Privacy Policy
Last Updated: September 2026 · Effective for all BizWaz users and enterprise clients
At BizWaz, we are committed to protecting the privacy of your business and your customers. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access or use our WhatsApp Automation & CRM platform.
By accessing or using BizWaz, you agree to the collection and use of information in accordance with this policy. For businesses operating in India, this policy is strictly structured to comply with the Digital Personal Data Protection (DPDP) Act, 2023 and Meta Platform Developer Policies.
1. Data We Collect
We collect information that you directly provide to us, as well as information generated automatically during your use of our platform:
- Account & Profile Information: Full name, verified business name, corporate email address, phone number, GSTIN (for Indian tax invoicing), and workspace credentials when you register.
- WhatsApp & Messaging Data: Customer phone numbers (E.164 format), incoming conversation histories, message timestamps, delivery statuses, and pre-approved template assets processed strictly via the Official Meta WhatsApp Business Cloud API (WABA).
- AI Processing & Prompt Data: Inbound user queries and product inquiries analyzed by our Agentic AI LLM Gateway for instant lead qualification, semantic search, and human agent escalation.
- Payment & Billing Metadata: Razorpay / Stripe transaction reference IDs, subscription tier tokens, and invoice records. BizWaz never stores sensitive card numbers, CVVs, or UPI PINs directly on its infrastructure.
2. How We Use Your Data
We process personal data exclusively for legitimate operational and business purposes:
- To operate, maintain, and provide the multi-agent shared inbox, broadcast dispatcher, and contact management system.
- To execute real-time AI intent scoring, product recommendations, and automated FAQ responses.
- To verify in-chat UPI checkout links and deliver automated GST tax invoices.
- To uphold Meta Cloud API compliance, anti-spam protections, and quality tier requirements.
- To diagnose technical errors, optimize database indexing, and prevent fraud or platform abuse.
3. Official Meta Cloud API & AI Data Disclosures
Strict Meta Cloud API Exclusivity: BizWaz connects to WhatsApp exclusively via the official Meta WhatsApp Business Cloud API (WABA). We do not use unauthorized scraping tools, Baileys, or automated browser extensions. Your messaging traffic flows through secure Meta data pipelines governed by Meta Platform Terms.
Zero Foundation Model Training: Messages processed by our LLM Gateway are never utilized to train public foundation models. Conversations are scoped strictly to your tenant workspace and encrypted in transit and at rest.
4. Sub-processors & Third-Party Sharing
We do not sell, rent, or monetize your customer database under any circumstances. We share data solely with trusted enterprise sub-processors required to deliver our services:
- Meta Platforms, Inc.: Official WhatsApp Cloud API provider.
- Amazon Web Services (AWS) & Cloudflare: Cloud compute, encrypted databases, and CDN edge delivery.
- Razorpay & Stripe: PCI-DSS certified payment link and webhook infrastructure.
- Enterprise LLM Providers: Anthropic, OpenAI, and Google Cloud Vertex AI (accessed via private enterprise zero-retention APIs).
5. Data Retention & DPDP Rights
We retain active workspace data and conversation logs as long as your subscription is maintained. Upon account cancellation, customers have a thirty (30) day grace period to download full CSV contact and conversation archives, after which all customer database records are permanently deleted.
Under the DPDP Act 2023, Indian users and business owners have the right to request access, correction, and permanent erasure of personal data.