Privacy Policy

1. Who we are

Whats Agent (“Whats Agent”, “we”, “us”, “our”) is a software service that helps businesses and professionals manage, schedule and measure messages in their WhatsApp groups and communities. The service is operated by [Legal entity name], with its registered office at [Registered address], India.

This policy applies to our website and to the Whats Agent application (together, the “Service”). If you have questions, write to us at info@whatsagent.in.

2. Data we collect

Account data

Your name, email address, phone number, password (stored in hashed form), business or organisation name, industry, GST number (if you provide one) and the details of team members you invite.

Billing data

Plan, invoices and payment status. Payments are handled by our third-party payment processor; we do not store your full card number, UPI PIN or net-banking credentials.

Usage and device data

Log-in times, features used, pages visited, IP address, browser and device type, approximate location derived from IP, and error logs. We use this to run, secure and improve the Service.

WhatsApp data needed to run the Service

When you connect a WhatsApp number, we process only what is needed to provide the features you use:

• group and community names and group IDs;
• participant phone numbers and participant counts for the groups you manage through Whats Agent;
• the content of messages and templates you create, schedule or send through Whats Agent, including any attachments;
• delivery, read and failure status of those messages.

Communications

Messages you send to our support team, demo requests and feedback.

3. What we don’t do

• We do not sell your personal data or your contacts’ data.
• We do not read your personal chats. We access WhatsApp data only to the extent needed to deliver the messages you schedule and the analytics you ask for.
• We do not use your group members’ phone numbers to market Whats Agent or anyone else’s products to them.

4. How we use data

We use personal data to:

• create and manage your account and team access;
• create groups, add members, schedule and send messages, and show delivery and read analytics, as you instruct;
• process payments, issue GST invoices and manage renewals;
• provide support and onboarding;
• keep the Service secure, detect abuse and enforce our Terms of Service;
• improve the Service using aggregated or de-identified usage information;
• send service notices (for example billing or security alerts) and, where you have agreed, product updates — you can unsubscribe from marketing emails at any time;
• comply with legal obligations.

5. Legal basis and consent

We process your personal data on the basis of your consent, which you give when you sign up or use the Service, and for other legitimate uses permitted under the DPDP Act — for example, where you voluntarily provide data for a specific purpose, or where processing is needed to comply with law.

You can withdraw consent at any time by writing to us. Withdrawal does not affect processing already carried out, and some features (or the Service as a whole) may stop working if the data they need is no longer available.

6. Your group members and contacts

When you use Whats Agent to message your groups, you decide whose data is processed and why. For that data, you act as the Data Fiduciary and Whats Agent processes it on your behalf as a Data Processor.

You are responsible for making sure you have the consent or another lawful basis to add people to groups and to message them, for giving them any notices required by law, and for handling their requests. We will reasonably assist you in responding to such requests. If a group member contacts us directly, we may refer them to you.

7. Who we share data with

We share personal data only as described here:

• Service providers (processors) that help us run the Service — cloud hosting, payment processing, email delivery, analytics and customer-support tools. They may use the data only to provide their services to us, under contractual confidentiality and security obligations.
• Legal disclosures — to government authorities, courts or law-enforcement agencies where required by applicable law or a valid legal order, or to protect the rights, safety and property of our users, the public or Whats Agent.
• Business transfers — to a successor in the event of a merger, acquisition or sale of assets, subject to this policy.
• With your consent — in any other case, only when you ask or agree.

8. Where data is stored

Your data is stored on servers located in [India / other location — to be confirmed]. If data is transferred outside India, we will do so only as permitted under the DPDP Act and any restrictions notified by the Government of India.

9. How long we keep data

We keep personal data for as long as your account is active and for [90 days] after account closure, after which it is deleted or anonymised — unless a longer period is required by law (for example, invoices and tax records) or needed to resolve disputes or enforce our agreements.

Scheduled message content and delivery logs are retained for [period — to be confirmed] to provide analytics and reports. You can ask us to delete data earlier, subject to these legal requirements.

10. Security

We use reasonable security practices, including encryption in transit, access controls based on least privilege, activity logging and regular reviews of our systems and vendors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs, we will notify affected users and the relevant authorities as required by law.

11. Your rights

Subject to the DPDP Act, you have the right to:

• Access — a summary of the personal data we process about you and the processing activities;
• Correction — correct, complete or update inaccurate or incomplete data;
• Erasure — ask us to delete data we no longer need to keep;
• Withdraw consent — at any time, with effect for the future;
• Grievance redressal — raise a complaint with our Grievance Officer (see below);
• Nominate — nominate another person to exercise your rights in the event of your death or incapacity.

To exercise these rights, email the Grievance Officer. We may need to verify your identity. If your data was added to Whats Agent by one of our customers (for example, as a member of their group), please contact that customer first.

12. Children

The Service is meant for businesses and professionals and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Cookies

Our website and app use essential cookies to keep you signed in and secure, preference cookies to remember your settings, and [analytics cookies — to be confirmed] to understand how the site is used. You can control cookies through your browser settings; blocking essential cookies may stop parts of the Service from working.

14. Sensitive information in groups

WhatsApp groups are visible to every member. Please do not post medical information, financial details (such as loan, policy or account information) or identity documents (such as Aadhaar, PAN or passport copies) in groups — share them one-to-one instead. Whats Agent is designed for general announcements, reminders and updates.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make material changes, we will notify you by email or in the app before they take effect.

16. Grievance Officer and contact

If you have a question, request or complaint about your personal data, contact our Grievance Officer:

We will acknowledge your request within [48 hours] and aim to resolve it within [30 days]. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational for such complaints.