Privacy Policy

1. What we collect

We only collect what we need to run the service for you. That includes:

• WhatsApp messages you send us — the text, images, voice notes and commands you send to your WAPA number, together with basic message metadata (timestamps, message IDs).
• Business-card images — photos of business cards you upload so we can read the contact details on them.
• Voice notes — audio you record and send, which we transcribe to English text.
• Extracted lead / contact details — the name, company, role, phone, email and notes we derive from the cards and voice notes you provide. Please note: this is personal data about third parties (the people you meet) that you choose to provide to us; you are responsible for having a lawful basis to share it (see our Terms).
• Account, usage and quota data — your WhatsApp identity (phone number), the pass you have active, the number of leads captured, and usage counters we maintain to deliver and meter the service.
• Payment confirmation data — UPI payment screenshots or references you send to activate a pass. We do not store full card numbers or banking credentials; payments are made over UPI through your own app.

We do not ask for, and you should not send us, sensitive data (such as health, financial account credentials, or government IDs) — WAPA does not need them.

2. How we use your data

We use the data above strictly to provide and improve the service you asked for:

• To produce your leads — read business cards, transcribe voice notes, structure and score each lead, and link the card and the note into one record.
• To store and export — keep your leads available in your account and let you download them as CSV/Excel on demand.
• To run and meter the service — authenticate your WhatsApp number, apply your pass and quota, and keep the assistant responsive.
• To support you — respond to your questions, troubleshoot issues, and confirm payments.
• To keep WAPA secure and lawful — detect abuse, prevent fraud, and comply with applicable law.

We do not use your leads or message content to train public AI models, and we do not build advertising profiles from your data.

3. AI processing & sub-processors

To deliver WAPA's core features we rely on a small number of carefully chosen processors. We share data with them only to the extent needed to fulfil the service, and never for their own marketing.

• Groq (AI vision & transcription) — business-card images are sent to Groq's vision models to extract contact fields, and voice notes are sent to Groq Whisper for speech-to-text transcription into English. This processing is automated and used solely to generate your lead.
• Our hosting & storage — your account data, leads, media assets and transcripts are stored on our servers, operated in and for India, so that you can retrieve and export them.

Where a processor operates outside India, any transfer is limited to what is necessary to provide the feature and is subject to that processor's confidentiality and security obligations. We keep this list current; if we add or change a material processor, we will update this policy.

4. Data retention

We keep your leads, media and transcripts while your account and any pass are active, so they are there when you need them. Business-card images and voice notes are retained as part of your lead record unless you ask us to remove them.

You can ask us to delete specific leads, or your entire history, at any time — see your rights below. When you request deletion, or when an account becomes inactive and you ask us to close it, we remove the associated personal data within a reasonable period, except where we must retain limited records to meet a legal, tax or fraud-prevention obligation.

5. Your rights — and the cardholder's rights

Under the DPDP Act and as a matter of good practice, you have the right to:

• Access — request a summary of the personal data we hold about you and how we process it.
• Correction — ask us to correct inaccurate or incomplete data.
• Erasure / delete-on-request — ask us to delete specific leads or your full account data.
• Grievance redressal — raise a concern with our grievance contact (below) and receive a response.
• Withdraw consent — stop further processing by ending your use of WAPA and requesting deletion.

The individuals whose business cards and details you capture (“Data Principals”) also have rights over their personal data. If a person you have added asks for their data to be accessed, corrected or erased, you and WAPA will work together to honour that request — write to our grievance contact and we will help action it on the underlying record.

6. Security measures

We take reasonable technical and organisational steps to protect your data, including:

• Encrypted transport (HTTPS/TLS) for data in transit between WhatsApp, our servers and our processors.
• Per-tenant isolation, so each user's leads, media and usage counters are scoped to their account and not pooled with others.
• Access controls limiting who can reach production systems, on a need-to-know basis.
• Regular backups and routine maintenance to keep your data available and recoverable.

No system is perfectly secure, but we work to limit risk and to respond quickly if an incident occurs.

7. We never sell your data — and never message your contacts

We do not sell, rent or trade your personal data or your leads to anyone. WAPA's job is to organise your leads for you. It will never message, call or email the contacts you capture on its own — outbound outreach only ever happens when you explicitly instruct it, and outbound drafts are shown for your approval first.

8. Children

WAPA is a business tool and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has used WAPA, please contact us and we will delete the relevant data.

9. Changes to this policy

We may update this policy from time to time — for example, if we add a feature or change a processor. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the service. Continued use of WAPA after an update means you accept the revised policy.

10. Contact & grievance officer

For any privacy question, data request or grievance, contact our Grievance Officer: