Privacy Policy

1) WapTix

Waptix is a business messaging platform that automates WhatsApp conversations using the official WhatsApp Business Platform provided by Meta. Waptix may be operated by your local legal entity. For contracting and privacy purposes, the controller is:

Controller: Waptix (operated by Digitude Media)
Registered address: LEVANA CYBER HEIGHTS 10TH FLOOR TC G 2/2 AND TC G 5/5, VIBHUTI KHAND GOMTI NAGAR, LUCKNOW-226010
Privacy email: [email protected]
DPO / Grievance Officer (if applicable): [email protected]

Replace bracketed placeholders with your company’s legal details before publishing.

2) Scope

This policy explains how we collect, use, share, retain, and protect personal data when:

• you visit our website (waptix.com),
• you create and use a Waptix account,
• your business uses Waptix to message end users on WhatsApp, and
• you interact with us for support, sales, or billing.

3) Key definitions

• Customer: the business that signs up for Waptix.
• End user / Contact: a person receiving WhatsApp messages from the Customer.
• Processor / Controller: Waptix is generally a processor of end-user data on behalf of the Customer (the controller), and a controller of Customer account data (e.g., billing).
• BSP: a Meta-authorized Business Solution Provider. Waptix may connect directly to Meta or via a BSP.

4) Data we collect

4.1 Customer account & billing data

• Business name, email(s), phone(s), role(s), team member details
• Billing contact, address, tax IDs, transaction records

4.2 WhatsApp contact & messaging data

• Contact phone numbers and opt-in status/records
• Message templates (content, language, category), media attachments, and delivery receipts/metadata
• Conversation categories (e.g., utility, authentication, marketing) as defined by Meta

4.3 Product usage & technical data

• Log files, IP addresses, device/browser information
• Events and diagnostics to keep the platform reliable and secure
• Cookie and similar technologies for essential operations and analytics

4.4 Integrations

If you connect third‑party systems (e.g., CRM, helpdesk, e‑commerce), we process the data they send to Waptix solely to provide the features you enable.

4.5 Sensitive data

Customers must not upload or instruct Waptix to process sensitive personal data unless required by law and supported by appropriate safeguards (e.g., explicit consent, contractual necessity). Avoid sending payment card data, government IDs, or health data via WhatsApp unless your use case is compliant with applicable laws and Meta policies.

5) How we use data

• Provide and operate the Waptix service, including delivering WhatsApp messages via the official platform
• Authenticate users, prevent abuse and fraud, and ensure platform security
• Provide customer support, training, and service notifications
• Measure performance and improve features and reliability
• Comply with legal obligations and enforce our Terms

Legal bases (where applicable, e.g., GDPR)

• Consent (e.g., end-user opt‑in to receive WhatsApp messages)
• Contract (to provide the service you request)
• Legitimate interests (e.g., preventing abuse, improving services)
• Legal obligation (e.g., tax records, security logs)

6) WhatsApp Business Platform–specific disclosures

• Official platform: Waptix connects to the WhatsApp Business Platform provided by Meta, either directly or via an authorized BSP.
• End‑to‑end security: WhatsApp provides transport security between devices and Meta. Within your organization and our systems, message data may be accessible to authorized staff strictly on a need‑to‑know basis (e.g., to deliver, store, troubleshoot).
• Opt‑in required: Customers must obtain and maintain prior, verifiable opt‑in consent from end users before sending messages (including marketing). We provide tools to store opt‑in records.
• Message categories & templates: Customers must use approved templates for business‑initiated messages and follow Meta’s commerce and business policies.
• Opt‑out: Every marketing message must clearly explain how to opt out (e.g., reply STOP or UNSUBSCRIBE). Waptix honors opt‑outs automatically.
• No contact scraping or purchased lists: You may only message users who provided consent to your business.
• Data minimization: Upload only the data needed for your use case. Avoid confidential or sensitive content unless legally justified and supported by appropriate safeguards.
• Retention & deletion: See section 9. Waptix also provides tools/APIs to delete conversation data when you request it.
• Independent policies: Your business must publish its own privacy notice that references WhatsApp messaging and explains your purposes and legal bases for contacting end users.

See also: WhatsApp Business Messaging Policy and Meta Terms (link from your dashboard or help center).

7) Sharing & disclosure

We do not sell personal data. We share data only with:

• Meta / WhatsApp to deliver messages through the WhatsApp Business Platform
• Authorized BSPs (if used) and other processors under contract (e.g., cloud hosting, analytics, email service, support tooling)
• Payment processors for billing (e.g., card networks, payment gateways)
• Integrations you enable (e.g., CRM, helpdesk) according to your configuration
• Legal and safety when required by law, subpoena, or to protect rights, property, or safety

All processors are bound by confidentiality and data protection obligations.

8) International data transfers

Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. Details are available on request.

9) Retention & deletion

• Customer account and billing records: kept for the duration of the contract and for up to 7 years thereafter to meet legal obligations.
• WhatsApp conversation data: retained according to your configuration and operational needs, typically 90–365 days, unless you delete earlier.
• Backups and logs: retained for limited, rolling periods for security and reliability.

You can request deletion at any time via [email protected]. We will also pass deletion requests downstream to relevant processors where applicable.

10) Security

• Encryption in transit and at rest where appropriate
• Role‑based access controls and least‑privilege principles
• Audit logs, vulnerability management, and incident response
• Employee confidentiality and security training

No method of transmission or storage is 100% secure; we work continually to protect your data.

11) Your rights & choices

Depending on your location, you may have rights to:

• Access, correct, or delete your data
• Object to or restrict certain processing
• Port your data to another service
• Withdraw consent at any time (this does not affect prior lawful processing)

CCPA/CPRA (California): We do not sell or share personal information for cross‑context behavioral advertising. You may request access or deletion of your information.

India (DPDP Act 2023): You may request access, correction, erasure, and grievance redressal. You may also nominate an individual to exercise rights on your behalf.

To exercise rights, contact [email protected]. We may need to verify your identity.

12) Cookies & similar technologies

We use essential cookies for login and security, and analytics cookies to understand product usage. You can control cookies in your browser. See our Cookie Policy for details.

13) Children

Waptix is for business use and is not directed to children under 13. If you believe a child provided personal data, contact us and we will delete it.

14) Contact & complaints

Email: [email protected] • Security: [email protected]

If you are in the EU/EEA/UK or India, you may also have the right to lodge a complaint with your supervisory authority or the Data Protection Board, as applicable.

15) Changes to this policy

We may update this policy from time to time. We will post the latest version here and update the effective date. If changes are material, we will provide additional notice (e.g., in‑app or email).

Annex A – Practical WhatsApp compliance guide (for your team)

• Collect and store verifiable opt‑in with context (what, who, how often). Keep logs.
• Use only approved templates for business‑initiated messages; include clear opt‑out text.
• Honor STOP/UNSUBSCRIBE immediately. Waptix auto‑blocks opted‑out contacts.
• Do not upload purchased or scraped lists. Message only users who consented to your business.
• Limit data to what you need; avoid sensitive data in message bodies and attributes.
• Set retention in Waptix to your policy (e.g., 180 days) and enable periodic deletion.