WappFlow Privacy Policy

1. Information We Collect

We collect several types of information from and about users of our Service:

• Account Information: First name, last name, business email address, phone number, password hash, and company name when you register.
• Billing & Payment Information: Transaction ID, plan tier, GST numbers, and subscription status. Credit/debit card numbers are securely processed directly by our PCI-DSS certified payment processor (Razorpay).
• Operational & Contact Data: Phone numbers, names, and custom attributes uploaded by you in Excel/CSV lists for campaign execution.
• Usage & Technical Data: IP address, browser type, device information, operating system, login timestamps, and system audit logs.

2. How We Use Your Information

We process your data strictly for legitimate operational purposes:

• To provide, operate, maintain, and improve the WappFlow platform.
• To facilitate WhatsApp session pairing, campaign scheduling, message variation rendering, and delivery status tracking.
• To enforce quota limits, rate limits, and anti-abuse safeguards.
• To communicate service notices, billing invoices, security alerts, and customer support responses.
• To comply with statutory legal obligations and prevent fraudulent activity.

3. WhatsApp Data and Messaging Privacy

When you link your WhatsApp number to WappFlow via the QR code connection, our system interacts with your WhatsApp session to dispatch outbound campaign messages as directed by you. We do not use your private chats or contact lists for training AI models or selling advertising profiles.

4. Data Storage and Security

We implement robust technical and organizational security measures to protect your personal information, including TLS/SSL encryption in transit, salted bcrypt password hashing, and hardened cloud storage.

5. Third-Party Service Providers

We engage trusted third-party service providers who assist us in operating our platform under strict confidentiality agreements, including Razorpay for billing, cloud hosting providers, and transactional email infrastructure.

6. Cookies and Tracking Technologies

We use essential session tokens and minimal analytics cookies to keep you signed in, remember your preferences, and maintain dashboard performance. We do not use third-party ad tracking pixels or cross-site behavioral tracking cookies.

7. Data Retention Policy

We retain your account information for as long as your account remains active. Campaign logs and delivery reports are retained for up to 365 days for auditing and troubleshooting purposes.

8. User Rights and Data Control

You have full rights to access, export, or download your uploaded contact lists and campaign histories, or to disconnect your WhatsApp phone number immediately at any time.

9. Children’s Privacy

WappFlow is strictly intended for use by businesses and adults aged 18 and older. We do not knowingly collect or solicit personal data from children under the age of 18.

10. International Data Transfers

Your information may be transferred to and maintained on cloud servers located in India and other secure global regions in compliance with applicable data protection standards.

11. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our service architecture or regulatory obligations.

12. Compliance with Indian Information Technology Laws

This Privacy Policy is published in compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDPA), 2023.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, contact our Grievance Officer at:

14. Contact Information

For any privacy inquiries or data requests, please reach out to: