Introduction
Welcome to ZapWiz ("we," "our," or "us"). ZapWiz is an all-in-one WhatsApp Business API platform accessible at https://zapwiz.in and https://wa.zapwiz.in. This Privacy Policy applies to every person who registers for, accesses, or uses the ZapWiz platform — including all customers, businesses, and agencies — without exception.
This policy explains what information we collect, how we use it, who we share it with, and how long we retain it. By creating an account or using ZapWiz in any capacity, you accept the terms of this Privacy Policy.
Information We Collect
2.1 Account Information
When you register for a ZapWiz account, we collect:
- Full name and email address
- Business name and contact details
- Password (stored in encrypted, hashed form — never in plain text)
- WhatsApp Business API credentials and linked phone number details
- Billing and payment information (processed via third-party gateways; card details are never stored by us)
- Subscription plan and account usage data
2.2 Message & Contact Data
When you use our messaging and automation features, we process:
- Contact lists — names, phone numbers, custom fields, labels, and group memberships
- WhatsApp message logs — content of messages sent and received through the platform
- Campaign data, scheduled broadcasts, and bulk messaging records
- Bot flow configurations and chatbot response data
- Message templates and media attachments (images, videos, documents, audio files)
2.3 Usage & Technical Data
We automatically collect technical data when you use ZapWiz, including:
- IP address, browser type, operating system, and device identifiers
- Pages visited, features used, and session duration
- Login activity and session tokens
- Error logs and API request/response logs used for debugging and platform stability
2.4 Support Communications
If you contact us for support, we collect your name, email address, and the content of your communications in order to respond to and resolve your enquiry.
How We Use Your Information
- To provide our Services: Account management, campaign processing, chatbot automation, message delivery via the WhatsApp Business API, and all core platform features.
- To process payments: Subscription billing, invoice generation, and payment verification through our integrated gateways.
- To improve the platform: Analysing usage patterns to improve features, fix bugs, and enhance overall performance.
- To communicate with you: Sending account notifications, security alerts, service updates, and responding to support requests.
- For security and fraud prevention: Monitoring for suspicious activity, enforcing our Terms & Conditions, and protecting users from unauthorized access.
- To comply with legal obligations: Responding to lawful requests from courts, regulators, or government authorities.
Information Sharing & Disclosure
We do not share your personal information with third parties except in the following circumstances:
4.1 Service Providers
We share data with trusted service providers who help us operate the platform — including cloud hosting providers, payment processors, and email delivery services. These providers are contractually bound to keep your data confidential and may only use it to deliver the services they provide to us.
4.2 WhatsApp / Meta
When you send messages through ZapWiz, data is transmitted via the Meta WhatsApp Business API. Meta processes messages under their own privacy policy and terms. We encourage you to review Meta's Privacy Policy.
4.3 Legal Obligations
We may disclose your information when required by law, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of ZapWiz, our users, or the public.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction. We will notify you before such a transfer occurs and before your data becomes subject to a different privacy policy.
Third-Party Services
ZapWiz integrates with the following third-party services, each governed by its own privacy policy:
- Meta WhatsApp Business API — Core messaging infrastructure. Meta Privacy Policy
- Razorpay — Payment gateway (India). Razorpay Privacy Policy
- Stripe — International payment processing. Stripe Privacy Policy
- PayPal — Payment gateway. PayPal Privacy Policy
- PhonePe — UPI-based payment gateway (India). PhonePe Privacy Policy
- Paystack — Global payment gateway. Paystack Privacy Policy
- OpenAI — Optional AI-powered chatbot feature. User queries sent through AI-powered bot nodes may be processed by OpenAI's API. OpenAI Privacy Policy
Cookies & Session Data
ZapWiz uses cookies and session tokens to operate the platform and improve your experience:
- Essential Cookies: Required for authentication, CSRF protection, and core platform functionality. These cannot be disabled without breaking the platform.
- Functional Cookies: Remember your preferences, UI settings, and language selection.
- Analytics Cookies: Collect anonymized data about feature usage to help us improve the platform.
You can manage non-essential cookies through your browser settings. Disabling essential cookies will prevent core platform features from working correctly.
Data Security
We implement industry-standard measures to protect your information:
- Encryption in transit: All data between your browser and our servers is encrypted via TLS/SSL.
- Encrypted storage: Passwords are hashed (bcrypt) and sensitive tokens are encrypted at rest.
- Role-based access control: Each user can only access data relevant to their workspace and role.
- Workspace isolation: Each business account is logically isolated from all other accounts on the platform.
- Secure payment handling: Card data is never stored on our servers. All transactions are handled by PCI DSS-compliant gateways.
- Automated data cleanup: Message content, media, and logs are automatically deleted after 90 days across all accounts, reducing your data exposure risk.
No online system is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.
Data Retention Policy
No messages, media files, or message logs will be retained on ZapWiz servers for more than 90 days. This policy is mandatory, automatic, and applies to every registered user and customer without exception. It cannot be disabled, paused, or overridden by any user, account, or administrator.
8.1 WhatsApp Message Content
The full text body of every WhatsApp message sent or received through ZapWiz is automatically and permanently deleted 90 days after the message was created. Once deleted, the message content cannot be recovered by any means.
8.2 Message Media Files
All media files associated with WhatsApp messages — including images, videos, audio files, voice notes, and documents — are permanently deleted after 90 days. This applies to all sent and received media files, for every account on the platform, regardless of plan or status.
8.3 Message Logs & Delivery Records
Message delivery logs, read receipt records, and associated metadata are automatically purged after 90 days. Delivery status, engagement data, and campaign analytics tied to individual message records are cleared as part of this process.
8.4 Temporary Media Uploads
Media files uploaded temporarily (e.g., during campaign composition or bot flow building) that are not explicitly saved to your media library are deleted within 24 hours of upload.
8.5 Account Data & Subscription Expiry
Core account information (name, email, settings, contacts, campaigns, bot flows) is kept for the duration of your active subscription. When a subscription expires, is cancelled, or an account is closed, all account data and associated records are permanently and irrecoverably deleted after 7 days. There is no recovery period beyond this 7-day window. ZapWiz does not archive or back up account data after deletion.
Your Rights
You have the following rights regarding your personal data held by ZapWiz:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request permanent deletion of your personal data, subject to any mandatory legal retention requirements.
- Objection: Object to specific types of data processing where applicable.
- Withdraw Consent: Withdraw consent for optional data processing (e.g., marketing communications) at any time.
To exercise any of these rights, contact us at info@zapwiz.in. We will respond within 30 days and may verify your identity before processing your request.
Changes to This Privacy Policy
We may update this Privacy Policy as our services evolve or in response to legal requirements. When we make material changes, we will update the "Last Updated" date on this page, send a notification email to all registered users, and display a notice on the ZapWiz dashboard.
Your continued use of ZapWiz after changes are published constitutes acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and close your account.
Contact Us
If you have any questions or concerns about this Privacy Policy or the way we handle your data, please reach out:
We will respond to all privacy enquiries within 30 business days.