Last updated: 17 October 2026
We collect information you provide directly to us, such as when you create an account, use our services, or communicate with us. This includes name, email address, phone number, and business information. We also collect usage data, device information, and cookies to improve our services.
We use the information we collect to provide, maintain, and improve our services, process transactions, send communications, ensure security of your account, provide customer support, and send marketing communications (with your consent).
Messages sent and received through our platform are processed via the official WhatsApp Business API (Meta). We comply with WhatsApp's Commerce Policy and Business Messaging Policy. Message content is stored securely and used only for service delivery. We do not sell or share message content with third parties.
We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls, intrusion detection systems, and SOC2 compliant infrastructure.
We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us. Upon deletion request, we remove your data within 30 days, except where retention is required by law.
We engage trusted sub-processors under written agreements with equivalent data protection obligations: (a) Communication Infrastructure: Meta Platforms Ireland Ltd / Meta Platforms, Inc. (WhatsApp Cloud API); (b) Cloud Infrastructure: Amazon Web Services (AWS) and secure regional cloud data centers; (c) Payment Gateways: Cashfree Payments India Pvt Ltd, Razorpay Software Pvt Ltd, and Stripe, Inc.; (d) AI & Voice Processing (only when client enables AI features): OpenAI LLC, Anthropic PBC, Groq Inc, and Sarvam AI. Sub-processors process data solely to execute their designated services under strict confidentiality.
We use strictly necessary functional session storage and authentication tokens (JWT) solely to keep you securely logged in and maintain your session. We do not use third-party advertising, retargeting, or cross-site tracking cookies. Any optional analytics or marketing tags remain disabled by default and require your explicit, prior opt-in consent before activation.
Under the Digital Personal Data Protection (DPDP) Act, 2023 (Sections 11–14) and the EU General Data Protection Regulation (GDPR, Articles 15–22), you have the right to: (a) access a summary of your personal data and processing activities, (b) request correction, completion, and updating of inaccurate data, (c) request erasure of personal data, (d) restrict or object to specific processing activities, (e) request data portability where applicable, (f) nominate an individual to exercise your data rights in the event of death or incapacity, and (g) withdraw consent at any time without affecting past lawful processing. Verified requests can be submitted via email to [email protected] or in-portal support tickets, and are processed within 30 days free of charge.
Your data may be processed in servers located in India or other regions depending on your service configuration. We ensure appropriate safeguards are in place for international data transfers in compliance with Chapter V of the GDPR (including Standard Contractual Clauses) and Section 16 of the DPDP Act.
We may update this privacy policy from time to time. We will notify you of any material changes via email or in-app notification. The current version and effective date are maintained on this page.
In accordance with the DPDP Act, 2023 (Sections 8 & 13) and the Information Technology Act, 2000, you may contact our designated Grievance Redressal Officer for privacy concerns, data subject requests, or statutory complaints: Grievance Officer, Email: [email protected] (cc: [email protected]), Wuubiz Operations, India. We acknowledge all grievances within 48 business hours and resolve them within 30 days. Under the DPDP Act, if your grievance remains unresolved after exhausting our redressal mechanism, you have the right to approach the Data Protection Board of India. Under GDPR, you have the right to lodge a complaint with your local supervisory authority.