Privacy Policy
What AksharWAP collects, why we hold it, who we share it with, and the choices you have over your data.
Updated 11 August 2026
Overview
AksharWAP is a WhatsApp marketing and automation platform built on the official WhatsApp Business Platform. Businesses use it to run campaigns, automate replies, manage contacts and work a shared team inbox. This policy explains how we handle personal data across our website and the application.
It helps to separate two kinds of data. Customer data is information about the business that subscribes to AksharWAP and the people who log in to it — we decide how that is handled. End-customer data is information about the people your business messages on WhatsApp: contacts you import, and the conversations they have with you. You decide what that data is and why it is processed; we process it on your instructions under our Terms of Service.
Data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Name, work email, password hash, workspace name, role and permissions, team membership, invitations. | You, when you register or are invited by a colleague. |
| WhatsApp connection data | WhatsApp Business Account and phone number IDs, display names, template definitions and their approval state, access tokens issued for your account. | Meta, when you connect a number through embedded signup or link an existing account. |
| Contact data | Phone numbers, names, attributes, tags and segment membership for the contacts you manage. | You, via CSV import, the app, the REST API, or an inbound WhatsApp message. |
| Message data | Inbound and outbound message content and media, delivery, read, reply and click status, campaign and per-recipient results, notes and assignments in the shared inbox. | Meta’s Cloud API webhooks, your agents, and your automations. |
| Billing data | Plan, billing cycle, invoices, GST details, wallet balance and message-cost deductions, payment identifiers returned by our payment gateway. | You and Razorpay. Card and bank details go to Razorpay directly — we never receive or store them. |
| Usage and security data | Audit log entries recording who changed what, API token usage, IP address, browser and device details, and application logs. | Automatically, as you use the application. |
| Website data | Pages viewed and referring source on our marketing site, plus anything you send us by email. | Your browser, and you. |
We do not ask for and do not want special categories of data — health, financial account numbers, government identifiers or biometrics. Do not load such data into contact attributes or send it through campaigns.
How we use data
- • To provide the service: sending and receiving WhatsApp messages, running campaigns, applying automation rules, answering with AI agents, and keeping contact and conversation history intact.
- • To operate accounts: authentication, roles and permissions, invitations, and support requests you raise.
- • To bill you: subscriptions, GST invoices, wallet top-ups and the message costs drawn against them.
- • To keep the platform safe and working: rate limiting, abuse and fraud prevention, debugging, and the audit log that shows who did what.
- • To meet legal obligations, including tax and accounting requirements and Meta’s platform policies.
- • To tell you about the product: service notices always; product news only where you have asked for it or where the law allows it, and every such email carries an unsubscribe link.
We do not sell personal data, and we do not use the content of your WhatsApp conversations or your contact lists to train our own models or to advertise to anybody.
Legal basis
For customers in India, we process personal data under the Digital Personal Data Protection Act, 2023 — for account and billing data, on the basis of the contract you enter into with us and for the legitimate uses that Act recognises; for end-customer data, as a processor acting on your instructions. Where the GDPR applies to a customer, our bases are performance of a contract, our legitimate interest in securing and improving the service, compliance with legal obligations, and consent where consent is what the law requires.
When you message people on WhatsApp through AksharWAP, obtaining a valid basis to contact them — opt-in, in the form WhatsApp’s Business Messaging Policy requires — is your responsibility, not ours.
International transfers
The platform is operated for customers in India, and our infrastructure is hosted accordingly. Some of our providers — Meta above all — operate globally, so messages you send through the WhatsApp Business Platform are processed outside India by Meta under its own terms. Where data leaves the country, we rely on contractual protections with the provider concerned.
How long we keep data
- • Account, contact, conversation and campaign data: for as long as your workspace is active, so your history stays usable.
- • After cancellation: retained for 90 days so the account can be restored, then deleted or irreversibly anonymised.
- • Billing records and invoices: kept for as long as tax and accounting law requires, which in India is generally eight years.
- • Audit logs and security logs: kept for a rolling window sufficient for investigation, then rotated out.
- • Data you delete yourself — a contact, a conversation, a campaign — is removed from the live system immediately and drops out of backups as those backups age out.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, or restrict what we do with it. You can withdraw consent where consent was the basis for processing, and you can complain to the Data Protection Board of India or your local supervisory authority.
Write to privacy@aksharwap.com and we will respond within 30 days. If your request concerns data held in a customer’s workspace — you were messaged by a business using AksharWAP — contact that business directly; they decide what happens to it, and we will refer you to them or pass the request along.
Account owners can export contacts and campaign data from inside the application at any time, and delete a workspace outright.
Children
AksharWAP is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child’s data has reached us, write to us and we will delete it.
Changes to this policy
When this policy changes we update the date at the top of the page. If a change materially affects how we handle your data, we will tell account owners by email or in the application before it takes effect.
Questions about your data?
Privacy requests, data-protection questions and access or deletion requests all go to one inbox, and we answer within 30 days.
privacy@aksharwap.com