Privacy Policy
Last updated: 20 October 2026
WaCRM ("we", "us") is a product of SETH JI TECH SOLUTIONS, Udyam-registered micro enterprise (MSME), Government of India, Railway Colony, Gorakhpur, Uttar Pradesh 273012, India. It is a software service that helps businesses talk to their customers on WhatsApp through the official WhatsApp Business Platform (Cloud API) provided by Meta. This policy explains what information we handle and why.
Who is responsible
For messages between a business and its customers, the business using WaCRM decides what is collected and is the data controller; WaCRM processes that data on the business's behalf. For WaCRM account data (business owners and their team members), WaCRM is responsible (SETH JI TECH SOLUTIONS). Contact: testdigiquest@gmail.com.
Information we process
- Account data: name, email address, mobile number (for login codes and alerts), hashed password, role, and the business name of WaCRM users.
- WhatsApp data received through the Cloud API: customers' WhatsApp phone number or username, profile name, messages, media and delivery status.
- CRM data the business adds: contacts, tags, notes, deals, appointments and custom fields.
- Activity log: logins, failed logins and important actions in an account, with time, user, IP address and device/browser. Kept for at least 180 days and up to 1 year (longer if the law requires), for security, abuse prevention and legal requests.
- Technical data: server log entries (IP address, time, request type) used for security and troubleshooting.
How we use it
- To show conversations in the business's team inbox and to send the business's replies and approved templates.
- To run features the business turns on, such as automatic replies, the AI assistant, reminders and reports.
- To keep the service secure, prevent abuse and fix problems.
- To check the content a business creates or sends (rate list, AI bot knowledge, templates, broadcasts, messages it sends) for prohibited goods and services. Only matching words and a short excerpt are stored for review by authorised WaCRM staff. Customers' own messages are not scanned except when investigating a report or when the law requires.
We do not sell personal data and do not use WhatsApp message content for advertising.
Businesses we may contact
To offer WaCRM to local businesses we may use business details that the business itself published on OpenStreetMap (name, address, business phone, email, website). A member of our team reviews every business before contacting it, one by one. Any business can ask us to stop: reply "NO", use the link in our email, or write to us — we then never contact it again.
Sharing
- Meta Platforms (WhatsApp Business Platform) to send and receive messages.
- Hosting and infrastructure providers that run the service (application hosting, database, email delivery).
- If the business enables the AI assistant: the selected AI provider, only to generate the requested reply.
- Meta and law enforcement or government authorities, when the law requires or allows it, for example to report illegal activity.
Storage and security
Data is sent over encrypted connections (HTTPS). WhatsApp access tokens are stored encrypted. Access inside a business account is limited by roles. Data is kept while the business account is active and deleted after the account is closed, unless the law requires us to keep it longer.
Your choices and rights
Customers can reply STOP to stop marketing messages from a business. You can ask for a copy, correction or deletion of your data by writing to testdigiquest@gmail.com or by following the steps on our data deletion page. Requests about a specific business's conversations may be forwarded to that business.
Changes
We will update this page when our practices change and show the new date at the top.