Privacy Policy

This policy explains how Edwyz Technologies Private Limited (“Edwyz”, “we”) handles personal data in Edwyz WA at wa.edwyz.com. Edwyz WAlets a business (a “customer”) connect its own WhatsApp number to the WhatsApp Business Platform and manage conversations, message templates and broadcasts.

1. Our two roles

• For account data (the people who sign up and use the workspace), we decide how and why the data is used, so we are the controller (data fiduciary).
• For message data(the messages and contact details a customer handles through the platform), the customer decides the purposes and we process the data on the customer's behalf, so we act as a processor. If you received a message from a business and have a question about it, please contact that business first.

2. Data we process

• Account data: name, work email, company, role, and a hashed password.
• Connection data: WhatsApp Business Account and phone number identifiers, display name, quality rating and messaging limit, and the access tokens Meta issues to us (stored encrypted).
• Message data processed for customers: message content and media, contact phone numbers and profile names, timestamps, delivery and read status, and the opt-in records the customer keeps.
• Technical data: IP address, browser and device information, and security logs.
• Billing data, when paid plans are introduced.

3. How we use data

To provide and secure the service, connect and operate WhatsApp numbers, deliver and display messages, give support, meet legal obligations, and prevent abuse. We do not sell personal data.

4. Legal basis

We process personal data under India's Digital Personal Data Protection Act, 2023, on the basis of consent or another lawful use the Act allows. Where the EU or UK GDPR applies, we rely on contract, legitimate interests, consent or legal obligation, as relevant.

5. Who we share data with

• Meta Platforms, which operates the WhatsApp Business Platform. Meta handles data under its own terms and privacy policy.
• Infrastructure and hosting providers, payment providers when billing starts, and professional advisers, under confidentiality terms.
• Authorities, where the law requires it.

We will give you the list of providers we use on request.

6. Messaging rules

Customers must have a valid opt-in before sending marketing messages and must follow the WhatsApp Business Messaging Policy. People can stop marketing messages at any time by replying STOP, and the platform records and honours that request.

7. Retention

We keep personal data only as long as needed for the purposes above or as the customer instructs, then delete or anonymise it, unless the law requires us to keep it.

8. Security

We use measures such as HTTPS, restricted access, encrypted storage of access tokens and verification of the signature on every webhook from Meta. No system is perfectly secure, and we will tell affected parties about a breach as the law requires.

9. International transfers

Data may be processed in India and in other countries where Meta and our providers operate. We take steps to keep it protected wherever it is processed.

10. Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or raise a grievance. Write to hello@edwyz.com. For deletion, see our data deletion page. You can also complain to your data protection authority.

11. Children

Edwyz WA is for businesses and is not directed at anyone under 18.

12. Changes

We will post changes on this page and update the effective date above.

13. Contact

Edwyz Technologies Private Limited, #2, Type 3, Parimahal, Shimla-9 (H.P.), India. Email: hello@edwyz.com.