Privacy Policy

Legal entity: Techspence Private Limited
Product / brand: wapio
Registered / correspondence address: Techspence, Room No 10, First Floor, Park Centre, KINFRA Techno Industrial Park, Kakkanchery, Malapuram, Kerala, 673634
Email (all enquiries, including privacy): hello@wapio.in
Phone / WhatsApp: 9061990080

wapio is a WhatsApp Business Platform technology solution operated by Techspence Private Limited that helps businesses connect to Meta’s WhatsApp Cloud API, manage WhatsApp Business Accounts, send and receive messages, manage templates, and operate shared inboxes and automations. In Meta’s terminology, we operate as a WhatsApp Business Platform Tech Provider (technology provider / Third Party Service Provider under the WhatsApp Business Solution Terms). Clients onboard WhatsApp Business Accounts (WABAs) through Meta Embedded Signup and related flows; Meta bills clients for WhatsApp API usage, while we may bill clients for wapio platform features.

This policy is maintained by Techspence for the wapio Service. It is our own privacy policy (not Meta’s or another company’s). It is publicly available at https://wapio.in/privacy-policy without geo-blocking, including to Meta’s crawlers and App Review teams.

Depending on the context, we act in different roles:

• Data Fiduciary / Controller (account & website data): For data about our business customers and website visitors (e.g., account registration, billing, support tickets, marketing to businesses), Techspence determines the purposes and means of processing.
• Data Processor / Service Provider (WhatsApp messaging on behalf of clients): For WhatsApp Business Solution Data and end-user conversation content processed when a client uses wapio to access Meta’s WhatsApp Cloud API, the client business is the controller / data fiduciary of that end-user data. We process such data only on the client’s behalf, pursuant to the client’s instructions and authorization, to provide the Service the client requests, and not for Techspence’s own independent purposes, consistent with the WhatsApp Business Solution Terms applicable to Third Party Service Providers.
• Meta / WhatsApp: Meta Platforms and WhatsApp process data as independent platform providers under their own terms and policies when messages are sent or received on WhatsApp.

If you are an end consumer chatting with a business on WhatsApp, that business’s privacy policy also applies. You should contact that business for most requests about your chat content. We will assist our clients in fulfilling lawful requests as described below.

• “Client” means a business that creates a wapio workspace and/or connects a WhatsApp Business Account through our Service.
• “End User” means an individual who exchanges WhatsApp messages with a Client.
• “Platform Data” means data obtained from Meta’s Platform (including Facebook Login / Meta Graph APIs and related developer products), as defined in the Meta Platform Terms.
• “Business Solution Data” means data obtained from using the WhatsApp Business Solution, as described in the WhatsApp Business Solution Terms.
• “Personal Data” means information that relates to an identified or identifiable individual, including under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

4.1 Data you provide directly

• Name, work email, phone number, company name, job title
• Billing address, GSTIN / tax identifiers, payment method tokens (processed via payment partners)
• Support communications, demo requests, and form submissions
• Account credentials and authentication information
• Configuration data (templates drafts, automation rules, webhook URLs, agent profiles)

4.2 Data from Meta / WhatsApp when Clients connect accounts

• WhatsApp Business Account IDs, business portfolio / Meta Business Manager identifiers, and phone number IDs
• Business display name, about text, profile picture, and related profile fields exposed by the APIs
• Message metadata (message IDs, timestamps, delivery / read / failed status, conversation categories where provided)
• Inbound and outbound message content and media required to operate inbox, webhooks, and APIs
• Template names, categories, statuses, and rejection reasons
• Permissions granted via Embedded Signup (including whatsapp_business_management and whatsapp_business_messaging where approved)
• Webhook event payloads and quality / limit related signals exposed by Meta

4.3 Data collected automatically

• IP address, device / browser type, operating system, referral URL
• Pages viewed, feature usage, approximate location derived from IP
• Log files, diagnostic data, security telemetry, and cookies / similar technologies

4.4 Data we do not intentionally collect

We do not require special categories of data (e.g., health, biometric templates) to operate wapio. Clients must not send such data through the Service unless they have a lawful basis and appropriate safeguards.

We process personal data only for the purposes described below and as disclosed in this policy:

• Provide the Service: account creation, authentication, WABA connection via Embedded Signup, sending/receiving messages, template management, inbox, automations, webhooks, analytics dashboards, and developer APIs
• Operate as a Tech Provider / processor for Clients: process Business Solution Data solely to deliver services the Client requests, per Client instructions
• Billing & tax: subscriptions, invoices, GST compliance, collections
• Support & communications: respond to tickets, onboarding, incident notices
• Security & integrity: fraud prevention, abuse detection, debugging, audit logging
• Legal compliance: respond to lawful requests, enforce Terms, comply with Indian law and Meta/WhatsApp policies applicable to us
• Product improvement: aggregated / de-identified analytics about Service performance (not using Business Solution Data to build profiles on individual WhatsApp End Users)
• Business marketing (B2B only): with consent or as otherwise permitted by law, contact prospective or existing business customers about wapio

We do not sell personal data. We do not use Business Solution Data to track, build, or augment profiles on individual WhatsApp users (except as needed to display and operate the Client’s own message threads). We do not share, transfer, sell, license, or distribute Business Solution Data to third parties except to subprocessors strictly necessary to provide the Service, or as required by law, consistent with the WhatsApp Business Solution Terms.

Consistent with the WhatsApp Business Solution Terms, we do not allow Business Solution Data (including anonymous, aggregate, or derived forms) to be used to create, develop, train, or improve general machine learning or artificial intelligence models. If AI-assisted features are offered inside a Client’s workspace, they will be configured so that Business Solution Data is used only to provide that Client’s exclusive functionality and not to train models shared across customers or for Techspence’s unrelated products, except as expressly permitted by Meta’s terms and disclosed to the Client.

Depending on the processing activity, we rely on one or more of the following:

• Performance of a contract with the Client (providing the Service)
• Consent, where required (e.g., certain cookies or marketing)
• Legitimate uses permitted under applicable law for security, fraud prevention, and service improvement
• Compliance with legal obligations (tax, accounting, lawful requests)

Clients are responsible for ensuring they have a lawful basis (including End User opt-in / consent where required) before using WhatsApp messaging features. See our Acceptable Use Policy and Meta’s WhatsApp Business Messaging Policy.

We may share personal data with:

• Meta Platforms, Inc. / WhatsApp: as required to provide Cloud API messaging, Embedded Signup, webhooks, and related Platform features
• Infrastructure providers: cloud hosting, storage, CDN, email delivery, monitoring, and error tracking vendors bound by confidentiality and data processing terms
• Payment / invoicing partners: to process subscription payments and GST invoices
• Professional advisers: lawyers, accountants, auditors under confidentiality duties
• Authorities: when required by applicable law, regulation, legal process, or to protect rights, safety, and security
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards

We require subprocessors that process Personal Data on our behalf to implement appropriate technical and organisational security measures and to process data only on our documented instructions.

Our primary operations are in India. Meta’s WhatsApp Cloud API and related Platform services may process data in regions determined by Meta (including outside India), subject to Meta’s terms and documentation (including any local storage options Meta makes available). Where we transfer Personal Data outside India, we take steps consistent with applicable law, including contractual safeguards with subprocessors.

Meta’s Platform Terms require that we give Users an easily accessible way to request modification or deletion of their Platform Data, and that we explain how to submit that request. A statement that deletion is available, without instructions, is not sufficient.

Step-by-step: request deletion

1. Send an email to hello@wapio.in with the subject line “Data Deletion Request”.
2. Include: (a) your full name; (b) the email address associated with your wapio account or Meta login; (c) your company / workspace name if applicable; (d) whether you want deletion of your wapio user account, Client workspace, and/or Platform Data obtained via Meta; and (e) any WhatsApp Business phone number connected.
3. Alternatively, use the form and instructions on our dedicated page: Data Deletion Instructions.
4. You may also call or message us on WhatsApp at 9061990080 and ask for a data deletion request to be logged (we will still ask you to confirm by email for security).

What we will do: After verifying your identity, we will delete or anonymise Personal Data and Platform Data associated with your account that we are not required to retain by law, within a reasonable period (typically within 30 days, sooner where required). We will email a confirmation including a confirmation code and, where applicable, a status URL.

Client / Tech Provider scenarios: If a Client closes their wapio account or requests deletion of Platform Data / Business Solution Data we process for them, we will delete or return that data in accordance with our Terms and Meta requirements, except for limited records we must retain for legal, tax, security, or dispute purposes. End Users should first contact the Client business that messaged them; we assist Clients in processing End User deletion requests relating to data stored in wapio.

Meta / Facebook account removal: If you remove our Meta app and request deletion through Meta’s Apps and Websites settings, we will process deletion of associated Platform Data when we receive Meta’s data deletion callback or notice, and/or when you email us as above.

We may decline or limit deletion where applicable law requires retention (e.g., invoices), where data has been aggregated/de-identified so it cannot be linked to you, or where deletion would impair security investigations or legal claims. We will explain any legitimate refusal.

Subject to applicable law (including the DPDP Act), you may request access to or correction of your Personal Data, withdraw consent where processing is consent-based, nominate a representative where permitted, and raise a grievance. Email hello@wapio.in with the subject “Privacy Request”. We aim to respond within a reasonable period and as required by law.

• Account & billing data: retained for the life of the account and thereafter as required for Indian tax and company law (often up to 8 years for financial records)
• Message content & media in wapio: retained according to Client workspace settings and our operational defaults (Clients may configure shorter retention where the product allows); deleted or anonymised after account closure subject to Section 10
• Logs & security telemetry: typically 90–180 days unless needed longer for investigations
• Consent / opt-in records held by Clients: Clients should retain their own proof of opt-in; if stored in wapio features, retention follows Client configuration

Meta independently determines retention of data on WhatsApp / Cloud API infrastructure per Meta’s documentation and policies.

We implement administrative, physical, and technical safeguards designed to protect Personal Data and Business Solution Data against unauthorised access, destruction, loss, alteration, disclosure, or compromise. Measures include encryption in transit (TLS), access controls, least-privilege administration, monitoring, and vendor due diligence. Details are described on our Security page. No method of transmission or storage is completely secure.

We use essential cookies for authentication and security, and may use analytics cookies to understand website usage. You can control cookies through your browser settings. Blocking essential cookies may break sign-in.

wapio is a B2B Service. It is not directed to children under 18. We do not knowingly collect Personal Data from children. If you believe a child has provided data, contact us for deletion.

We may disclose information when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request in India or other applicable jurisdictions, or to protect the rights, property, or safety of Techspence, our Clients, End Users, or the public. Where legally permitted, we will notify the affected Client of a request concerning their data.

Use of WhatsApp and Meta products is also governed by Meta’s and WhatsApp’s terms and policies, including:

• WhatsApp Business Solution Terms
• WhatsApp Business Terms of Service
• WhatsApp Business Messaging Policy
• Meta Platform Terms
• Meta Developer Policies

We are not responsible for Meta’s independent processing of data on its platforms.

We may update this Privacy Policy from time to time. The “Last updated” date will change, and material updates may be communicated by email or in-product notice. Continued use of the Service after an update constitutes acknowledgement of the revised policy to the extent permitted by law.

Grievance Officer / Privacy Desk
Techspence Private Limited
Techspence, Room No 10, First Floor, Park Centre, KINFRA Techno Industrial Park, Kakkanchery, Malapuram, Kerala, 673634
Email: hello@wapio.in
Phone: 9061990080

Related pages: Data Deletion Instructions · Terms of Service · Security · Acceptable Use Policy · Contact