Privacy Policy
How WaChat collects, uses, and protects information across the platform.
Last updated · 1 May 2026 · Effective for all WaChat customers globally.
1. Introduction
This Privacy Policy describes how Serves Technologies Pvt. Ltd. ("WaChat", "we", "our", "us") collects, uses, discloses, and protects information when you use the WaChat platform, including the website at wachat.serves.in and the application at app.wachat.serves.in (collectively, the "Services").
WaChat is an authorised WhatsApp Business Solution Provider operating on Meta's WhatsApp Business Cloud API. This policy applies to information about you as a customer of WaChat ("Customer") and to information about your end-customers that flows through our Services on your behalf ("End-User Data").
2. Information we collect
2.1 Customer account information
When you sign up for WaChat, we collect your name, work email address, company name, phone number, and billing information. This is information you provide to us directly.
2.2 End-User Data
When you send messages through WaChat, we process your end-customers' phone numbers, message content, message metadata (delivery and read status, timestamps), and any custom contact properties you configure. You are the data controller for End-User Data; we are a data processor acting on your instructions.
2.3 Usage and device information
We collect logs of your interactions with the Services (pages visited, API calls made, IP address, browser and OS metadata, timestamps) for security, debugging and product improvement.
2.4 Cookies
We use a small number of cookies. See our Cookie Policy for details.
3. How we use information
We use the information we collect to:
- Provide, maintain, and improve the Services
- Deliver messages to and from your end-customers through Meta's WhatsApp Cloud API
- Bill you and pass through Meta's conversation charges at cost
- Detect, prevent, and respond to security incidents and policy violations
- Communicate with you about your account, security alerts, and service updates
- Comply with legal obligations under Indian and international law
We do not sell End-User Data to third parties. We do not use End-User Data to train machine-learning models. We do not share End-User Data with Meta beyond what is necessary to deliver your messages through the Cloud API.
4. When we share information
We share information only as follows:
- Service providers and sub-processors: Cloud hosting, payment processors, error monitoring and customer support tools. A current list is at
wachat.serves.in/legal/subprocessors. - Meta Platforms: Message payloads transit Meta's WhatsApp Cloud API to reach your end-customers. Meta's processing is governed by their own privacy policy.
- Legal compliance: When required by valid legal process, court order, or to protect the rights, property, or safety of WaChat, our customers, or the public.
- Business transfers: If WaChat is acquired or merged, your information may be transferred subject to this Policy.
5. Data retention
We retain Customer account information for as long as your account is active and for a period of 30 days after closure, after which it is anonymised or deleted.
End-User Data (messages, contacts) is retained for the duration of your subscription and for 30 days thereafter, unless you delete it sooner or request immediate deletion. See Data Deletion for details.
6. Security
WaChat operates a SOC 2 Type II audited and ISO 27001 certified information security programme. Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access to production systems requires two-factor authentication and is logged and audited. See our Security page for the full controls inventory.
7. Your rights
If you are an end-customer whose data is being processed by a WaChat Customer, please contact that Customer directly to exercise your rights. Where we act as the data controller (for our own Customer account information), you may:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Request deletion of your personal data
- Object to or restrict certain processing
- Port your data to another service
- Withdraw consent at any time, where processing is based on consent
Contact privacy@serves.in to exercise any of these rights. We respond within 30 days.
8. International data transfers
WaChat hosts data primarily in Mumbai (AWS ap-south-1). Limited operational data (e.g. payment processing, error logs) may be processed in other jurisdictions through our sub-processors. Where data is transferred outside India, we rely on appropriate safeguards including Standard Contractual Clauses.
9. Children
The Services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have, please contact us and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated by email to active Customer accounts at least 30 days before they take effect.
11. Contact us
Questions about this Policy or our data practices? Write to our Data Protection Officer at privacy@serves.in or by post:
Serves Technologies Pvt. Ltd.
Attn: Data Protection Officer
91Springboard, 175 & 176, Outer Ring Road,
Bellandur, Bengaluru 560103, India