Legal

Privacy Policy

What AksharWAP collects, why we hold it, who we share it with, and the choices you have over your data.

Updated 11 August 2026

Overview

AksharWAP is a WhatsApp marketing and automation platform built on the official WhatsApp Business Platform. Businesses use it to run campaigns, automate replies, manage contacts and work a shared team inbox. This policy explains how we handle personal data across our website and the application.

It helps to separate two kinds of data. Customer data is information about the business that subscribes to AksharWAP and the people who log in to it — we decide how that is handled. End-customer data is information about the people your business messages on WhatsApp: contacts you import, and the conversations they have with you. You decide what that data is and why it is processed; we process it on your instructions under our Terms of Service.

Data we collect

CategoryWhat it includesWhere it comes from
Account dataName, work email, password hash, workspace name, role and permissions, team membership, invitations.You, when you register or are invited by a colleague.
WhatsApp connection dataWhatsApp Business Account and phone number IDs, display names, template definitions and their approval state, access tokens issued for your account.Meta, when you connect a number through embedded signup or link an existing account.
Contact dataPhone numbers, names, attributes, tags and segment membership for the contacts you manage.You, via CSV import, the app, the REST API, or an inbound WhatsApp message.
Message dataInbound and outbound message content and media, delivery, read, reply and click status, campaign and per-recipient results, notes and assignments in the shared inbox.Meta’s Cloud API webhooks, your agents, and your automations.
Billing dataPlan, billing cycle, invoices, GST details, wallet balance and message-cost deductions, payment identifiers returned by our payment gateway.You and Razorpay. Card and bank details go to Razorpay directly — we never receive or store them.
Usage and security dataAudit log entries recording who changed what, API token usage, IP address, browser and device details, and application logs.Automatically, as you use the application.
Website dataPages viewed and referring source on our marketing site, plus anything you send us by email.Your browser, and you.

We do not ask for and do not want special categories of data — health, financial account numbers, government identifiers or biometrics. Do not load such data into contact attributes or send it through campaigns.

How we use data

  • • To provide the service: sending and receiving WhatsApp messages, running campaigns, applying automation rules, answering with AI agents, and keeping contact and conversation history intact.
  • • To operate accounts: authentication, roles and permissions, invitations, and support requests you raise.
  • • To bill you: subscriptions, GST invoices, wallet top-ups and the message costs drawn against them.
  • • To keep the platform safe and working: rate limiting, abuse and fraud prevention, debugging, and the audit log that shows who did what.
  • • To meet legal obligations, including tax and accounting requirements and Meta’s platform policies.
  • • To tell you about the product: service notices always; product news only where you have asked for it or where the law allows it, and every such email carries an unsubscribe link.

We do not sell personal data, and we do not use the content of your WhatsApp conversations or your contact lists to train our own models or to advertise to anybody.

Who we share data with

We share data only with the providers needed to run the service, and only with what they need:

ProviderPurposeWhat it receives
Meta Platforms (WhatsApp Business Platform)Delivering and receiving your WhatsApp messages, template review, account onboarding.Message content and media, recipient phone numbers, template content, WhatsApp account identifiers.
RazorpaySubscription checkout, recurring billing and wallet top-ups in INR.Billing contact details and payment amounts. Card and bank credentials are collected by Razorpay, not by us.
Cloud hosting and infrastructureRunning the application, the database and backups.Data at rest and in transit, under contract and with no independent right of use.
AI model providersGenerating AI-agent replies, only where you enable an AI agent.The conversation context needed to answer. Not used to train third-party models.
Your own endpointsWebhooks and the REST API, when you configure them.Whatever the events and endpoints you choose expose. Once delivered, that data is under your control.

We may also disclose data where the law requires it, to enforce our Terms, or as part of a merger or acquisition — in which case you will be told before your data becomes subject to a different policy.

International transfers

The platform is operated for customers in India, and our infrastructure is hosted accordingly. Some of our providers — Meta above all — operate globally, so messages you send through the WhatsApp Business Platform are processed outside India by Meta under its own terms. Where data leaves the country, we rely on contractual protections with the provider concerned.

How long we keep data

  • • Account, contact, conversation and campaign data: for as long as your workspace is active, so your history stays usable.
  • • After cancellation: retained for 90 days so the account can be restored, then deleted or irreversibly anonymised.
  • • Billing records and invoices: kept for as long as tax and accounting law requires, which in India is generally eight years.
  • • Audit logs and security logs: kept for a rolling window sufficient for investigation, then rotated out.
  • • Data you delete yourself — a contact, a conversation, a campaign — is removed from the live system immediately and drops out of backups as those backups age out.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, or restrict what we do with it. You can withdraw consent where consent was the basis for processing, and you can complain to the Data Protection Board of India or your local supervisory authority.

Write to privacy@aksharwap.com and we will respond within 30 days. If your request concerns data held in a customer’s workspace — you were messaged by a business using AksharWAP — contact that business directly; they decide what happens to it, and we will refer you to them or pass the request along.

Account owners can export contacts and campaign data from inside the application at any time, and delete a workspace outright.

Cookies

The application sets the cookies needed to keep you logged in and to protect the session. These are strictly necessary — turn them off and you cannot sign in. Our marketing site uses no advertising or cross-site tracking cookies, and we do not run third-party ad pixels on it.

Children

AksharWAP is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child’s data has reached us, write to us and we will delete it.

Changes to this policy

When this policy changes we update the date at the top of the page. If a change materially affects how we handle your data, we will tell account owners by email or in the application before it takes effect.

Questions about your data?

Privacy requests, data-protection questions and access or deletion requests all go to one inbox, and we answer within 30 days.

privacy@aksharwap.com