completely free. V3 is still being built.
V3 is an active development build. It can break, drop your session, or restart while you're using it. Don't put your main WhatsApp number on it. If you want something that just works, take V2 — same bot, none of the surprises.
Your session ID is the key to your WhatsApp. Here's exactly how it's handled.
The session ID goes straight into your own deployment's config. It isn't sold, shared, or handed to anyone else.
The bot reads messages only to run your commands. Conversations aren't logged to a database or read by the developer.
The whole codebase is public on GitHub. Read it, audit it, host it yourself — nothing hidden behind a binary.
The bot runs on your own hosting account. Pause, restart, or delete it whenever you want — no permission needed.
Unlink the device from WhatsApp → Linked Devices and the session dies instantly. Access ends the moment you say so.
The bot can't change your password, read your backups, or move your number. It only acts on commands you send.
WhatsApp restricts numbers that spam. These rules keep your number alive.
Use a spare number for the bot, not your primary one.
Keep the bot in groups where members know it's there.
Set a sensible prefix and switch off features you don't use.
No bulk messaging or spam. Mass-sending to strangers gets numbers banned fast.
No harassment, scams, or adult content through the bot.
Don't share your session ID. It's the same as handing over your WhatsApp.
Don't break WhatsApp's Terms of Service or any local law.
IMMU-MD is a free, open-source project built for learning and automation. It isn't affiliated with, endorsed by, or connected to WhatsApp or Meta. Automation always carries some risk of account restriction — you deploy and run this bot at your own discretion, and you're responsible for how you use it. The developer isn't liable for bans, data loss, or misuse. If you're unsure whether something is allowed, don't do it.