Effective: January 1, 2026 · Last Updated: May 30, 2026 · Controller: WhatsGrow AI
Summary: WhatsGrow AI is committed to protecting your privacy. We collect only what we need to deliver our service, never sell your personal data to third parties, and give you full control over your information. This policy explains exactly what we collect, why, and your rights.
Table of Contents
WhatsGrow AI (“WhatsGrow AI,” “we,” “us,” or “our”) operates the software-as-a-service platform available at whatsgrowai.com(the “Service”). This Privacy Policy describes how we collect, use, store, share, and protect information about you when you use our Service, visit our website, or communicate with us.
By using our Service, you agree to the collection and use of information in accordance with this policy. If you are using our Service on behalf of a business, that business accepts this policy. If you do not agree with this policy, please do not use our Service.
When you register for WhatsGrow AI, we collect information necessary to create and manage your account:
Our platform connects to the WhatsApp Business API (provided by Meta Platforms, Inc.). As part of this integration, we process:
Important:WhatsGrow AI processes this data as a data processor on behalf of you (our customer, the data controller) and your end users. You are responsible for having a lawful basis to process your contacts' data through our platform and for maintaining your own privacy notices with your end users.
We use third-party payment processors (Stripe and Razorpay) to handle all payment transactions. We do not store full credit card numbers or bank account details on our servers. We collect and retain:
When you use our AI chatbot features, conversation messages are sent to our AI providers (OpenAI and/or Google) to generate responses. We send only the minimum context necessary. We do not send identifying personal information beyond what is in the conversation thread itself. AI providers' data handling is governed by their own privacy policies. We do not use your conversation data to train AI models.
If you contact us for support, send us feedback, or participate in surveys, we retain those communications and any information you provide.
We use the information we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Provide and deliver the Service | Account data, WhatsApp data, team data |
| Process payments and manage subscriptions | Billing data, payment history |
| AI-powered chatbot responses | Conversation content, contact data |
| Send transactional emails (invoices, alerts, OTPs) | Email address, account data |
| Enforce usage limits and plan restrictions | Account data, usage logs |
| Improve and develop the platform | Aggregated, anonymised usage data |
| Fraud prevention and security | IP address, device data, session logs |
| Legal compliance and dispute resolution | All relevant data as required by law |
| Respond to support requests | Communications data, account data |
We do not use your data to serve third-party advertising, sell to data brokers, or build advertising profiles.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing are:
We do not sell, rent, or trade your personal data. We share data only in the following circumstances:
| Provider | Purpose | Location |
|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business API — message delivery and receipt; Meta Pixel & Conversions API — marketing website analytics and ad measurement (consent-based) | USA (SCCs apply) |
| Google LLC | Google Analytics 4 & Tag Manager — marketing website analytics (consent-based); Gemini API — AI chatbot response generation | USA (SCCs apply) |
| OpenAI, L.L.C. | AI chatbot response generation (GPT-4o) | USA (SCCs apply) |
| Stripe, Inc. | Payment processing (credit/debit cards, international) | USA (SCCs apply) |
| Razorpay Software Pvt. Ltd. | Payment processing (UPI, NetBanking, India) | India |
| Cloudflare, Inc. | Media file storage (R2), CDN, DDoS protection | Global |
| Vercel / AWS | Application hosting and infrastructure | Global (with EU options) |
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of WhatsGrow AI, our customers, or the public.
If WhatsGrow AI undergoes a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified in advance via email and will have the option to delete your account before any transfer takes effect.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of your subscription + 30 days after cancellation |
| WhatsApp conversation data | Duration of your subscription + 30 days after cancellation |
| Media files (images, documents, audio) | Duration of subscription; deleted on account deletion |
| Payment records and invoices | 7 years (required by financial regulations) |
| Security and audit logs | 12 months rolling window |
| Support communications | 3 years from last interaction |
| Anonymised analytics data | Indefinitely (cannot be re-identified) |
When you delete your account, we will delete or anonymise all your personal data within 30 days, except where we are required by law to retain certain records (e.g., payment history for 7 years).
We implement industry-standard technical and organisational security measures to protect your data:
Despite these measures, no system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by applicable law.
WhatsGrow AI operates globally. Your data may be transferred to and processed in countries outside your country of residence, including the United States and other countries that may not provide the same level of data protection as your home country.
For transfers of personal data from the EEA, UK, or Switzerland to third countries, we rely on the following safeguards:
If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:
California residents have the right to: (i) know what personal information is collected, disclosed, or sold; (ii) request deletion of personal information; (iii) opt-out of the sale of personal information (we do not sell personal information); (iv) non-discrimination for exercising these rights.
To exercise any of these rights, contact us at privacy@whatsgrowai.com. We will respond within 30 days. We may need to verify your identity before processing your request. There is no fee for most requests, but we may charge a reasonable fee for excessive or repetitive requests.
If you believe we have not adequately addressed your request, you have the right to lodge a complaint with your local data protection supervisory authority.
Our Service is intended for business use by adults (18 years of age or older). We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected data from a minor, please contact us at privacy@whatsgrowai.com and we will promptly delete it.
Our platform integrates with and may link to third-party services. This policy does not apply to those services. We encourage you to review the privacy policies of:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree with the changes, you may delete your account before the effective date.
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
WhatsGrow AI
Privacy & Data Protection Inquiries
Email: privacy@whatsgrowai.com
Website: whatsgrowai.com
Instagram: @whatsgrowai
We aim to respond to all privacy-related enquiries within 5 business days.