Privacy Policy
1. Who We Are
Equitysoft Technologies Pvt. Ltd. is a technology company incorporated under the Companies Act, 2013, India. WapNotify is our WhatsApp Business CRM platform that connects to the Meta WhatsApp Cloud API on behalf of our business clients.
With respect to personal data of our clients’ end users transmitted through the Platform, we act as a data processor. Our business clients are the data controllers responsible for the lawful basis of collecting and processing their end users’ data.
2. Information We Collect
2a. Information You Provide Directly
- Account information: name, email address, password (hashed), role within your organization.
- Business information: company name, WhatsApp Business Account details provided during setup.
- WhatsApp API credentials: Phone Number ID, WhatsApp Business Account ID, and Access Token — stored encrypted and used solely to operate the WhatsApp integration.
- Contact data: names, phone numbers, email addresses, tags, and notes for contacts you manage through the Platform.
2b. WhatsApp Communication Data
- Inbound and outbound WhatsApp message content, timestamps, and delivery statuses.
- Media files (images, documents, audio, video) exchanged in WhatsApp conversations.
- WhatsApp message template names and parameters used in broadcast campaigns.
2c. Automatically Collected Data
- Server access logs (IP addresses, browser type, pages accessed, timestamps) for security monitoring and debugging.
- Error logs and diagnostic information to maintain Platform reliability.
3. How We Use Your Information
We use the collected information strictly for the following purposes:
- Service delivery: Operating the WhatsApp CRM features — sending/receiving messages, managing contacts and conversations, team collaboration.
- Authentication and access control: Verifying identity, managing roles and permissions.
- Analytics and reporting: Providing message delivery statistics, campaign performance, and conversation metrics within your account.
- Security: Detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity.
- Legal compliance: Meeting obligations under applicable Indian and international law.
- Service improvement: Diagnosing technical issues and improving Platform performance — only using aggregated, non-identifiable data.
We do not use your data or your end users’ data for advertising, marketing to third parties, training AI/ML models for sale, or any purpose unrelated to providing the WapNotify service.
4. Meta WhatsApp Platform Data
5. Data Sharing and Disclosure
We do not sell, rent, or trade personal data. We may share data only in the following limited circumstances:
- Meta Platforms, Inc.: Messages are transmitted through the WhatsApp Cloud API. Meta’s own privacy policies govern their handling of this data.
- Infrastructure providers: We use cloud hosting providers to run our servers. These providers process data only on our instructions and are contractually bound to maintain confidentiality.
- Legal obligations: We may disclose data in response to a valid court order, subpoena, or request from a government authority.
- Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity, with prior notice given to affected users.
6. Data Retention
- Account and contact data is retained for as long as your account is active.
- Conversation and message history is retained for the duration of your subscription or until you delete it.
- Server logs are retained for a maximum of 90 days for security purposes.
- Upon account deletion, all personal data is permanently deleted within 30 days, except where retention is required by law.
- Workspace admins can delete all workspace data immediately via Settings → Danger Zone → Delete All Data.
7. Data Security
- All data in transit is encrypted using TLS 1.2+ (HTTPS).
- Passwords are hashed using bcrypt. Plaintext passwords are never stored.
- WhatsApp API credentials are stored encrypted in the database.
- Access to production systems is restricted by role-based access controls and SSH key authentication.
8. Your Rights
9. Cookies and Local Storage
10. Children’s Privacy
11. International Data Transfers
12. Changes to This Policy
13. Grievance Officer
Equitysoft Technologies Pvt. Ltd.
Ahmedabad, Gujarat, India
Grievance / Privacy contact: sales@wapnotify.com
Response time: within 30 days of receipt of complaint
Website: wapnotify.com