Who we are and what this notice covers
Whats91 is a service brand owned and operated by Wilford Technology. In this notice, “Whats91”, “we”, “us”, and “our” refer to the operator of the Whats91 website and services.
This notice applies to whats91.com, Whats91 account and support interactions, WhatsApp Cloud API tools provided through Whats91, and supported integrations such as Whats91 MCP. It does not replace the privacy notice of a Whats91 customer that communicates with its own end users.
Our data-protection roles
For website visitors, prospects, account administrators, billing contacts, and people who contact support, Whats91 generally determines why and how the information is used.
When a business customer uploads contacts, configures campaigns, receives messages, or otherwise processes information about its customers, that business decides the purpose. Whats91 processes that customer-controlled data to provide the contracted service and according to lawful instructions, applicable terms, and platform requirements.
Information we collect
- Account and contact information, such as name, business email, phone number, company, role, and login identifiers.
- Commercial and billing information needed for plans, invoices, taxes, payment reconciliation, and support. Whats91 does not intentionally store complete payment-card details when a payment provider handles them.
- Customer-controlled service data, such as WhatsApp Business Account identifiers, phone-number identifiers, templates, contacts, message content, media references, delivery events, webhooks, opt-in records, and automation settings.
- Technical and security information, such as IP address, browser and device details, timestamps, authentication events, logs, diagnostics, and abuse-prevention signals.
- Support, demo, survey, and other communications that you choose to send to us.
- Integration data needed for an action you request, including OAuth grants, approved scopes, tool arguments, requested results, and related audit records.
Where information comes from
We receive information directly from you or your organisation, automatically from the website or service, from an authorised administrator or integration, and from platforms such as Meta when they return account, template, message, delivery, or billing events.
If a Whats91 customer contacted you on WhatsApp, that customer is normally the source of your contact details and messaging instructions. Questions about why it contacts you should first be directed to that customer.
Why we use information
- Provide, secure, support, troubleshoot, and improve the website and contracted services.
- Authenticate users, administer accounts, execute requested messages and automations, and return requested reports or tool results.
- Process subscriptions, usage records, invoices, taxes, payment issues, and service communications.
- Detect abuse, investigate security events, enforce our terms, and protect users and connected services.
- Respond to enquiries and send permitted marketing communications with an available opt-out.
- Comply with law, valid legal process, record-keeping requirements, and connected-platform policies.
Customer messaging data and opt-in responsibility
Business customers are responsible for required notices, valid permissions, lawful message purposes, opt-outs, and ensuring that uploaded contacts and content may be used. Whats91 provides technical tools; it does not create consent on a customer’s behalf.
We use customer-controlled messaging data to provide and secure the requested service, comply with platform requirements, and meet documented legal obligations. We do not sell customer message content or use it to train a general-purpose AI model.
Meta and WhatsApp are independent platforms
Whats91 integrates with Meta and WhatsApp services, but those services operate under their own terms and privacy practices. Meta may independently process WhatsApp Business Account, message, billing, security, and platform-usage information. Customers should review the current terms that apply to their account.
AI assistants and Whats91 MCP
A supported assistant can access only the Whats91 capabilities and account data needed for a tool operation that an authenticated user authorises. Whats91 does not receive a user’s complete assistant conversation history merely because the integration is connected.
A result may be returned to the assistant provider selected by the user, which processes it under its own terms. Users should not submit passwords, API keys, one-time codes, complete card details, government identifiers, health information, or unrelated sensitive data through an MCP request.
Disconnecting prevents new authorised requests but may not immediately erase security, audit, legal, or troubleshooting records already created.
Retention and deletion
We retain information only as long as reasonably needed for its purpose, an active service, security, dispute resolution, agreement enforcement, and tax, accounting, platform, or legal obligations.
Retention differs by data type and customer configuration. Deletion may take additional time in backups and security records. We will not publish an exact period until the underlying product behavior and legal requirement are verified.
Security
We use safeguards appropriate to the service and information, but no internet service can guarantee absolute security. Customers remain responsible for users, credentials, connected systems, content, recipient permissions, and secure integration practices.
Your choices and data rights
Depending on applicable law and its commencement, you may request access to processing information, correction, erasure, consent withdrawal, grievance redressal, or nomination. Other rights may apply outside India. A request may be limited where identity cannot be verified or retention is required by law.
If Whats91 processes your information only for a business customer, we may direct the request to that customer and assist it as appropriate. See the Data Rights and Grievance Procedure for instructions.
Children
Whats91 is a business service and is not directed to children. Account administrators must be adults authorised to act for their organisation. Customers must not process a child’s data unless they have a lawful basis, required parental consent, and appropriate safeguards.
Cross-border processing
Connected platforms and providers may process information outside an individual’s state or country. Transfers are handled under applicable law, relevant contracts, and restrictions notified by a competent authority. This notice does not claim that all Whats91 data is stored only in India.
Changes to this notice
We may update this notice when services, providers, or legal obligations change. The effective date and version will be updated, and material changes will be communicated by a reasonable channel where required.
Contact Whats91
For questions, account notices, privacy requests, or legal correspondence, contact us directly. Include enough context to route the request, but do not send passwords, API keys, or one-time codes.