Privacy Policy

Who is who

A business that signs up (the "account owner") decides which of its customers to contact and what to send. For its customers' data we act on the business's behalf. For account data we decide how it is used.

If you got an email or WhatsApp message from a business through Wazigo, that business has your details. You can ask the business, or us, to stop messages or delete your data.

What we hold

• Account data: the names, emails, phone numbers and passwords (stored hashed) of the people who use the app, and the business's name, address, locations and settings.
• Customer data that a business adds: its customers' names, phone numbers and emails, and notes it adds.
• Consent records: when and how each customer agreed to be contacted, and opt-outs (email unsubscribes, bounces and complaints, and customers a business marks as not to be contacted on WhatsApp).
• Messages: the content of the emails sent through Wazigo and their delivery status. For WhatsApp messages a business sends from its own WhatsApp, we keep the message we prepared and whether it was opened or marked as sent by the business's staff; we cannot see whether it was delivered.
• Review page activity: whether a link was opened, the rating or private feedback a customer leaves, and which review site they chose.
• Card pages: messages and contact details that visitors send to a business through its card page.
• Google Business Profile data, when a business connects it: the profile's name and locations, its Google reviews (reviewer name, rating, text, date) and the replies to them.
• Facebook data, when a business connects a Facebook Page: the Page name and ID, the Page's reviews and recommendations (reviewer name, recommends or not, text, date), and the replies we post for the business. We store the Page access tokens Facebook gives us encrypted, and use them only to read those reviews and post the business's replies.
• Basic technical data: IP address, browser type and error reports, used to keep the service working and secure.
• Website visits: on wazigo.io we keep a first-party cookie with how you found us (for example the ad, link or site you came from), and, with your consent, ad cookies set by Meta, Google, LinkedIn, X and TikTok (see "Cookies and ads on our website" below).

If we add posting to Instagram later, we will only post what the account owner chooses to post.

Why we use it

• Account data: to run the account, sign people in, send service emails and give support.
• Customer data, consent records and messages: to send or prepare the review requests and follow-ups the business sets up, to respect opt-outs and quiet hours (in Indian time), and to show the business who opened a link.
• Review page activity and card pages: to show the business its feedback, messages and stats.
• Google and Facebook data: to show the business its reviews in one place, alert it to new ones, and post the replies it writes or approves.
• Technical data: to find and fix errors and stop abuse.

We do not sell personal information. We never use a business's customer data, review pages, card pages or anything inside the app for advertising. The only advertising use is on our own website and sign-up, described in "Cookies and ads on our website".

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Data from Facebook is used only for the purposes above and is shown only to the business that connected the Page.

Who processes it for us

We use these service providers. Each gets only what it needs for its job.

• Hosting: the servers that run the app and store the database.
• An email delivery provider: sends email and reports bounces and complaints.
• An AI provider: writes suggested replies to reviews. It receives the review text and the business name, and only when someone asks for a suggestion. It also answers Ask questions from a business's team, in the app or on WhatsApp, and receives the question and the business data needed to answer it.
• WhatsApp (Meta): carries the messages when a business's verified staff use Ask Wazi on WhatsApp, once it is switched on for that business. We keep no chat history for it: the short-lived state for a reply or a pending confirmation expires after 10 minutes, and we keep records of which number asked, when, and what was changed. Chats are not used to train AI models.
• Sentry: error reports, so we can fix bugs.
• A payment provider (Razorpay): will process payments once billing starts. We will not store full card numbers.
• Google and Meta (Facebook): we read and post through their official APIs when a business connects its accounts.
• Meta, Google, LinkedIn, X and TikTok: ad measurement on our website and sign-up, only with consent (see "Cookies and ads on our website").

If an account owner connects an AI assistant (such as Claude or ChatGPT) to their account, that assistant can read the account's data the owner allows, under the assistant provider's own terms. The owner can remove that access at any time.

We may share data if the law requires it, or to protect people or the service from fraud or abuse.

Cookies and ads on our website

On wazigo.io and on the app's sign-up, login and payment-success pages we can use ad tags from these companies, to see which of our ads bring sign-ups and to show our ads to people likely to need us:

• Meta (Facebook and Instagram): Meta Pixel and Conversions API.
• Google: Google Analytics (GA4) and Google Ads.
• LinkedIn: LinkedIn Insight Tag and Conversions API.
• X (Twitter): X Pixel.
• TikTok: TikTok Pixel and Events API.

What they get: the pages you visit on our website, your browser and device, your IP address, their own cookie or click identifiers (for example an ad click id from the link you followed), and, when you sign up or start paying, that event and its value. When a new account signs up with ads consent, we also send these companies the account email and phone number hashed (scrambled with SHA-256, not readable as text) so they can match the sign-up to their ad. They act under their own privacy policies.

No ad tags run on the review pages and card pages we host for businesses, or inside the logged-in app, and a business's customer data is never sent to them.

Your choice: a banner asks first, and nothing loads until you choose Accept. If your browser sends Global Privacy Control, the tags stay off. You can change your choice at any time with "Cookie settings" at the bottom of every page on our website. An account owner can also turn ads tracking off in the app's settings.

You can also limit ads through each company: Meta ad preferences, Google My Ad Center, LinkedIn advertising settings, and the ad settings described in the X privacy policy and the TikTok privacy policy.

Our own source cookie (how you found us) is first-party measurement and stays either way; it is not shared with these companies.

How long we keep it

• Account and customer data: while the account is open. When an account is deleted, its business data is deleted.
• Facebook data: until the business disconnects Facebook or removes the Wazigo app in its Facebook settings. Then we delete the tokens and remove the Facebook reviews.
• Google data: until the business disconnects Google or deletes its account. Then we delete the tokens and remove the Google reviews.
• Opt-out records: kept as long as the account is open, so someone who opted out is not contacted again.
• Backups: deleted data can stay in backups until those backups are replaced.

Security

Data travels over HTTPS. Passwords are stored hashed, and Facebook and Google access tokens are stored encrypted. Only the people a business adds to its account can see its data, and our staff access it only to run and support the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Your choices and rights

• WhatsApp: tell the business you don't want WhatsApp messages, or email us; once you are marked as opted out, Wazigo stops preparing WhatsApp review requests for you.
• Email: use the unsubscribe link in any email.
• Access, correction and deletion: ask the business that contacted you, or email us at support@wazigo.io. We will answer within the time the law allows.
• Your rights under India's Digital Personal Data Protection Act, 2023: you can ask for a summary of the personal data we hold about you and who we shared it with, have it corrected, completed or erased, withdraw your consent at any time, and name someone to use these rights for you. Withdrawing consent stops future use; it does not undo what was done before.
• Complaints (grievance redressal): email support@wazigo.io and we will answer within the time the law allows. If you are not satisfied, you may complain to the Data Protection Board of India.

To delete data, including Facebook data, see Data Deletion.

Children

Wazigo is for businesses and is not meant for children (under 18). We do not knowingly collect their data. If you think a child's data is here, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top. If a change is significant, we will tell account owners by email or in the app before it takes effect.

Contact

Wazigo is run by Saman Technosys Pvt Ltd. Questions or requests: support@wazigo.io.