Privacy policy

1. Two kinds of data

• Account data — information about you and your team that we use to run your account. For this we are the data fiduciary.
• Customer data — the contacts, conversations and files you store in Whatspert CRM about your own customers. For this your business is the data fiduciary and we process it only on your instructions to provide the Service.

2. What we collect

• Name, email, password (stored hashed), profile photo and role of each user.
• Business name, plan, billing status and Razorpay subscription and payment references. Card, UPI and bank details are handled by Razorpay; we do not store them.
• WhatsApp Business account identifiers and access tokens you connect (tokens are encrypted).
• Technical data such as IP address, browser and usage logs, used for security and troubleshooting.
• Messages you send us through the contact page, email or WhatsApp.

3. How we use it

• To provide, secure and support the Service and your account.
• To process payments, send invoices and service notices.
• To prevent abuse and comply with legal obligations.
• To improve the Service using aggregated, non-identifying statistics.

We do not sell personal data or use customer data for advertising.

4. Who we share it with

Only with service providers needed to run the Service, under contracts that protect the data:

• Supabase — database, authentication and file storage.
• Our hosting provider — running the application.
• Meta — sending and receiving WhatsApp messages you choose to send.
• Razorpay — payments and subscriptions.
• DigiExplorer Real Expert CRM — only if you connect it; the leads, deal updates and messages you choose to sync.
• OpenAI or Anthropic — only if you switch on the AI assistant with your own API key; relevant conversation text is sent to the provider you choose.

We may also disclose data when required by law or to protect rights and safety.

Data from Facebook and WhatsApp. When you connect WhatsApp with the “Connect with Facebook” button, Meta shares your WhatsApp Business Account id, phone number details and an access token with us. We use them only to send and receive messages, manage message templates and show number health for your account, and never for advertising. You can remove this access anytime; see Data deletion.

5. Where and how long

Data may be stored and processed on servers in India or other countries where our providers operate, with appropriate safeguards. We keep account data for as long as your account is open and as needed for legal, tax and accounting obligations. After an account is closed, customer data is deleted within 30 days unless you ask us to export it first, or the law requires us to keep it.

6. Security

We use encryption in transit, encrypted storage of WhatsApp and AI keys, account-level access controls and role-based permissions. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as required by law.

7. Your rights

You can access, correct or delete your account data from the app or by writing to us, withdraw consent where processing is based on consent, and nominate another person to exercise your rights. Step-by-step deletion instructions are on our Data deletionpage. If you are a contact of one of our customers, please contact that business first; we will help them respond.

8. Cookies

We use essential cookies to keep you signed in and remember preferences such as language. We do not use advertising cookies in the app.

9. Grievance officer

For privacy questions or complaints, contact our grievance officer at support@whatspertcrm.tech. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.

10. Changes

We will post updates here and notify account owners of material changes.

11. Contact

Digi Explorer Branding Solution (proprietor: Himanshu Himraj)
1/163, Vibhav Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010, India
Email: support@whatspertcrm.tech
GSTIN: 09ALRPH8178A1ZR