WaPilot This policy explains what personal data WaPilot ("we") processes when you use WaPilot, and your rights. We follow the Digital Personal Data Protection Act, 2023.
1. Data about you (our customer)
- Account: name, email, mobile number, business name and GSTIN you give us at checkout.
- Billing: plan, amounts, invoices, and the payment reference from Razorpay. We never see or store your card or bank details; Razorpay processes payments.
- Devices: the browsers you activate, their IP address, browser type and last-seen time, to enforce your plan's browser limit and keep your account secure.
2. Data you store in the CRM
Contacts, deals, notes, tasks, follow-ups, templates and similar records you add are stored on our servers on your behalf. For this data you are the data fiduciary and we act as your processor: we use it only to provide the service to you.
WhatsApp messages: the extension reads the chat you have open only to show the right customer, to know who wrote last (for "Awaiting reply"), and, when you click them, for AI features. Message text is saved to our servers only if you switch on Chat history backup, and then only for chats of contacts in your CRM. The extension never reads other chats in the background and never sends messages.
3. Why we use it
To provide and secure the service, issue licenses and invoices, send service emails (receipts, reminders you set up, security notices), provide support, and meet legal and tax obligations. We do not sell personal data and do not use your CRM data for advertising.
4. Who we share it with
Only with service providers that help us run the service, under contract: hosting, email delivery, Razorpay (payments), and, if you use them, the AI provider and the integrations you connect (Google Sheets, HubSpot, Zoho). We may disclose data if required by law.
5. Storage and security
Data is encrypted in transit (HTTPS). Integration credentials and payment keys you enter are stored encrypted. Access is limited to staff who need it to run the service.
6. How long we keep it
Account and CRM data are kept while your license is active and for 90 days after it expires, then deleted on request or as part of routine clean-up. Invoices are kept for as long as tax law requires (currently 8 years).
7. Your rights
You can access, correct, export or delete your data. Inside the extension you can export contacts and erase any contact's data permanently. To delete your whole account, contact us. If you have a grievance about how we handle personal data, write to our grievance officer at the email on our contact page; we respond within 30 days.
8. Changes
We will post any changes here and, for significant changes, email active customers.