Privacy Policy
Last updated: 30 July 2026
VP Informatics ("VP Informatics", "we", "us", "our") operates the WhatsApp CRM - VPI platform available at wa.vpinformatics.in and its associated API at waapi.vpinformatics.in (together, the "Service"). This Privacy Policy explains what personal information we collect through the Service, how we use and share it, how long we keep it, and the choices and rights you have. By using the Service you agree to the collection and use of information in accordance with this policy.
1. Who This Policy Covers
This policy applies to (a) business customers and their team members who register an account to use the Service ("Customers"), and (b) end users whose phone numbers a Customer contacts through the Service via WhatsApp ("Contacts"). Section 2 and 3 identify what we collect and use for each group.
2. Information We Collect
From Customers and their team members:
- Account information: name, email address, phone number, and password (stored as a salted hash — we never store or can view your plaintext password).
- Organization data: business name, industry, and other details you provide while setting up your workspace.
- Google account data: if you sign in with Google, we receive your name, email address, and profile photo from Google OAuth. We do not receive or store your Google password.
- Billing data: wallet transactions and invoices. Card and payment details are collected and processed directly by our payment processor (e.g. Razorpay) — we do not store full card numbers.
- Usage and device data: IP address, browser type, device identifiers, and log/analytics data collected automatically when you use the Service.
From Contacts (via a Customer's use of the Service):
- WhatsApp phone numbers, profile names, and any information Contacts submit through forms, chat, or automations configured by the Customer.
- Message content and metadata (timestamps, delivery/read status, message templates used) exchanged between a Customer and its Contacts via the WhatsApp Business Platform.
Contacts interact with the Service as end users of our Customers, not as our direct customers. If you are a Contact and have questions about how your data is used, please contact the business that messaged you; you may also contact us using the details in Section 10 and we will direct your request accordingly.
3. How We Use Information
- To provide, operate, and maintain the Service, including sending, receiving, and storing WhatsApp messages, automations, campaigns, and forms on behalf of Customers.
- To create and authenticate accounts, including via Google Sign-In, and to keep the Service secure (e.g. detecting abuse or unauthorized access).
- To process payments, maintain wallet balances, and generate invoices.
- To send administrative communications: account notices, security alerts, and service updates.
- To provide customer support and respond to inquiries.
- To monitor, maintain, and improve the performance and reliability of the Service, and to develop new features.
- To comply with legal obligations and enforce our Terms of Service.
4. Legal Basis for Processing
Where applicable data protection law requires a legal basis, we rely on: performance of a contract with you (to provide the Service you signed up for), our legitimate interests (to secure and improve the Service), your consent (e.g. Google Sign-In, marketing communications, where required), and compliance with legal obligations.
5. Cookies and Similar Technologies
We use strictly necessary cookies and browser local storage to keep you signed in and to remember your session and preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling them may prevent you from signing in.
6. Sharing of Information
We do not sell or rent personal information. We share information only in the following circumstances:
- Meta Platforms, Inc. (WhatsApp): message content and contact numbers are transmitted through the WhatsApp Business Platform to deliver messaging functionality, subject to Meta's own privacy policy.
- Payment processors (e.g. Razorpay), to process billing and payouts.
- Infrastructure and service providers (e.g. cloud hosting, email delivery), who process data on our behalf under confidentiality and data-processing obligations.
- Legal and safety reasons: when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of VP Informatics, our Customers, or others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality arrangements.
7. International Data Transfers
The Service is operated from India, and our sub-processors (including Meta and our hosting providers) may process data in other countries. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection consistent with applicable law.
8. Data Retention
We retain account, organization, and message data for as long as your account is active, or as needed to provide the Service, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. When data is no longer needed for these purposes, we delete or anonymize it. You may request earlier deletion as described in Section 9.
9. Your Rights and Choices
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, where it applies), you may:
- Access, correct, or update your personal information from within your account settings.
- Request a copy of, or deletion of, your personal information by contacting us at the address in Section 10.
- Withdraw consent for Google Sign-In at any time from your Google Account permissions, and disconnect it from your account settings within the Service.
- Opt out of non-essential email communications using the unsubscribe link in those emails.
- Lodge a grievance with our Grievance Officer (Section 11) or, where applicable, with your local data protection authority.
We will respond to verifiable requests within a reasonable time and in accordance with applicable law. Some information may be retained where required for legal, security, or legitimate business purposes even after a deletion request.
10. Children's Privacy
The Service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Security
We use reasonable technical and organizational measures — including encryption in transit, access controls, and password hashing — designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, by additional notice (e.g. email or an in-app notice).
13. Grievance Officer / Contact Us
If you have questions, requests, or complaints about this Privacy Policy or how your personal information is handled, contact us at:
VP Informatics
Email: support@vpinformatics.in
Website: www.vpinformatics.in