Legal

Privacy Policy

Last updated: 23 October 2026

1. Who we are

WapTalk ("we", "our", "us") operates a multi-tenant platform that lets businesses manage and automate customer conversations through the WhatsApp Business API.

Two roles, and the difference matters. For our own customers' account data we are a data controller. For the end-customer conversations that flow through a business's own WhatsApp number we are a data processor acting on that business's instructions - they decide what is collected and why, and they are the party to contact about your conversation with them.

2. Information we collect

  • Account information - name, business name, email address, phone number and billing details of the business signing up.
  • WhatsApp conversation data - messages, contact phone numbers, display names and delivery metadata processed through the WhatsApp Business API on a customer's behalf.
  • Knowledge base content - documents a customer uploads so the assistant can answer from them.
  • Usage data - sign-in times, features used, and error diagnostics.

3. How we use it

  • To operate the platform and deliver, route and answer messages.
  • To generate automated replies, which involves sending message text to our AI providers (see section 5).
  • To meter usage against a subscription plan and to take payment.
  • To provide support, and to detect and prevent abuse.
  • To meet obligations under Meta's WhatsApp Business Terms and applicable law.

We do not sell personal data, and we do not use the contents of customer conversations to train our own models.

4. Messaging consent and how to opt out

Businesses using WapTalk may only message people who have opted in to hear from them, and we record the source and timestamp of that opt-in.

If you are receiving messages from a business that uses WapTalk, reply STOP in that WhatsApp conversation. Your number is marked as opted out immediately, you receive a confirmation, and no further campaign or automated messages are sent to you. Common equivalents such as UNSUBSCRIBE, BAND KARO and बंद करो are honoured the same way. Reply START to resume.

5. Sub-processors and sharing

We share data only with the providers needed to run the Service:

  • Meta Platforms - to send and receive messages over the WhatsApp Business API.
  • AI providers (Anthropic, OpenAI) - message text is sent for classification, retrieval and reply generation.
  • Razorpay - subscription billing (UPI AutoPay, cards, netbanking). We do not store card or bank details.
  • Cloud hosting, database and error-tracking providers - to run and monitor the platform.
  • Vercel Web Analytics and Speed Insights - anonymous page-view counts and page-speed measurements on this website. They set no cookies and do not identify individual visitors.
  • Legal authorities - where required by law or valid legal process.

6. Retention and deletion

Conversation and contact data is retained for as long as the customer's account is active, so that they can serve their own customers. When an account is closed we delete or irreversibly anonymise its tenant data within 90 days, except where we are required to keep records - for example invoices, for tax purposes.

A customer may request an export or deletion of their tenant's data at any time by writing to the address in section 9. Step-by-step instructions, including how to remove WapTalk's access to a WhatsApp Business Account, are on the Data Deletion page.

7. Security

Access tokens and integration credentials are encrypted at rest with AES-256-GCM. Access to production data is restricted, transport is encrypted with TLS, and every tenant is isolated at the query level. No system is perfectly secure, and we do not claim otherwise.

8. Your rights

Subject to where you live - including under the India Digital Personal Data Protection Act and, where it applies, the GDPR - you may request access to, correction of, deletion of, or restriction of processing of your personal data, and you may withdraw consent at any time.

If your data reached us because you messaged a business that uses WapTalk, please raise the request with that business first: they control the data and we act on their instructions. If you cannot reach them, contact us and we will help.

9. Contact

Questions, requests, or complaints about this policy:
Email: privacy@waptalk.in
Phone: +91 94297 95867

Registered address
WapTalk
Ahmedabad - 380009

Gujarat, India

10. Changes

We may update this policy. Material changes will be announced in the product and the date at the top of this page will change. The companion Terms of Service govern use of the platform itself.