Privacy Policy

1. Who we are

This Privacy Policy explains how WALoops ("we," "us," "our"), a WhatsApp Business automation platform operated by Varni Infotech, collects, uses, and protects information when you use our marketing site (waloops.com), our application (app.waloops.com), or connect your own customers' data to WALoops.

2. Information we collect

Account information — your name, email address, company name, and password (stored hashed, never in plain text) when you register.

WhatsApp data — your connected WhatsApp Business Account details, and the message/conversation content exchanged between you (or your AI Sales Agent/bots) and your customers through the WhatsApp Cloud API.

Instagram data — if you connect an Instagram professional account using Instagram Login, we receive your account ID, username and profile details; the direct messages sent to and from that account; the comments on its posts and our replies to them; and basic information about the people who message or comment (their Instagram-scoped ID and username). We access this only through Meta's official Instagram API, only for the account you connect, and only with the permissions you approve on Instagram's consent screen. We store your Instagram access token encrypted-in-transit and use it only to act on your behalf.

Commerce data — if you connect a Shopify or WooCommerce store, we sync customer and order records from that store so WALoops can personalize messages, track cart-recovery, and power the AI Sales Agent.

Payment information — subscription billing is handled entirely by our payment partner, Razorpay. WALoops does not receive or store your card, UPI, or bank account details — only the subscription and payment status.

Usage & log data — login sessions, webhook delivery logs, and diagnostic logs we use to operate and troubleshoot the platform.

3. How we use this information

We use the information above to: operate your shared inbox (including Instagram direct messages), bot flows, Instagram comment auto-replies, and broadcast campaigns; generate AI Sales Agent replies (which may involve sending relevant message and order context to our AI processing partner, Anthropic, solely to produce a response); sync and personalize commerce data from your connected store; process subscription billing; provide customer support; and maintain the security and reliability of the platform.

4. Who we share data with

We share data only with the service providers needed to deliver WALoops, each bound to process it only on our instructions:

• Meta — messages are sent and received through Meta's official WhatsApp Business Cloud API and Instagram API.
• Anthropic (Claude) — powers the AI Sales Agent and AI-assisted Bot Flow features.
• Razorpay — processes subscription payments.
• Shopify / WooCommerce — only the store you yourself connect, to sync your own commerce data back into WALoops.
• Our hosting/infrastructure provider, to run the application and database.

We do not sell your data or your customers' data to third parties. We do not use Instagram data to build advertising profiles, and we do not transfer it to data brokers or use it for purposes other than providing the WALoops features you have enabled.

5. Data retention

We retain account, conversation, and commerce data for as long as your account is active, so your inbox history and customer records remain available to you. If you close your account, we delete or anonymize this data within a reasonable period, except where we're required to retain billing records for legal/tax purposes.

6. Data security

Data in transit is encrypted (HTTPS/TLS). Access to the application is protected by authenticated, per-account API tokens, and team-member access is scoped by role.

7. Your rights

Disconnecting and deleting Instagram data. You can disconnect Instagram at any time with the Disconnect button on the Instagram → Account page in WALoops, or by removing WALoops in Instagram → Settings → Apps and Websites. To have your stored Instagram data (messages, comments, profile details and access token) deleted, email [email protected] from your account email with the subject "Delete Instagram data"; we complete deletion within 30 days and confirm by email. People who messaged or commented on your account can send the same request.

You can request access to, correction of, or deletion of your account data, or your customers' data held on your behalf, by contacting us at [email protected].

8. Cookies & local storage

The application (app.waloops.com) stores a login session token in your browser's local storage to keep you signed in. The marketing site (waloops.com) may use basic, privacy-respecting analytics to understand site usage.

9. Children's privacy

WALoops is a business tool and is not directed at, or knowingly used by, children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this policy or your data can be sent to [email protected].