Limited this week15-min demo = Rs 500 voucher + 200 credits Book demo

Legal

Privacy Policy

Last updated: 14 October 2026

1. Who we are

WAutomate, a product of WAutomate ("WAutomate", "we", "us", "our"), operates the WhatsApp Business automation platform at wautomate.in. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website and platform. For questions, email info@wautomate.in.

2. Information we collect

We collect information in three categories:

  • Account information. Name, email, company name, phone number, billing address, and authentication credentials supplied at signup or during account configuration.
  • Platform usage data. WhatsApp Business Account identifiers, phone number IDs, message metadata, template approvals, campaign records, contact lists you upload, conversation logs, webhook payloads from Meta, and API usage logs.
  • Technical data. IP address, browser type, device information, pages visited, referrers, cookies, and analytics events.

3. How we use your information

  • Operate, maintain, and improve the platform.
  • Authenticate users and provide access to their tenant data.
  • Process billing and payments through Razorpay.
  • Deliver and route messages through Meta Cloud API on your behalf.
  • Send service announcements, security alerts, and support communications.
  • Comply with legal, tax, and regulatory obligations under Indian and international law.
  • Detect, prevent, and respond to fraud, abuse, or policy violations.

4. Cookies and tracking

We use first-party and third-party cookies to keep you signed in, measure usage, and provide aggregate analytics. Third-party cookies may be set by Google Analytics and Meta Pixel where enabled. You can control cookies through your browser settings or via the cookie banner if presented. Disabling cookies may affect platform functionality.

On our own website we also set a first-party analytics cookie (ra_vid, a random ID kept for 12 months) to count visits and form sign-ups; it is never shared with third parties, IP addresses are stored only as a one-way hash, and it is switched off when your browser sends Do Not Track or Global Privacy Control.

5. Advertising and third-party vendors

Some pages on wautomate.in (such as our blog and resource articles) may display advertising served by third-party vendors, including Google.

We are in the process of enabling Google AdSense on wautomate.in. Once enabled, Google and its third-party vendor partners will use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this website or other websites. Third-party vendors, including Google, may use these cookies to serve personalised advertising; you may opt out of personalised advertising at any time via Google Ads Settings or aboutads.info.

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices.
  • For more information on how Google uses data when you use our partners' sites or apps, see Google's Privacy & Terms.

We do not control the cookies or data practices of these third-party vendors; their use of information is governed by their own privacy policies.

6. How we share information

We do not sell personal data. We share information only with:

  • Meta Platforms — to deliver WhatsApp Business API messages on your behalf.
  • Razorpay — to process payments and refunds.
  • Cloudflare — for edge caching, security, and DDoS protection.
  • Infrastructure providers — for hosting and email delivery, bound by data processing agreements.
  • Amazon Web Services (Amazon Bedrock) — runs the AI model behind WAutomate AI features, only when you use them (see "AI features" below).
  • AI providers you connect yourself (OpenAI, Anthropic, Google, OpenRouter, Sarvam) — only if you add your own API key and choose that provider for an AI feature.
  • Legal authorities — when required by law, court order, or to protect the rights, property, or safety of our users or the public.

AI features

WAutomate AI features are optional and only run when you use them. When they run, we send the following to the AI model, which is hosted by Amazon Web Services (Amazon Bedrock), or to an AI provider you connected with your own key:

  • Template assistant ("Write with AI", Improve, Shorten, Translate, Check for Meta): the template text you type (header, body, footer, button labels, sample values), the chosen language and tone, and your business name. No contacts, phone numbers or chat messages are sent.
  • AI agent auto-replies (only if you switch them on): the customer's incoming WhatsApp message, recent messages of that conversation, and matching passages from your knowledge base, so the model can write a reply.
  • Knowledge base and system-prompt tools: the documents and text you upload to them.

This data is used to produce the AI response. Amazon Bedrock does not use it to train models and does not share it with model providers; it is processed under AWS's data processing terms, which give protection equal to this policy. In the WAutomate mobile app we ask for your permission before an AI feature sends any data, and you can withdraw it at any time in the app's settings.

Improving WAutomate AI

As set out in section 7 of our Terms of Service, we may use the content you create in WAutomate (templates, flows, knowledge base material, AI instructions and prompts, AI responses and your edits, ratings and feedback on them) and usage data about AI features to develop and improve WAutomate AI. We remove or mask personal details first and work with de-identified or aggregated data wherever possible. We do not use the WhatsApp conversations between you and your customers, or your contact lists, for this, we do not sell this data, and we do not give it to third parties to train their own models. You can opt out at any time by emailing info@wautomate.in.

7. Data retention

We retain account and platform usage data for the duration of your account plus a reasonable period for legal, tax, and audit requirements (typically up to 7 years for financial records under Indian tax law). On account deletion, we remove personally identifiable data within 30 days, retaining only anonymized aggregate metrics and records required by law.

8. Your rights

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data. Indian users have rights under the Digital Personal Data Protection Act, 2023. EU and UK users have rights under the GDPR and UK GDPR. To exercise any of these rights, email info@wautomate.in with verification of your identity. We respond within 30 days.

9. Security

We use HTTPS with HSTS, encrypted password storage, application-layer multi-tenant isolation, regular security patching, and audit logs. No system is perfectly secure; we encourage strong passwords and prompt reporting of suspected security issues to info@wautomate.in.

10. Children

WAutomate is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If we become aware of such collection, we will delete the data promptly.

11. International transfers

Personal data may be processed in countries other than the one in which you reside. We rely on adequate data transfer mechanisms including Standard Contractual Clauses where required.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email to active customers and posted on this page with a revised "last updated" date. Continued use of the platform after changes constitutes acceptance.

13. Contact

Questions, concerns, or data requests: info@wautomate.in.

14. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for WAutomate is:

Grievances are acknowledged within 24 hours of receipt and resolved within 15 days, as required under the said Rules. Please include your registered email or WhatsApp number so we can locate your account.

15. Shopify store connections

If you connect a Shopify store, either through our Shopify app or through Quick connect (webhooks you create in your Shopify admin), this section applies to the data of your store's shoppers.

  • What we receive: for each order and its updates, the shopper's name, phone number, email address, shipping and billing address, the items ordered, totals, payment and delivery status, and tracking details. Through our Shopify app we may also receive abandoned checkouts and the shopper's marketing consent.
  • Our role: you (the store owner) decide why and how your shoppers' data is used and are the data fiduciary (controller). We act as your data processor: we use this data only to send the WhatsApp messages you set up (such as order, shipping, delivery and payment updates), to show order details beside your chats, and to run the service. We do not sell it or use it for our own marketing.
  • Marketing messages: order and shipping updates are sent because the shopper gave their number for the order. Marketing messages, such as cart reminders and win-back offers, are sent only to shoppers whose marketing consent is recorded, and only through our Shopify app. Quick connect sends no marketing messages. A shopper who replies STOP gets no further automated messages.
  • How long we keep it: the raw copy of each Shopify notification is deleted after 30 days and the notification record after 180 days. Customer, order and cart records are kept while the store is connected. When you disconnect a store, everything we copied from it is deleted 30 days later, unless you connect it again before then.
  • Shopper requests: a shopper who wants a copy of their data, or wants it deleted, should contact the store. In Integrations → Shopper data you can export a shopper's data or erase it. Through our Shopify app we also act on Shopify's customer data request, customer deletion and shop deletion requests. WhatsApp chats with the shopper are your own records and are managed in Contacts. We will help you with any request at info@wautomate.in.
  • Security: Shopify access tokens and webhook signing keys are stored encrypted. Every notification from Shopify is checked against its signature before we use it, and each workspace can only see its own stores.