Privacy Policy

Firephoenixdev Pvt Ltd
Pune, Maharashtra, India
Effective Date: January 20, 2026 | Last Updated: January 20, 2026

1 Information We Collect

Firephoenixdev Pvt Ltd, located in Pune, Maharashtra, India, operates the Apana WhatsApp API platform ("Service"). This Privacy Policy complies with India's Digital Personal Data Protection Act 2023 (DPDP Act), the Information Technology Act 2000, and WhatsApp Business API requirements.

Account Data:

Name, email, phone, WhatsApp Business number, business details, payment information (for Starter ₹1499/mo, Growth ₹2399/mo billing).

Service Data:

WhatsApp messages/contacts processed via WhatsApp Cloud API (deleted within 30 days post transmission), conversation logs.

Usage Data:

IP address, device information, analytics cookies, and usage patterns.

No Storage: WhatsApp message content is not stored beyond transmission; data is processed on your instructions as the business customer.

2 How Your Data Is Used

  • To provide the Service (automation, chatbots, broadcasts)
  • To process payments via Stripe/Razorpay
  • To comply with WhatsApp / Meta API requirements
  • To improve the Service and prevent fraud
  • To send marketing communications, with an option to opt out via support@apanawhatsapp.com

3 Data Sharing

Service Providers:

Payment processors, cloud hosting providers (including AWS India), and WhatsApp/Meta where required to deliver messages through the WhatsApp Business API.

Legal:

Government or regulatory authorities when required by law or to protect rights and safety.

No Selling: Personal data is not sold to third parties.

4 Data Security

Security measures include encryption in transit and at rest (such as TLS and AES 256), access controls, and regular monitoring. As a WhatsApp API–integrated platform, security practices are aligned with Meta's requirements as applicable.

5 Your Rights (DPDP Act 2023)

Subject to applicable law, you can:

  • Request access, correction, or deletion of your personal data (via support@apanawhatsapp.com)
  • Request data portability or object to certain processing
  • Withdraw consent where processing is based on consent

Retention:

Data is generally deleted within 30 days of account termination unless a longer retention period is required by law or needed for legitimate purposes such as accounting or dispute resolution.

6 Cookies & Tracking

The Service uses functional cookies for core features such as login, sessions, and security, and may use analytics cookies to understand usage and improve functionality. Analytics cookies can be controlled through browser settings and, where available, in site controls.

Contact

Email: support@apanawhatsapp.com

Company: Firephoenixdev Pvt Ltd
Pune, Maharashtra, India