Privacy Policy

This Privacy Policy explains how Amit Digital Points ("WapDesk", "we", "us") collects, uses, shares and protects information when you visit https://prom.marketing, create a WapDesk account, connect a WhatsApp Business or Instagram account, or otherwise use our services. WapDesk is a software-as-a-service product for business messaging, CRM, marketing campaigns, a shared team inbox and automation.

1. Our role

For your account, billing and website-usage information, we decide how the information is used and act as the data fiduciary (controller). For the messages, contacts and customer conversations that a business processes through WapDesk, the business customer decides what is processed and why; we process that data on the customer's behalf and on its instructions (as a data processor).

2. Information we collect

Account and workspace information

• Name, email address, mobile number, password (stored only as a one-way hash) and language preference.
• If you sign in with Google or Facebook: your name, email address and the account identifier that provider shares with us. We do not receive your Google or Facebook password.
• Business name, workspace settings, team members you invite and their roles.
• Security information such as two-factor authentication settings and login activity.

WhatsApp Business information

• WhatsApp Business Account ID, phone-number ID, display name and the access token issued by Meta when you connect through Embedded Signup. Access tokens are stored encrypted.
• Contacts you upload or that message you (name, phone number, tags, custom fields and opt-in/opt-out records).
• Message content, media, message templates, delivery and read statuses, timestamps, campaigns and automation rules.

Instagram information (only if you enable Instagram Auto-DM)

• Your Instagram professional account ID, username and access token, granted through Instagram login with the permissions you approve.
• Comments on your posts and direct messages exchanged with your account, and the public profile identifiers of the people involved, to the extent needed to run the automations you configure.

Billing information

• Plan, billing interval, invoices, GST details you provide, and payment and subscription status.
• Payments are processed by Razorpay. Card, UPI and bank details are entered on Razorpay's checkout and are not stored on our servers; we receive only references such as payment and subscription IDs.

Technical information

• IP address, browser and device type, pages used, error reports and security logs. Phone numbers in our logs are masked to their last four digits.
• Essential cookies for signing in, security (CSRF protection) and remembering your language and theme. We do not use third-party advertising cookies.

3. How we use information

• To create and secure your account and workspace, and to let your team work together.
• To connect your WhatsApp and Instagram accounts and send, receive and organise messages as you instruct.
• To run campaigns, automations and reports you set up, including cost estimates before sending.
• To process subscriptions, issue GST invoices and handle renewals, cancellations and refunds.
• To provide support, fix errors, keep the service reliable and improve features.
• To detect and prevent fraud, spam, abuse and breaches of our Terms or platform policies.
• To comply with law, including tax, accounting and lawful requests from authorities.

We do not sell personal information, and we do not use your customers' contacts or messages to market our own services to them.

4. Meta, WhatsApp and Instagram data

WapDesk is an independent software provider and is not owned or operated by Meta Platforms, Inc. Data we receive from Meta's APIs (WhatsApp Cloud API, Instagram API) is used only to provide the features you have enabled for your own business, and is handled in line with the Meta Platform Terms and Developer Policies. We do not use Platform Data for advertising, profiling or to build data sets for sale, and we do not transfer it to data brokers.

You can remove WapDesk's access at any time by disconnecting the account under Settings in WapDesk, or from your Meta Business settings / Instagram "Apps and websites" settings. To delete data we already hold, follow our Data Deletion Instructions.

5. AI-assisted features

Where you switch on AI-assisted replies or classification, the relevant message, recent conversation context and the knowledge you provide (for example FAQs) are sent to an AI service provider to generate a suggestion or reply. These features are optional and can be turned off. We will list the AI providers we use in the table in section 6 before the feature is made available to your workspace, and we will only use providers that do not train their models on your data.

6. Who we share information with

We share information only as needed to run the service:

We also share information with members of your own workspace according to their role, and with authorities, courts or advisers where the law requires it or where it is necessary to protect the rights, safety or property of WapDesk, our customers or others. If WapDesk is involved in a merger or sale, information may transfer to the successor under this policy.

7. Where data is stored

Some of our providers may store or process data outside India. Where that happens we rely on providers that apply appropriate security safeguards, and we comply with any transfer restrictions notified under Indian law.

8. How long we keep information

• Account and workspace data: while your account is active.
• After you close your workspace or ask us to delete it: removed or anonymised within 30 days from live systems and within 90 days from backups.
• Invoices and payment records: for the period required by Indian tax and accounting laws, even after the account is deleted.
• Security and audit logs: up to 180 days, unless needed to investigate an incident.

9. Security

We use HTTPS encryption in transit, encryption at rest for access tokens and secrets, hashed passwords, optional two-factor authentication, role-based access and strict separation of each workspace's data. No system is completely secure; if a breach affects your personal data we will notify you and the authorities as required by law.

10. Your rights and choices

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how it is used;
• correct, update or complete your data (most of it is editable in your profile and settings);
• ask us to delete your data, or withdraw consent where processing is based on consent;
• disconnect WhatsApp or Instagram at any time;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us, and then with the Data Protection Board of India.

Email [privacy@your-domain]. We may need to verify your identity first and will respond within 30 days. If you are a customer of a business that uses WapDesk, please contact that business first; we will assist it with your request.

11. Responsibilities of businesses using WapDesk

Businesses using WapDesk must have a lawful basis, and any required opt-in, before uploading contacts or messaging people, must honour opt-outs, and must follow WhatsApp Business and Instagram policies. See our Terms & Conditions.

12. Children

WapDesk is a business tool for people aged 18 or over. We do not knowingly create accounts for children. Businesses must not use WapDesk to process children's data unlawfully.

13. Changes to this policy

We may update this policy. The effective date above shows the latest version; for material changes we will also notify account owners by email or in the app before they take effect.

14. Contact and Grievance Officer

Grievance Officer: Amit Kumar Gupta