Privacy Policy

1. Introduction

This Privacy Policy explains how Zumper Techrush Private Limited (“Zumper Techrush”, “we”, “our” or “us”), the owner and operator of Waami (“Waami”, “the Service”), collects, uses, stores, shares and protects information when businesses and individuals use Waami, a WhatsApp Cloud CRM platform built on the WhatsApp Cloud API (Meta Platforms, Inc.).

Waami helps businesses manage their WhatsApp Business conversations, automate replies, run broadcast campaigns and manage customer relationships. Because Waami processes data from WhatsApp Business Accounts, this policy describes both the data we handle on behalf of the business that subscribes to Waami (the “Business”) and the limited data we collect from visitors to this website.

By accessing or using Waami, you agree to the practices described in this Privacy Policy. If you are an end user of a business that uses Waami, your conversations with that business are controlled by that business, and you should contact them directly regarding their data practices.

2. What Information We Collect

We collect the following categories of information in connection with the Service:

• WhatsApp Business Account data: When a Business connects its WhatsApp Business number to Waami through the WhatsApp Cloud API, we receive the data Meta makes available to the Business through that API, including message content and message metadata (sender, recipient, timestamps, delivery and read status).
• Contact and profile information: Phone numbers, profile names, profile pictures and other public profile details of the customers with whom the Business communicates through Waami.
• Message templates: The WhatsApp message templates (and their approval status) that a Business uses for broadcast campaigns and proactive messaging.
• Business account information: The name, email address, phone number, billing details and user credentials of the Business and its agents who register for and use Waami.
• Usage and log data: When you use our website or the Waami dashboard, we may collect technical data such as IP address, browser type, device information, pages visited and time of access, through server logs and cookies or similar technologies.

3. How We Use the Information

We use the information we collect solely to provide and improve the Service, including:

• Providing the core CRM features of Waami — storing conversation history, powering the shared team inbox, automated replies and chatbot flows, and contact and label management on behalf of the Business.
• Enabling broadcast campaigns and message-template-based messaging through the WhatsApp Cloud API.
• Operating, maintaining, securing and improving the Service, including analytics and troubleshooting.
• Providing customer support and responding to requests from the Business.
• Sending service notifications, billing communications and, with consent, product updates.
• Complying with applicable legal obligations, and enforcing our Terms of Service and WhatsApp/Meta policies.

4. How We Share the Information

We do not sell, rent or trade your personal information or your customers' information to any third parties. We share data only in the following limited circumstances:

• WhatsApp / Meta: Because Waami is built on the WhatsApp Cloud API, message data is processed by Meta in accordance with Meta's WhatsApp Cloud API terms, WhatsApp Business Policy and Meta Platform Terms, which govern how that data may be used. Waami cannot provide the Service without sharing this data with Meta as required by the API.
• Service providers: We may share limited data with trusted service providers (such as hosting and infrastructure providers) who assist us in operating Waami, subject to strict confidentiality obligations and only to the extent necessary to provide the Service.
• Legal requirements: We may disclose information where required by law, regulation or legal process, or to protect the rights, property or safety of Zumper Techrush, our users or the public.

We do not use WhatsApp message content to advertise to end users, and we do not use the content of messages for any purpose other than providing the CRM features the Business has asked for.

5. Data Storage and Security

We take reasonable and industry-standard measures to protect your information, including encryption of data in transit (TLS), encryption of data at rest, access controls that limit internal access to authorized personnel only, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; however, we continuously work to safeguard the data entrusted to us.

6. Data Retention

We retain data only as long as necessary to provide the Service and fulfill the purposes described in this policy, or as required by law. When a Business cancels its Waami subscription, its data is deleted or anonymized in accordance with its contract, unless a longer retention period is required by applicable law. See our User Data Deletion page for how to request deletion of your account and associated data. Conversation data of individual end users is controlled by the Business that uses Waami; end users should contact the Business directly, or follow the process described on our User Data Deletion page.

7. Your Rights

Depending on your jurisdiction (including under the Indian Digital Personal Data Protection Act, 2023, and other applicable laws), you may have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure/deletion: Request deletion of your data — see our User Data Deletion page for the exact process.
• Right to withdraw consent: Withdraw any consent you have given at any time.
• Right to complain: Lodge a complaint with the appropriate data protection authority.

To exercise any of these rights, contact us using the details in Section 10. We will respond within the timeframe required by applicable law.

8. Children's Privacy

Waami is a business-to-business service and is not directed at children. We do not knowingly collect personal information from children under the age of 13 (or 16 where applicable law requires a higher age). If you believe a child has provided us with personal information, please contact us, and we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with an updated “Last Updated” date. We encourage you to review this page periodically. Material changes will be communicated to Businesses through the Service or by email.

10. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us: