Privacy Policy

1. Introduction

Zapin ("Platform", "we", "our", or "us") is a WhatsApp Cloud API software platform developed, owned, and operated by Zayto India ("Company", a registered business in India). This Privacy Policy describes how Zayto India (operating as Zapin) collects, uses, and protects your information when you access our services, connect your WhatsApp Business Account (WABA), and interact with our platform.

2. Meta WhatsApp Business Cloud API Data Usage

When you connect your WhatsApp Business Account via Meta Embedded Signup or Direct API credentials, Zapin accesses:

• WhatsApp Business Account Details: WABA ID, Phone Number ID, Business Profile Name, and Quality Rating.
• Messaging Data: Inbound and outbound customer messages, message status receipts (sent, delivered, read), and message templates.
• Contact Information: Customer phone numbers and profile display names provided via WhatsApp webhooks solely for facilitating 2-way business communication.

Zero Third-Party Data Selling: We do not sell, rent, or monetize your Meta WhatsApp messaging data or end-user contact lists to advertisers or data brokers under any circumstances.

3. How We Use Information

We process data strictly to provide SaaS functionality:

• Delivering WhatsApp campaigns and real-time live chat responses.
• Displaying analytics, quota usage, and conversation delivery receipts.
• Managing template submissions and approvals with Meta Graph API.
• Automating customer support workflows and chatbots per your business instructions.

4. Data Retention and Deletion

We retain business conversation records only as long as your workspace account is active. You may request immediate deletion of your data at any time via our User Data Deletion Callback page or by disconnecting your WhatsApp Business Account in workspace settings.

5. Security Standards

All data transmitted between Zapin, Meta Cloud API servers, and end-users is encrypted using Transport Layer Security (TLS 1.3). Permanent system user tokens and sensitive credentials are encrypted at rest with industry-standard cryptographic algorithms.

6. Contact Information

For privacy inquiries, GDPR rights, or data deletion requests, contact our Data Protection Officer: