GDPR & Data Protection Policy

This GDPR & Data Protection Policy ("Policy") explains how WAPZIO, operated by Anantkamal Software Labs, collects, uses, stores, processes, and protects personal data in compliance with:

• General Data Protection Regulation (EU) 2016/679 (GDPR)
• Information Technology Act, 2000 (India)
• IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Processor – Processes data on behalf of controller
• Meta / WhatsApp – Meta Platforms, Inc. & WhatsApp LLC

This Policy applies to all users, customers, partners, and visitors who use WAPZIO services, websites, dashboards, APIs, or integrations.

1. About WAPZIO

Platform: WAPZIO

Company: Anantkamal Software Labs

Role: Meta Tech Provider / WhatsApp Business API Platform

Services: WhatsApp Business API, Chatbots, CRM, Automation, Broadcasts, Payments, Integrations, Analytics

2. Definitions

• Personal Data – Identifiable individual information
• Data Subject – Individual whose data is processed
• Controller – Determines purpose of processing
• Processor – Processes data on behalf of controller
• Meta / WhatsApp – Meta Platforms, Inc. & WhatsApp LLC

3. Lawful Basis for Processing

• User consent
• Contractual necessity
• Legal obligation
• Legitimate business interest
• Meta & WhatsApp compliance

4. Data We Collect

Business & Account Information

• Business name, address, GST details
• Authorized representative details
• Email ID and phone number
• WhatsApp Business Account details

End-User Data

• WhatsApp phone numbers
• User names (if shared)
• Chat messages and media
• Interaction timestamps

Technical Data

• IP address and browser type
• Device and log data
• API usage and error reports

Payment & Billing Data

• Transaction IDs
• Invoices
• Payment gateway references

5. Purpose of Data Processing

• Message delivery and automation
• CRM and conversation management
• Customer support and onboarding
• Billing and invoicing
• Analytics and reporting
• Fraud prevention and security

6. WhatsApp & Meta Compliance

WAPZIO strictly follows:

• WhatsApp Business Messaging Policy
• Meta Platform Terms
• Opt-in and consent rules
• Template approval compliance

7. Data Sharing & Disclosure

• Meta / WhatsApp
• Cloud hosting providers
• Payment gateways
• Legal authorities if required

We do not sell personal data to third parties.

8. International Data Transfers

If data is transferred outside India or the EU:

• Standard contractual clauses
• Encrypted data transfer
• Meta global infrastructure compliance

9. Data Retention

• Account and billing data as per law
• Conversation data as configured
• Limited log retention

Data is deleted or anonymized once no longer required

10. Data Security Measures

We implement reasonable security practices including:

• SSL/TLS encryption
• Role-based access control
• Secure APIs & authentication
• Regular audits
• Firewall & intrusion detection

11. Rights of Data Subjects

Data subjects have the right to:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to withdraw consent

12. Customer Responsibilities

Customers are responsible for:

• Collecting lawful consent from end users
• Providing privacy notices to their users
• Using WAPZIO only for permitted purposes
• Complying with local data protection laws

13. Children’s Data

WAPZIO does not knowingly process data of children under 18 without verified parental consent.

14. Grievance & Contact

Data Protection Officer (DPO):

Anantkamal Software Labs

Email: support@wapzio.com

Website: https://wapzio.com

15. Policy Updates

This Policy may be updated due to regulatory or platform changes. Updated versions will be published on the website.

16. Acceptance

By using WAPZIO, you acknowledge and agree to this GDPR & Data Protection Policy.