Privacy Policy
Last updated: 31 August 2026
Effective date: 31 August 2026
WACRM ("we", "us", or "our") operates a WhatsApp CRM and AI Sales Automation platform (the "Service") accessible at https://dev.autsap.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our integration with the Meta WhatsApp Business Platform.
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.
1 Information We Collect
1.1 Account & Business Information
When you register, we collect your name, email address, business name, phone number, and payment information. This is necessary to create and manage your account.
1.2 WhatsApp Conversation Data
Through the Meta WhatsApp Business Platform, we process inbound and outbound WhatsApp messages, media, and message status updates (delivered, read, failed) on behalf of your business. We store conversation history to power your CRM inbox, AI sales agent, and analytics dashboards.
1.3 Lead & Contact Data
We collect and store lead information you or your customers provide: names, phone numbers, email addresses, company names, job titles, cities, and other qualifying data extracted from conversations by our AI agent or entered manually.
1.4 Usage & Technical Data
We automatically collect IP addresses, browser type, operating system, pages visited, timestamps, and session duration for security, debugging, and product improvement purposes.
1.5 Meta Platform Data
If you connect your Meta WhatsApp Business Account via our Embedded Signup flow, we receive and store your WhatsApp Business Account ID (WABA ID), phone number ID, and access tokens to enable messaging on your behalf. We do not access your personal Facebook profile data.
2 How We Use Your Information
- To provide and operate the Service, including the CRM, shared inbox, AI sales agent, and analytics.
- To send and receive WhatsApp messages on behalf of your business using the Meta Cloud API.
- To qualify leads and generate AI-powered responses using integrated LLM providers (OpenAI, Google Gemini, Sarvam AI, or Groq).
- To process payments and manage subscriptions via Razorpay.
- To send transactional emails including handoff notifications and billing receipts.
- To improve the Service through anonymised usage analytics.
- To comply with legal obligations and Meta Platform Terms.
- To detect and prevent fraud, abuse, and security incidents.
3 Third-Party Services & Data Sharing
We share data with third-party providers only as necessary to operate the Service. We do not sell your personal data.
| Provider | Purpose | Data Shared |
|---|---|---|
| Meta (Facebook) | WhatsApp Business Platform — sending/receiving messages | Messages, WABA tokens, phone numbers |
| OpenAI / Google Gemini / Sarvam / Groq | AI lead qualification and response generation | Anonymised chat transcripts |
| Deepgram / Sarvam AI | Voice call speech-to-text and text-to-speech | Call audio streams |
| Razorpay | Payment processing | Name, email, billing amount |
| Supabase / PostgreSQL | Database hosting | All application data |
4 Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data — retained until you delete your account or request deletion.
- WhatsApp conversation history — retained for 2 years from the date of the conversation.
- Billing records — retained for 7 years as required by financial regulations.
- Access logs — retained for 90 days for security monitoring.
5 Your Rights & Data Deletion
You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights:
Email Request
Send a deletion or data access request to support@wacrm.io. We will process your request within 30 days and send a confirmation.
Meta Platform Data Deletion
If you connected your Facebook/Meta account to our platform, you can remove our app from your Facebook Settings → Apps and Websites. This triggers an automated data deletion request to our system via Meta's Data Deletion Callback. You can track your deletion request at: https://dev.autsap.com/meta/deletion-status
6 Cookies & Tracking
We use essential session cookies to keep you logged in and CSRF cookies for security. We do not use third-party advertising cookies. If Google Analytics is enabled by the platform administrator, aggregate usage statistics are collected in a privacy-preserving manner.
7 Data Security
We implement industry-standard security measures including TLS/HTTPS encryption in transit, encrypted storage of API credentials, HMAC-verified webhook signatures, and rate limiting on all public endpoints. No method of transmission over the Internet is 100% secure; however, we strive to use commercially acceptable means to protect your data.
8 Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us immediately.
9 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision.
10 Contact Us
If you have any questions about this Privacy Policy or your data, please contact us at:
WACRM