WhatsAppPrivacy Policy
Last updated: June 28, 2026
1. Who we are
WallzaOS is operated by Wallza Technologies Pvt Ltd. We act as data controller for your account data, and as data processor for the end-customer data you process through the platform.
2. What we collect
Account data (name, email, phone, company), workspace data (messages, contacts, templates, campaign metadata) and product telemetry (page views, feature usage, performance metrics). We collect the minimum needed to operate the service.
3. Why we collect it
To deliver the WallzaOS platform, send service notifications, prevent fraud, comply with legal obligations and — only with your explicit opt-in — send product updates. We never sell personal data or use customer content to train public models.
4. Where we store it
Data is hosted with major cloud providers in secure regions with encryption in transit and at rest. Larger accounts can request a specific hosting region; we confirm the region in writing before onboarding.
5. International transfers
Where data crosses borders we rely on Standard Contractual Clauses and equivalent safeguards. Cross-border AI processing only happens for the model providers you enable in your workspace.
6. Sub-processors
We use a short, published list of sub-processors (below) and notify customers by email at least 14 days before adding a new one, giving you time to object.
7. Your rights
Access, correction, deletion, portability, restriction and objection. Email privacy@wallzaos.app — we respond within 7 working days, and within statutory deadlines under GDPR, UK GDPR, CCPA/CPRA and India's DPDP Act.
8. Data processing agreement
We sign a DPA with every customer that requests one, including GDPR Article 28 terms, SCCs and a security annex. Request it at privacy@wallzaos.app.
9. Retention
Workspace data is retained while your account is active and for 30 days after cancellation, after which it is permanently deleted unless retained for a legitimate legal purpose.
10. Security
Encryption in transit and at rest, role-based access control, audit logging on administrative actions, least-privilege internal access and continuous monitoring. See the Security page for detail.
11. Cookies
See our Cookie Policy for the categories of cookies we use, who sets them and how to opt out.
12. Changes
We will notify you by email at least 14 days before any material change to this policy.
13. Contact
For any privacy-related question, email privacy@wallzaos.app. Data protection enquiries are handled by our privacy team and answered in writing.
Sub-processor list
Named entities and regions are listed in the signed DPA, available on request at privacy@wallzaos.app.
