Privacy Policy
How we collect, use, and protect personal data — transparently.
Effective: 18 April 2026
Summary
This policy describes how Inwizards Software Technology, operating the Go4whatsup product ("Go4whatsup", "we", "us"), collects, uses, and protects personal data when you use our website, platform, and WhatsApp Business API services.
Data controller / Data fiduciary by region. If you are based in India, your contracting entity and data fiduciary is Inwizards Software Technology Pvt. Ltd. (Indore, India). If you are based in the UAE, the rest of the GCC, Europe, or the UK, your contracting entity and data controller is Inwizards Software Technologies L.L.C (Dubai, UAE). Both entities apply identical privacy and security controls and are bound by the same Data Processing Agreement.
We are a Meta Business Partner. We process WhatsApp data strictly per Meta's WhatsApp Business Messaging Policy and applicable data-protection laws (India's DPDP Act 2023, UAE PDPL, EU GDPR, and UK GDPR, as applicable).
Data we collect
Account & billing data
Name, work email, company name, phone number, role, billing address, tax IDs, and payment details (processed by our payment partners — we do not store card numbers).
Platform usage data
Logins, IP addresses, device + browser metadata, pages visited, features used, API call metadata (endpoint, response code, latency — not message contents), and support tickets.
Customer data (data you send us)
Messages, media, contact phone numbers, conversation metadata, custom fields, webhooks, and any data you push via our API or integrations. You are the controller of this data; we are the processor.
How we use it
- Operate the Go4whatsup platform and deliver messages via the WhatsApp Business API
- Bill, invoice, and collect payment
- Respond to support requests and incident tickets
- Improve reliability, security, and performance (aggregated, anonymised)
- Meet legal, tax, and regulatory obligations in India and the UAE
- Prevent abuse, fraud, and violations of our Acceptable Use Policy
We do not sell personal data. We do not use your customer data to train any AI/ML model that is not scoped to your own workspace.
WhatsApp Business API specifics
When you send messages via Go4whatsup, Meta's WhatsApp Business Solution processes them under Meta's privacy terms. Meta may retain message content for up to 30 days per their policy; Go4whatsup retains message metadata (sender, timestamp, template used, delivery status) per your plan's retention settings.
You are responsible for obtaining valid opt-in from your customers before sending WhatsApp messages, per WhatsApp Business Messaging Policy. We provide opt-in collection tools; compliance is the customer's obligation.
Shopify Integration ("Go4whatsup Integration" app)
Our Shopify app connects a merchant's Shopify store to Go4whatsup to send order-related WhatsApp notifications (order confirmation, payment, shipping/delivery, cancellation, refund, and abandoned-cart reminders). To do this, the app accesses order data and the customer's name and phone number via Shopify's APIs and webhooks (Shopify "Protected Customer Data"), using it solely to compose and deliver the notifications the merchant has configured.
This data is encrypted at rest (AES-256-GCM) and in transit (TLS). Abandoned-cart records containing a customer's name/phone are retained only as needed to send a reminder and are automatically purged on a rolling retention window.
We honour Shopify's mandatory privacy requests — customers/data_request, customers/redact, and shop/redact — deleting the corresponding data on a redaction request, and we erase a store's data when the app is uninstalled. Merchants are the data controller for their customers' data; we act as processor.
Full technical disclosure — including sub-processors, retention windows, and Shopify Protected Customer Data handling procedures — is available at /integrations/shopify/data-handling/. For a Data Processing Agreement (DPA) covering the Shopify integration, contact [email protected].
Retention
Account data: for as long as your account is active, plus 90 days. Billing records: 7 years as required by Indian tax law. Message metadata: per your plan (default: 180 days; Enterprise: configurable up to 3 years). Message content: per Meta's policy (typically up to 30 days).
On termination, we delete or return your customer data within 60 days unless longer retention is required by law.
Security
We maintain ISO 27001-aligned controls: encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access, 2FA for all employee accounts, SSO/SAML for Enterprise customers, annual third-party penetration testing, and automated vulnerability scanning.
In the event of a data breach affecting personal data, we notify affected customers without undue delay, and in any case within 72 hours of confirmation where required by law.
Your rights (DPDP / GDPR)
You have the right to access, correct, export, or delete your personal data, to withdraw consent, and to lodge a complaint with your data-protection authority (India's Data Protection Board; EU supervisory authorities). Write to [email protected] with "DPDP request" in the subject — we respond within 30 days.
Children
Go4whatsup is a B2B product. We do not knowingly collect personal data from anyone under 18. If you believe a minor's data has been submitted, write to [email protected] and we will remove it.
Changes
We may update this policy to reflect product, legal, or regulatory changes. Material changes are notified via email and in-product banner at least 14 days before taking effect.
Contact
India — Inwizards Software Technology Pvt. Ltd.
Floor 6, Airen Heights, Behind Pakiza Mall, A.B Road, Indore 452010, India
Email: [email protected]
Phone: +91 96675 84436
UAE / GCC / Europe — Inwizards Software Technologies L.L.C
Office 401, Al Mankhool, Mankhool, Dubai, UAE
Email: [email protected]
Phone: +971 54 508 5552
Questions?
Write to [email protected] — we answer within 1 business day. For urgent data-protection requests, include "DPDP request" in the subject line.