Privacy and data use

Privacy Notice

This notice explains what Whats91 collects, why we use it, how customer messaging data is handled, and the choices available to individuals.

Effective date
Effective September 25, 2026
Version
Version 2.0
Plain-language guide. Headings and summaries help navigation, but do not replace the full text or a signed customer agreement.

Who we are and what this notice covers

Whats91 is a service brand owned and operated by Wilford Technology. In this notice, “Whats91”, “we”, “us”, and “our” refer to the operator of the Whats91 website and services.

This notice applies to whats91.com, Whats91 account and support interactions, WhatsApp Cloud API tools provided through Whats91, and supported integrations such as Whats91 MCP. It does not replace the privacy notice of a Whats91 customer that communicates with its own end users.

Our data-protection roles

For website visitors, prospects, account administrators, billing contacts, and people who contact support, Whats91 generally determines why and how the information is used.

When a business customer uploads contacts, configures campaigns, receives messages, or otherwise processes information about its customers, that business decides the purpose. Whats91 processes that customer-controlled data to provide the contracted service and according to lawful instructions, applicable terms, and platform requirements.

Information we collect

  • Account and contact information, such as name, business email, phone number, company, role, and login identifiers.
  • Commercial and billing information needed for plans, invoices, taxes, payment reconciliation, and support. Whats91 does not intentionally store complete payment-card details when a payment provider handles them.
  • Customer-controlled service data, such as WhatsApp Business Account identifiers, phone-number identifiers, templates, contacts, message content, media references, delivery events, webhooks, opt-in records, and automation settings.
  • Technical and security information, such as IP address, browser and device details, timestamps, authentication events, logs, diagnostics, and abuse-prevention signals.
  • Support, demo, survey, and other communications that you choose to send to us.
  • Integration data needed for an action you request, including OAuth grants, approved scopes, tool arguments, requested results, and related audit records.

Where information comes from

We receive information directly from you or your organisation, automatically from the website or service, from an authorised administrator or integration, and from platforms such as Meta when they return account, template, message, delivery, or billing events.

If a Whats91 customer contacted you on WhatsApp, that customer is normally the source of your contact details and messaging instructions. Questions about why it contacts you should first be directed to that customer.

Why we use information

  • Provide, secure, support, troubleshoot, and improve the website and contracted services.
  • Authenticate users, administer accounts, execute requested messages and automations, and return requested reports or tool results.
  • Process subscriptions, usage records, invoices, taxes, payment issues, and service communications.
  • Detect abuse, investigate security events, enforce our terms, and protect users and connected services.
  • Respond to enquiries and send permitted marketing communications with an available opt-out.
  • Comply with law, valid legal process, record-keeping requirements, and connected-platform policies.
Important: The legal ground depends on the context and applicable law. It may include consent, steps requested before or under a contract, compliance with law, and uses expressly permitted by applicable law. We do not describe contractual necessity or broad commercial interest as standalone DPDP grounds.

Customer messaging data and opt-in responsibility

Business customers are responsible for required notices, valid permissions, lawful message purposes, opt-outs, and ensuring that uploaded contacts and content may be used. Whats91 provides technical tools; it does not create consent on a customer’s behalf.

We use customer-controlled messaging data to provide and secure the requested service, comply with platform requirements, and meet documented legal obligations. We do not sell customer message content or use it to train a general-purpose AI model.

When information is shared

  • With Meta and WhatsApp services when required for customer-requested WhatsApp Business Platform features.
  • With infrastructure, communications, support, security, professional, and payment providers that need it to perform a service for Whats91.
  • With an authorised customer administrator, integration, or destination chosen by the customer.
  • For a corporate transaction, subject to appropriate confidentiality and legal safeguards.
  • When required by law or valid legal process, or reasonably necessary to protect rights, safety, and service integrity.
Important: The public subprocessor register remains a status page until the current provider list, processing locations, and change-notice process are factually verified.

Meta and WhatsApp are independent platforms

Whats91 integrates with Meta and WhatsApp services, but those services operate under their own terms and privacy practices. Meta may independently process WhatsApp Business Account, message, billing, security, and platform-usage information. Customers should review the current terms that apply to their account.

AI assistants and Whats91 MCP

A supported assistant can access only the Whats91 capabilities and account data needed for a tool operation that an authenticated user authorises. Whats91 does not receive a user’s complete assistant conversation history merely because the integration is connected.

A result may be returned to the assistant provider selected by the user, which processes it under its own terms. Users should not submit passwords, API keys, one-time codes, complete card details, government identifiers, health information, or unrelated sensitive data through an MCP request.

Disconnecting prevents new authorised requests but may not immediately erase security, audit, legal, or troubleshooting records already created.

Cookies and browser storage

The public website uses limited browser storage for consent choices and may use security technology such as Google reCAPTCHA on forms. At this notice’s date, Whats91 does not intentionally activate website analytics or advertising cookies on whats91.com. See the Cookie and Browser Storage Policy for the current inventory.

Retention and deletion

We retain information only as long as reasonably needed for its purpose, an active service, security, dispute resolution, agreement enforcement, and tax, accounting, platform, or legal obligations.

Retention differs by data type and customer configuration. Deletion may take additional time in backups and security records. We will not publish an exact period until the underlying product behavior and legal requirement are verified.

Security

We use safeguards appropriate to the service and information, but no internet service can guarantee absolute security. Customers remain responsible for users, credentials, connected systems, content, recipient permissions, and secure integration practices.

Your choices and data rights

Depending on applicable law and its commencement, you may request access to processing information, correction, erasure, consent withdrawal, grievance redressal, or nomination. Other rights may apply outside India. A request may be limited where identity cannot be verified or retention is required by law.

If Whats91 processes your information only for a business customer, we may direct the request to that customer and assist it as appropriate. See the Data Rights and Grievance Procedure for instructions.

Children

Whats91 is a business service and is not directed to children. Account administrators must be adults authorised to act for their organisation. Customers must not process a child’s data unless they have a lawful basis, required parental consent, and appropriate safeguards.

Cross-border processing

Connected platforms and providers may process information outside an individual’s state or country. Transfers are handled under applicable law, relevant contracts, and restrictions notified by a competent authority. This notice does not claim that all Whats91 data is stored only in India.

Changes to this notice

We may update this notice when services, providers, or legal obligations change. The effective date and version will be updated, and material changes will be communicated by a reasonable channel where required.

Contact Whats91

For questions, account notices, privacy requests, or legal correspondence, contact us directly. Include enough context to route the request, but do not send passwords, API keys, or one-time codes.

support@whats91.com131, C21 Mall, Ujjain, Madhya Pradesh 456010, India