Privacy Policy

Effective Date: 15/07/2026

This Privacy Policy explains how Infoway IT Solutions Pvt. Ltd. (“Infoway”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information in connection with our WhatsApp Business messaging platform and related services (the “Platform”). We are committed to protecting the privacy of our business customers and the individuals they communicate with.

About our role. Infoway operates a centralised messaging platform that enables our business customers (“Clients”) to send and receive messages with their own end users (“End Users”) over the WhatsApp Business Platform provided by Meta. For messages that flow through the Platform on behalf of a Client, that Client is the data controller and Infoway acts as a data processor / intermediary, handling data on the Client’s instructions. For information we collect directly about our Clients, Infoway is the controller.

1. Information We Collect

1.1 Information about our Clients

  • Business identification details such as company name, registered address, and business registration information.
  • Contact details of Client representatives, including name, email address, and phone number.
  • Account and authentication data, including API credentials and access tokens issued to the Client.
  • WhatsApp Business Account identifiers, phone number identifiers, and message template information associated with the Client.
  • Billing and transactional records relating to the Client’s use of the Platform.

1.2 Information processed on behalf of Clients

When a Client uses the Platform to communicate with its End Users, we process the following on the Client’s behalf:

  • End User phone numbers.
  • Message content and any media (such as documents, images, or files) exchanged between the Client and its End Users.
  • Message metadata, including timestamps and delivery, sent, read, and failure statuses.

Infoway does not use End User data for its own purposes and processes it only to deliver, route, and report on messages as instructed by the relevant Client, and as required to operate the Platform.

1.3 Technical and log information

  • Server logs, IP addresses, request metadata, and diagnostic information generated when the Platform is used.
  • Error and performance data used to maintain the reliability and security of the Platform.

2. How We Use Your Information

  • To provide, operate, and maintain the Platform and route messages between Clients and their End Users.
  • To authenticate Clients and secure access to the Platform.
  • To generate delivery reports, usage records, and analytics for Clients.
  • To provide customer support and respond to enquiries.
  • To monitor, troubleshoot, and improve the reliability, performance, and security of the Platform.
  • To comply with applicable laws, regulations, and the terms of the WhatsApp Business Platform.
  • To manage billing and account administration.

3. Legal Basis and Consent

Where required by law, our Clients are responsible for obtaining the necessary consent from their End Users before sending them messages through the Platform, and for ensuring they have a lawful basis to share End User data with us for processing. Infoway processes such data in accordance with the Client’s instructions and applicable law.

4. How We Share Information

We do not sell personal information. We share information only as follows:

  • Meta Platforms. Message content, phone numbers, and related metadata are transmitted to Meta / WhatsApp as necessary to deliver messages via the WhatsApp Business Platform. Meta’s handling of such data is governed by Meta’s own terms and privacy policies.
  • Infrastructure and service providers. We use trusted third-party hosting and infrastructure providers to operate the Platform. These providers process data on our behalf under appropriate confidentiality and data-protection obligations.
  • Legal and regulatory disclosure. We may disclose information where required to comply with applicable law, legal process, or a lawful request by a competent authority, or to protect our rights, safety, or property.
  • Business transfers. Information may be transferred as part of a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

We retain Client account information for as long as the Client maintains an account with us and as required to meet legal, accounting, or regulatory obligations. Message content and metadata processed on behalf of Clients are retained only for the period necessary to deliver messages, provide reporting, and meet the Client’s instructions and applicable legal requirements, after which such data is deleted or anonymised. Clients may request deletion of data processed on their behalf, subject to legal retention obligations.

6. Data Security

We implement appropriate technical and organisational measures to protect information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of credentials and access tokens, access controls, secured network configurations, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Your Rights and Choices

  • Opting-Out:
    You may opt out of receiving non-essential push notifications by adjusting your device or account settings.
  • Data Deletion:
    If you wish to delete your account or request the removal of your data, please contact us at the address provided below.
  • Inquiries:
    Reach out to us with any questions, clarifications, or requests regarding your personal information.

6. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make significant changes, we will notify you through the App and/or update the effective date at the beginning of this policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

7. Data Storage and Transfers

Information processed through the Platform is stored on servers operated by our infrastructure providers. Where data is transferred across borders, we take steps to ensure such transfers are carried out in accordance with applicable law and with appropriate safeguards in place.

8. Your Rights

Depending on applicable law, individuals may have rights to access, correct, update, or request deletion of their personal information, and to object to or restrict certain processing. Because Infoway typically processes End User data on behalf of its Clients, End Users should direct such requests to the Client with whom they communicated. Where Infoway is the controller (for example, in respect of Client account contacts), requests may be sent to us using the contact details below, and we will respond in accordance with applicable law.

9. Children's Privacy

The Platform is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information directly from children.

10. Third-Party Services

The Platform relies on the WhatsApp Business Platform and other third-party services. Your use of WhatsApp is also subject to Meta’s and WhatsApp’s own terms and privacy policies, which we encourage you to review.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “Last updated” date. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

12. Grievance Officer and Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are provided below. You may contact us with any questions, concerns, or requests regarding this Policy or your information:

  • Company: Infoway IT Solutions Pvt. Ltd.
  • Grievance Officer: Lalit Kumar
  • Address: SCO No. 40, 2nd Floor, NAC Road, Chandigarh 160101, India
  • Email: enquiry@infowayindia.com
  • Phone: 0172 466 7448