Privacy Policy

This Privacy Policy describes how Adwix Media Prop. ("Adwix Media", "we", "us", or "our") collects, uses, and shares information when you use our WhatsApp Business Platform at adwixconnect.com and our Android app (together, the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

Who We Are

Adwix Media Prop. is a Meta Tech Provider that offers a SaaS platform enabling businesses to send and receive WhatsApp messages, run broadcast campaigns, manage contacts, and access analytics — all powered by Meta's official WhatsApp Cloud API.

Information We Collect

Account Information

When you register on our platform, we collect:

• Full name and email address
• Password (stored as encrypted hash — never in plain text)
• Business name and contact details
• WhatsApp Business Account ID (WABA ID) and Phone Number ID assigned by Meta

WhatsApp Business Data

To provide our messaging services, we collect and process:

• WhatsApp message content (text, images, documents, audio, video) sent through our platform
• Contact phone numbers and names stored in your account
• Message delivery statuses (sent, delivered, read, failed)
• Conversation history and metadata
• Message templates created and submitted to Meta for approval
• Broadcast campaign data including recipient lists and delivery reports

Google Account Data (Sign-in with Google, Google Sheets & Google Calendar)

If you choose to use our optional Google features, we receive and process the following Google user data:

• Sign in with Google: your name, email address and Google profile ID — used only to create and authenticate your Adwix Connect account
• Google Sheets integration (optional): an OAuth access/refresh token and the IDs of the spreadsheets you choose. We create a sheet for your contacts (or add an “Adwix Contacts” tab to a spreadsheet you pick) and keep it in sync both ways with the contacts in your account, including a hidden column we use to tell your edits apart from ours; if you turn them on, we also add report tabs (Leads, Orders, Appointments, Campaigns) to that spreadsheet. When you choose one of your own sheets, we read its tab names, header row and the tab you choose to import as contacts. If you create a “send WhatsApp when a row is added” trigger on a sheet you choose, we read that tab every minute to find new rows, send your chosen WhatsApp template to the number in each new row, and (if you leave it on) write the result in a “WhatsApp status” column of that tab. We never read spreadsheets you have not chosen, and never change your other tabs
• Google Calendar integration (optional): an OAuth refresh token and your Google account email. When an appointment is booked — by you, by your customer on your booking page, or by your customer tapping a time we send on WhatsApp — we read the start and end times of events on calendars you own to find when you are busy, create the appointment event on your primary calendar (with a Google Meet link if you choose online), and move or delete it if the appointment is rescheduled or cancelled. Your booking page and WhatsApp messages show customers only which times are free, never the titles or details of your events, and we do not store your other events. We store the appointment (contact, time, title, notes, status) to send your customer WhatsApp confirmations, reminders and follow-ups. We never access calendars you do not own

These features are optional. You can disconnect Google access at any time from your account settings or from your Google Account permissions page.

Facebook Pages, Messenger, Instagram & Lead Ads (optional)

If you connect a Facebook Page (and the Instagram professional account linked to it) through Facebook Login, we receive and process:

• Page details and access: Page name, picture and ID, the linked Instagram account ID and username, and a Page access token — used only to receive and send messages and leads for that Page
• Messenger and Instagram Direct messages: messages people send to your Page or Instagram account, the replies you send from Adwix Connect, and the sender's name, username and profile picture as provided by Meta — shown in your Social Inbox
• Lead Ads: the answers a person submits in your Facebook / Instagram lead form (for example name, phone number, email and your own questions) with the form and ad names — added to your contacts and, if you enable it, used to send that person your WhatsApp message
• Click-to-WhatsApp ad conversions (optional): when a customer reaches you from your Click-to-WhatsApp ad, Meta gives us the ad's click ID (ctwa_clid) and ad details. If you turn on Ad Conversions, we send conversion events (for example LeadSubmitted, or Purchase or a lead stage you choose) with that click ID to your own WhatsApp dataset through Meta's Conversions API for Business Messaging, so your ads can optimise. We send events only for your own WhatsApp account and never share them with other businesses

We use this data only to provide these features to you. You can disconnect a Page at any time in Integrations, or remove Adwix Connect in your Facebook Business Integrations settings.

Payment Information

Subscription payments are processed by Razorpay. We do not store your card or UPI details. We receive and store:

• Subscription plan and status
• Payment confirmation IDs from Razorpay
• Billing history and invoices

Refer & Earn Programme

If you take part in our Refer & Earn programme, or sign up through someone else's referral link, we store:

• Your referral code, and which account referred which (by account email)
• Each referral's stage — signed up, paying, earned, rewarded — worked out from the referred account's subscription status
• How and when a reward was given

What the referrer sees: if you signed up through someone's link, they see your business name (or a partly hidden email address if you have not added one), the date you joined and that stage. They never see your messages, contacts, payment details or how much you pay. What you see when signing up: the business name of the person who referred you.

Technical & Usage Data

Automatically collected when you use our platform:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Login timestamps and session data

WhatsApp & Meta Data Handling

As a Meta Tech Provider using the WhatsApp Business Platform, we operate under strict data handling requirements set by Meta. The following applies to all WhatsApp data processed through our platform:

How WhatsApp Data Flows

• Messages sent and received through our platform are transmitted via Meta's WhatsApp Cloud API
• Meta processes and delivers messages on their infrastructure — Adwix Media acts as the business interface layer
• Message content is stored in our database (MongoDB) to display conversation history in your dashboard
• We do not read, sell, or use your customers' WhatsApp message content for any purpose other than delivering and displaying it to you

End-User (Your Customers') Data

When your customers message your WhatsApp Business number, the following applies:

• Their phone numbers and messages are stored to enable conversation management
• Their data is used only to facilitate the messaging service you have subscribed to
• We do not contact your customers directly or use their data for our own marketing
• You, as the business account holder, are responsible for obtaining proper consent from your customers before messaging them via WhatsApp

WhatsApp Business Policy Compliance

All users of our platform must comply with:

• WhatsApp Business Policy
• WhatsApp Commerce Policy
• Meta Platform Terms
• Meta Privacy Policy

Meta Access Token & API Credentials

To connect your WhatsApp Business Account to our platform, you authorize us to use your Meta-issued access token and WABA ID. These credentials are:

• Stored securely and encrypted in our database
• Used only to send/receive messages and manage templates on your behalf
• Never shared with third parties
• Revocable at any time by disconnecting your account from Meta Business Manager

Message Templates

Template messages submitted through our platform are sent to Meta for review and approval. By submitting templates, you confirm that the template content complies with WhatsApp's template policies. We store approved templates in your account for easy reuse.

How We Use Your Data

Purpose	Data Used	Legal Basis
Provide messaging services	WABA ID, messages, contacts	Contract performance
Account management	Name, email, password	Contract performance
Billing and subscriptions	Payment records, subscription status	Contract performance
Platform security	IP address, login data	Legitimate interest
Customer support	Account data, issue reports	Legitimate interest
Analytics & improvement	Usage data (anonymized)	Legitimate interest
Legal compliance	As required by law	Legal obligation

We do not use your data or your customers' data for advertising, profiling, or sale to third parties.

Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Meta (WhatsApp Cloud API)

Message data is transmitted through Meta's WhatsApp Cloud API infrastructure to deliver messages. Meta processes this data under their own Privacy Policy.

Razorpay (Payment Processing)

Your name and email are shared with Razorpay to process subscription payments. Razorpay is PCI-DSS compliant and handles all card/UPI data directly. See Razorpay's Privacy Policy.

Google (Sign-In, Google Sheets & Google Calendar APIs)

When you sign in with Google or connect the Google Sheets or Google Calendar integration, Adwix Connect accesses Google user data through Google APIs. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

• We access only the Google data needed for the feature you enable — basic profile and email for Sign-in; for Google Sheets, only the spreadsheet Adwix Connect creates for you and the spreadsheets you select yourself in the Google file picker (we cannot see or open any other file in your Drive); and only events on calendars you own for appointment booking
• We use this data solely to provide those user-facing features (authentication, contact sync and appointment booking)
• We do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the service or as required by law
• Google OAuth tokens are stored encrypted and can be revoked by you at any time

AI features and Google user data. Our optional AI features (reply drafts, summaries, auto-tagging and the AI responder) are powered by Anthropic's Claude API, used directly through Anthropic's commercial API. Contact details that came from your Google Sheets may be included when these features process a conversation, only to produce the result you asked for. Anthropic does not use data received through its commercial API to train its models, and we do not send Google user data to any other AI provider, aggregator or model hub. Google Calendar data is never sent to any AI model: when the AI responder offers appointment times, our own servers work out the free times and send them, without the model seeing your calendar. We do not use Google user data, raw, aggregated or anonymised, to train or improve any AI or machine-learning model.

Infrastructure Providers

• Render — Cloud hosting for our backend API (render.com)
• MongoDB Atlas — Database for messages and conversations
• PostgreSQL — Database for user accounts and billing
• Cloudflare — Hosting for our website and storage (Cloudflare R2) for media files sent and received in your chats
• Google Firebase Cloud Messaging — Delivery of push notifications to the Android app (see section 8)

All infrastructure providers are contractually required to protect your data and process it only for the purpose of providing services to us.

Legal Requirements

We may disclose your data if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of Adwix Media, our users, or the public.

Data Storage & Security

We take security seriously and implement industry-standard measures to protect your data:

• Passwords are hashed using bcrypt with salt rounds — never stored in plain text
• All API communications use HTTPS/TLS encryption
• Access tokens and credentials are encrypted at rest
• JWT-based authentication with expiry for all API access
• Database access is restricted to authorized services only
• Regular security reviews and dependency updates

While we implement strong security measures, no system is 100% secure. If you suspect a security breach, please contact us immediately at connect@adwixconnect.com.

Cookies & Local Storage

Our platform uses browser localStorage (not cookies) to store your session token and user preferences. This data:

• Stays on your device and is not transmitted to third parties
• Is cleared when you log out
• Contains your JWT authentication token and basic account info
• If you open a referral link, holds that referral code for up to 60 days so it can be applied when you sign up; it is removed once used

We do not use advertising cookies, tracking pixels, or third-party analytics scripts on our platform dashboard or in our Android app.

Our public marketing website (for example the home, sign-up and landing pages) uses the Meta Pixel to measure how our own ads perform. It is not loaded inside the dashboard or the Android app, and it never receives your WhatsApp messages or your customers' data.

Android App

Adwix Connect is also available as an Android app on Google Play (package com.adwixconnect.app). The app uses the same account and the same data as the web platform, plus the device features below. Each one is used only for the purpose stated.

Device permissions

Permission	Why the app uses it
Microphone	Only during a WhatsApp voice call that you start or answer, so the customer can hear you. Call audio is streamed live to the call; we do not record or store it.
Notifications	To alert you to new customer messages, incoming and missed calls, template approvals and billing updates. You can switch each type off in Settings → Notifications.
Full-screen incoming calls	To show the incoming-call screen (Answer / Decline) when your phone is locked. It shows only the caller's name, not your chats.
Ongoing call service	Keeps the microphone and connection running while a call is in progress if you switch to another app. It shows an "Ongoing call" notification and stops when the call ends.
Vibration and keeping the device awake	To ring for incoming calls and keep a live call connected while the screen is off.

The app does not request access to your location, contacts, camera, SMS or call logs. During a call the screen turns off when the phone is held to your ear, using the proximity sensor; no sensor data is stored or sent anywhere.

Push notifications (Google Firebase Cloud Messaging)

Notifications are delivered through Google Firebase Cloud Messaging. To do this we store a device token linked to your account. A notification can carry the sender's name, a short preview of the message and the conversation it belongs to, and passes through Google's servers on its way to your phone. When you sign out of the app, the token is removed from your account so that phone stops receiving your notifications.

Files on your phone

Documents, photos and videos you open from a chat are downloaded to the app's private storage on your phone so they can open in your phone's viewer. Files you choose to save go to your phone's Pictures, Movies, Music or Download folders under "Adwix Connect". These copies stay on your device and are not uploaded anywhere by the app.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Update incorrect or incomplete data via your account settings
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for legitimate interest purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of Consent: Disconnect your WhatsApp Business Account at any time

To exercise any of these rights, email us at connect@adwixconnect.com. We will respond within 30 days.

Children's Privacy

Our platform is a business tool intended for use by adults (18+) operating businesses. We do not knowingly collect personal data from children under 18 years of age.

If you believe a minor has registered on our platform, please contact us at connect@adwixconnect.com and we will promptly delete the account.

Meta Platform Policies & Compliance

As an official Meta Tech Provider, Adwix Media and all clients using our platform are bound by Meta's platform policies. The following requirements apply:

Prohibited Uses

You must NOT use our platform to:

• Send spam, unsolicited bulk messages, or messages to people who have not opted in
• Send content that violates WhatsApp Business Policy
• Promote illegal products or services
• Impersonate other businesses or individuals
• Send messages that violate Meta's Community Standards
• Use the platform for any purpose prohibited under Indian law or the laws of your jurisdiction

Opt-In Requirement

WhatsApp requires businesses to obtain explicit opt-in consent from customers before sending them messages. As a business using our platform, you are solely responsible for:

• Obtaining valid opt-in from all contacts before messaging them
• Maintaining records of opt-ins
• Honoring opt-out requests immediately
• Informing customers that they are consenting to receive WhatsApp messages from your business

Message Quality & Spam Prevention

Meta monitors message quality ratings for all WhatsApp Business Accounts. Adwix Media may suspend or restrict accounts that:

• Receive high block/report rates from end users
• Send messages in violation of WhatsApp's policies
• Abuse template messaging capabilities

Data Localization

Message data processed through the WhatsApp Cloud API is subject to Meta's data storage and processing locations as described in Meta's Data Policy. We do not control where Meta stores API-processed data.

Relevant Meta Policies

• WhatsApp Business Policy
• WhatsApp Commerce Policy
• Meta Platform Terms
• Meta Data Use Policy
• WhatsApp Legal Info

Payment Data & Razorpay

All payments are processed by Razorpay Payment Solutions Pvt. Ltd., a licensed payment aggregator regulated by the Reserve Bank of India (RBI).

• We never store credit/debit card numbers, CVV, UPI PINs, or banking credentials
• Razorpay handles all payment processing in a PCI-DSS Level 1 compliant environment
• We receive only payment confirmation IDs and subscription status from Razorpay
• Subscription auto-renewal happens via Razorpay's secure recurring payment infrastructure
• You can cancel your subscription at any time from your account settings

Data Retention

Data Type	Retention Period
Account information	Until account deletion + 30 days
Message text	12 months from when it was sent or received
Media files (photos, videos, voice notes, documents)	90 days from when they were sent or received
Messages you delete from the inbox	Permanently removed after 30 days
Call recordings (if turned on)	60 days, unless your workspace sets a different period
Payment records	7 years (tax/legal compliance)
Webhook logs	7 days (auto-deleted)
Login/security logs	90 days
Deleted conversations	Immediately purged on request

Before any message text or media is removed, we tell the workspace owner by email and in the app, at least 7 days ahead (30 days ahead the first time). You can download a backup of your chats, contacts and media at any time from Settings → Security & Data. Contacts, campaigns, templates and flows are kept while your account is active.

After account deletion, all personal data is permanently removed from our active databases within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or Meta's platform policies. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you by email or in-platform notification for significant changes

Continued use of the platform after changes constitutes acceptance of the updated policy. We encourage you to review this page regularly.

Contact Us

For any privacy-related questions, data requests, or concerns, please contact us:

We aim to respond to all privacy requests within 30 days. For urgent security matters, please mark your email as "URGENT – Privacy".