Privacy Policy

1. Introduction

WhatsApp Business Automation ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp business automation platform and related services.

By using our services, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email, company details, phone number)
• Payment information (processed securely through third-party providers)
• WhatsApp Business API credentials and configuration data
• Customer conversation data processed through our platform
• Support communications and feedback

2.2 Information We Collect Automatically

• Usage data and analytics (features used, session duration, performance metrics)
• Device information (browser type, operating system, IP address)
• Log files and error reports for system optimization
• Cookies and similar tracking technologies

2.3 WhatsApp Conversation Data

We process WhatsApp conversations on behalf of our customers to provide AI-powered automation services. This includes message content, contact information, and conversation metadata necessary for lead qualification and business automation features.

3. How We Use Your Information

• Provide, maintain, and improve our automation services
• Process WhatsApp conversations for lead qualification and business automation
• Generate analytics and insights about conversation performance
• Provide customer support and respond to inquiries
• Send service-related communications and platform updates
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms of service
• Develop new features and improve existing functionality

4. Information Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our platform, including cloud hosting, payment processing, email services, and analytics providers. These providers are contractually bound to protect your information.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for all data transmission
• AES-256 encryption for data at rest
• SOC 2 Type II compliance and regular security audits
• Multi-factor authentication and access controls
• Regular security training for all employees
• Incident response procedures and monitoring systems

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Retained while your account is active and for 3 years after account closure
• Conversation data: Retained for up to 2 years for service improvement and analytics
• Payment information: Retained as required by financial regulations (typically 7 years)
• Support communications: Retained for 5 years for service quality purposes

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request that we limit the processing of your personal information
• Objection: Object to certain types of processing of your personal information

To exercise these rights, please contact us at privacy@xyz.com. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses approved by relevant authorities.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

12. Compliance

This Privacy Policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India's Personal Data Protection Bill. We are committed to maintaining the highest standards of data protection and privacy.