Overview
This page explains how WBIZ handles personal data in line with India's Digital Personal Data Protection Act, 2023. WBIZ runs on Meta's official WhatsApp Cloud API and hosts data in India. It sits alongside our Privacy Policy.
DPDP Compliance
How WBIZ handles personal data in line with India's Digital Personal Data Protection Act, 2023.
1. Data Fiduciary and Data Processor
When you use WBIZ to message your own contacts, you decide why and how their data is used, so you are the Data Fiduciary and WBIZ acts as your Data Processor, working on your instructions. For the account data you give us at signup, WBIZ is the Data Fiduciary.
2. Consent and notice
The Act asks that people are told how their data will be used and give consent for it. WBIZ gives you the tools to collect and record consent: opt-in status is tracked per contact with its source, and opt-out keywords stop future messages. You are responsible for gathering valid consent from the people you message.
3. Data principal rights
People whose data you process can ask to access it, correct it, or have it erased, and can raise a grievance. We support these requests end to end. To act on one, or to reach us about your own data, email support@wazy.africa.
4. Purpose and retention
We use data only to run and improve the Services, as set out in our Privacy Policy. We keep it while your account is active and for a reasonable period afterwards to meet legal obligations. You can request deletion at any time through our Data Deletion policy.
5. Security safeguards
We apply reasonable security safeguards: encryption in transit, encryption at rest for secrets, access controls, and audit logging. There is more detail on our Security page.
6. Personal data breaches
If a personal data breach affects your data, we will act to contain it and notify affected users and the Data Protection Board of India where the law requires.
7. Processors and hosting
We host primarily in India and use a small set of processors to run the platform, including Meta and WhatsApp for message delivery, plus hosting, email, and error monitoring providers. They act on our instructions.
8. Grievance and contact
For any question or grievance about data protection under the Act, email support@wazy.africa and we will respond within the timelines the law sets.
FAQ
DPDP Act, common questions
Anything missing, a founder will answer directly.
India's Digital Personal Data Protection Act, 2023, which governs how personal data is handled.
Yes. We follow practices aligned with the Act. This page sets out how.
For your workspace content, you are, and WBIZ acts as a data processor.
Access, correction and erasure of their personal data, among others.
Delete or export contact data from the dashboard, or ask support to help.
Each contact shows how and when they opted in, which supports lawful processing.
Yes. Opt outs are honoured and the contact is skipped by marketing.
On infrastructure aligned with your compliance needs. Ask for specifics.
Yes, a data processing agreement is available.
HTTPS, signed webhooks, scoped keys, roles and audit logs.
Any transfer follows the Act and your agreement. Ask for the detail.
We follow the notification obligations the Act sets.
No.
For the life of your account, then deleted per the retention terms.
Email support@wazy.africa.