Privacy policy

1. Our Role

• For your account data (name, email, business details, payments) — AiZapy is the Data Fiduciary / Controller.
• For data you upload or process through the platform (your customers' contacts, messages, chat history, lead data) — you are the Data Fiduciary and AiZapy acts only as a Data Processor on your instructions. You are responsible for obtaining valid consent from your contacts.

2. Information We Collect

a) Information you provide

• Name, email address, phone number, company name, GST number, and billing address
• Facebook Business Manager details, WABA details, and business verification documents needed for onboarding
• Support requests and communications with us

b) Data processed through the platform

• Contact lists, phone numbers, and names of your customers
• Messages, templates, media, chatbot conversations, tags, and campaign data
• Lead and form data collected via WhatsApp Forms, links, QR codes, or ads

c) Information collected automatically

• IP address, device type, browser, operating system
• Login times, pages visited, and feature usage
• Cookies and similar technologies (see Section 8)

d) Payment information Payments are processed by third-party payment gateways. We do not store your card, UPI, or bank account details. We only receive transaction references and payment status.

3. How We Use Your Information

We use your information to:

• Create and manage your account and provide the Services
• Complete WhatsApp API onboarding, number registration, and Meta verification
• Process payments, generate invoices, and maintain billing records
• Provide customer support and service updates
• Improve, secure, and troubleshoot the platform
• Prevent fraud, spam, and misuse
• Send product updates and offers (you can opt out anytime)
• Comply with legal obligations

We do not sell your personal data or your customers' data to anyone.

4. Sharing of Information

We share data only as needed to provide the Services:

• Meta Platforms, Inc. / WhatsApp — to enable WhatsApp Business API, send messages, and verify your business. Meta's own Privacy Policy applies to data processed by Meta.
• Service providers — hosting, cloud storage, email, SMS, analytics, and AI providers who help us run the platform, under confidentiality obligations.
• Payment gateways — to process your payments.
• White Label partners — if you are a client of a White Label partner using our platform, your data is accessible to that partner (see Section 5).
• Legal requirements — when required by law, court order, or government authority, or to protect our rights and users.
• Business transfer — in case of a merger, acquisition, or sale of assets.

5. White Label Partners

• If you signed up through a White Label partner, that partner is responsible for your account, support, billing, and the privacy of your data. Please refer to that partner's own Privacy Policy.
• AiZapy processes such data only as a technology provider on behalf of the White Label partner.
• White Label partners must maintain their own Privacy Policy and obtain all required consents from their clients.

6. Data Retention

• Account and billing data is kept while your account is active and thereafter as required for legal, tax, and accounting purposes (generally up to 8 years for financial records).
• Messages, contacts, and campaign data are retained while your account is active. After account closure, they may be deleted after 30 days, unless law requires us to keep them.
• Backups may take additional time to be fully erased.

7. Data Security

We use reasonable security practices, including encrypted connections (SSL/HTTPS), access controls, and secure servers. However, no online system is 100% secure. You are responsible for keeping your login credentials safe.

8. Cookies

We use cookies to:

• Keep you logged in and remember your preferences
• Understand website traffic and improve performance
• Measure the effectiveness of our ads (e.g., Meta Pixel, Google Analytics)

You can disable cookies in your browser settings, but some features may not work properly.

9. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing communications
• Nominate another person to exercise your rights in case of death or incapacity
• Raise a grievance with our Grievance Officer

To exercise these rights, email sales@aizapy.com with the subject "Data Request". We may need to verify your identity before acting.

10. Data Deletion Request

To delete your account and associated data, email sales@aizapy.com from your registered email address with the subject "Account Deletion Request". We will process the request within 30 days and confirm by email. Data required for legal or tax purposes will be retained as per law.

This email address can also be used as the "Data Deletion Instructions URL" in Meta App settings.

11. Children's Privacy

Our Services are meant for businesses and are not intended for anyone under 18 years of age. We do not knowingly collect personal data from children.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please read their privacy policies separately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date. Continued use of the Services means you accept the changes.

14. Grievance Officer

In accordance with the IT Act, 2000 and the DPDP Act, 2023:

Email: sales@aizapy.com
Address: Raj Nagar, Bailey Road, Patna – 800014, Bihar, India

We will acknowledge your complaint within 48 hours and try to resolve it within 30 days.

15. Contact Us

ARFA DIGITAL EDGE SOLUTIONS (AiZapy)
Raj Nagar, Bailey Road, Patna – 800014, Bihar, India
Email: sales@aizapy.com
Phone: +91 94725 72871