Privacy Policy

1. Introduction

Welcome to WaBox, a product of TechQuay BI Pvt Ltd ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp Business API management platform and related services (collectively, the "Service").

By accessing or using WaBox, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Register for an account (name, email address, phone number, company information)
• Configure your WhatsApp Business API credentials (API keys, phone number IDs, access tokens)
• Create and manage message templates, flows, and webhooks
• Upload media files for messaging purposes
• Integrate Google Sheets or other third-party services
• Contact our support team or communicate with us
• Subscribe to our newsletters or marketing communications
• Participate in surveys, contests, or promotional activities

2.2 Information Collected Automatically

When you access and use our Service, we may automatically collect certain information, including:

• Usage Data: Information about how you interact with our Service, including features used, messages sent, API calls made, and time spent on the platform
• Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information
• Log Data: IP address, access times, pages viewed, page load times, server errors, and referring website addresses
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to track activity on our Service and store certain information

2.3 WhatsApp Message Data

As a WhatsApp Business API management platform, we process messages sent and received through your WhatsApp Business account. This includes:

• Message content (text, images, videos, documents, audio files)
• Sender and recipient phone numbers
• Message timestamps and delivery status
• Conversation context and metadata

We act as a data processor for this information on your behalf and in accordance with Meta's WhatsApp Business Platform policies.

3. How We Use Your Information

We use the collected information for various purposes, including:

• Service Delivery: To provide, maintain, and improve our Service, including message routing, delivery, and status tracking
• Account Management: To create and manage your account, authenticate your identity, and provide customer support
• Communication: To send you technical notices, updates, security alerts, and administrative messages
• Analytics: To analyze usage patterns, measure the effectiveness of our Service, and develop new features
• Security: To detect, prevent, and address technical issues, fraud, and illegal activities
• Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and property
• Marketing: With your consent, to send promotional materials, newsletters, and information about new features (you can opt-out at any time)
• Personalization: To customize your experience and provide recommendations based on your usage patterns

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We engage third-party companies and individuals to facilitate our Service, including:

• Meta/Facebook: For WhatsApp Business API integration and message delivery
• Google: For authentication (Firebase Auth) and database services (Firestore), as well as Google Sheets integration
• Razorpay: For payment processing (we do not store credit card information)
• Cloud Infrastructure Providers: For hosting and storage services
• Analytics Providers: For usage analytics and service improvement

4.2 Business Transfers

If TechQuay BI Pvt Ltd is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

4.4 Protection of Rights

We may disclose your information when we believe it is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

4.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and security practices
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Service, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period depends on the type of information:

• Account Information: Retained for the duration of your account plus a reasonable period thereafter for legal and business purposes
• Message Data: Retained based on your plan and configuration, typically 90 days for operational purposes unless you delete it earlier
• Usage Logs: Retained for up to 12 months for security and analytics purposes
• Financial Records: Retained for 7 years as required by Indian tax laws

When information is no longer needed, we securely delete or anonymize it.

7. Your Rights and Choices

You have certain rights regarding your personal information:

• Access and Portability: You can access and export your data through your account settings
• Correction: You can update your account information at any time through the dashboard
• Deletion: You can request deletion of your account and associated data by contacting us at we@techquay.in
• Opt-Out: You can unsubscribe from marketing communications by clicking the unsubscribe link in emails or updating your communication preferences
• Cookies: You can control cookies through your browser settings, though this may affect Service functionality
• Object to Processing: You can object to certain processing of your information by contacting us

To exercise these rights, please contact us at we@techquay.in. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at we@techquay.in, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

By using our Service, you consent to the transfer of your information to India and other countries where TechQuay BI Pvt Ltd and its service providers operate.

10. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, and services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at we@techquay.in.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for material changes)
• Displaying a prominent notice on our Service

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 business days.