Privacy Policy

This Privacy Policy describes how WA Bot Platform (“we”, “us”, “our”) collects, uses, and protects your personal data. We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA 2023).

1. Data We Collect

Account Data

• Email address
• Full name
• Hashed password (we never store passwords in plain text)
• Account creation timestamp
• Consent timestamp (when you agreed to our Terms)
• Login history

Bot Configuration Data

• Bot name and status
• Character/personality prompt (text you write)
• Knowledge base content (text you write)
• Model preference (e.g., Standard, Advanced, Premium)
• Rate limits and fallback messages you configure

Chat and Conversation Data

We store the full content of messages sent through your bot, including:

• Incoming messages from WhatsApp contacts
• Outgoing messages generated by the bot
• Contact phone numbers of people who message your bot
• Contact names as shown in WhatsApp (notifyName)
• Lead categories (auto-classified or manually set)
• Notes you add about contacts
• Message timestamps
• Token usage and cost per message

This data is stored so we can display chat logs, analytics, and lead information in your dashboard. We do not share message content with third parties except the AI providers listed below.

Billing and Usage Data

• Credit balance and transaction history
• Per-message token usage and cost
• Daily activity statistics

2. How We Use Your Data

• To provide the Service: Route incoming WhatsApp messages to AI models, generate responses, track credit usage
• Analytics: Display usage statistics, activity charts, and cost breakdowns in your dashboard
• Lead management: Auto-classify contacts based on conversation content to help you identify sales opportunities
• Fraud and abuse prevention: Detect and block spam, abuse, and rate-limit violations
• Billing: Deduct credits accurately for each API call
• Customer support: Respond to your queries and troubleshoot issues
• Service improvement: Analyze aggregate usage patterns to improve the Service (no personal data used)

3. Third-Party Services We Share Data With

To provide the Service, we must share certain data with these third parties:

AI Processing Providers

Conversation content is sent to third-party AI providers for processing. These providers process your data solely to generate bot responses and do not train on your data by default.

Our AI providers' privacy policies: Anthropic

WhatsApp / Meta

Messages pass through WhatsApp's servers as part of normal WhatsApp functionality. Meta's privacy policy applies.

WhatsApp Privacy Policy: whatsapp.com/privacy

4. Data Retention

• Account data: Retained while your account is active, then deleted 30 days after account closure
• Chat and contact data: Retained until you delete the associated bot or your account
• Billing records: Retained for 7 years as required by Indian tax law (even after account deletion)
• Logs and backups: Retained for up to 90 days for troubleshooting and security

5. Your Rights Under DPDPA 2023

As a data principal (user) under India's DPDPA 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Correct any inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (except where retention is legally required)
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Grievance Redressal: File a complaint with our Data Protection Officer
• Right to Nominate: Nominate a representative to exercise your rights in case of death or incapacity

How to Request Data Access or Deletion

Email us at privacy@dressingschool.com with:

• Your registered email address
• The type of request (access, correction, deletion, consent withdrawal)
• Any additional details required to verify your identity

We will acknowledge your request within 72 hours and complete it within 30 days as required by DPDPA 2023. Some data (e.g., billing records) may be retained longer as required by law.

6. Data Security

We implement industry-standard security measures:

• Passwords hashed with bcrypt (never stored in plain text)
• Database access restricted to authorized personnel
• HTTPS encryption for all API traffic
• Rate limiting and abuse prevention
• Regular security audits and updates

However, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

7. Cookies and Tracking

We use only essential cookies for session authentication (keeping you logged in). We do not use tracking cookies, advertising cookies, or third-party analytics tools that track individual users.

8. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

9. International Data Transfers

Data may be transferred to and processed in countries other than India (specifically, for the AI providers listed in Section 3). We ensure such transfers comply with DPDPA 2023 requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email at least 30 days before taking effect. We encourage you to review this policy periodically.

11. Data Protection Officer

Our Data Protection Officer can be contacted at: dpo@dressingschool.com

12. Contact Us

For any privacy-related inquiries or to exercise your rights:

• Email: privacy@dressingschool.com
• For general support: support@dressingschool.com