Legal

Privacy Policy

Effective date: 21 October 2026 · Last updated: 21 October 2026

1. Who we are

Aireplo (“Aireplo”, “we”, “us”) is operated by [registered business name], [registered address], India. We set up the official WhatsApp Business Platform (WhatsApp Cloud API by Meta) for businesses and provide a branded dashboard with a team inbox, broadcasts, chatbots and an AI assistant.

This policy is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules.

2. What this policy covers

This policy applies when you:

• visit our website, including aireplo.vercel.app and any Aireplo domain;
• chat with the AI assistant on our website;
• message our WhatsApp Business number;
• send us an enquiry, estimate or enterprise request; or
• become our client, or work with us as a partner agency.

It does not cover the websites or apps of other companies, including Meta, WhatsApp and Facebook, which have their own privacy policies.

3. Data we collect

We do not knowingly collect sensitive personal data such as financial account passwords, health records or biometric data. Please don’t send it to us over chat.

4. How we use it

• To reply to your messages and questions, by our team or our AI assistant.
• To prepare quotes, deliver projects, provide support and maintenance, and send invoices.
• To set up and manage WhatsApp Business accounts, Meta apps and message templates for our clients.
• To keep our services secure, prevent misuse, and fix problems.
• To meet legal, tax and accounting obligations.

Our basis for using personal data is your consent (for example, when you message us) and legitimate uses allowed under the DPDP Act, such as providing a service you asked for and meeting legal obligations. You can withdraw your consent at any time (see Your rights). We send marketing messages on WhatsApp only to people who have agreed to receive them, and you can opt out at any time by telling us.

5. AI assistant

Our website chat and our WhatsApp number use an AI assistant to reply quickly. To write a reply, the text of the conversation is sent to our AI provider, Anthropic (Claude), which processes it on our behalf. Anthropic does not use this data to train its models under its commercial terms. You can ask to speak to a person at any time, and a member of our team will take over the chat.

AI replies can occasionally be wrong. Prices, timelines and commitments are confirmed only in a written quote from our team.

6. Who we share it with

We never sell personal data. We share it only with service providers that help us run Aireplo, and only as much as they need:

We may also share data when required by law, by a court or government authority, or to protect our rights, our users or the public. If Aireplo is merged or sold, personal data may transfer to the new owner under this same policy.

7. Data of our clients’ customers

When we build a WhatsApp setup for a business (our client), that business decides how its customers’ data is used. Under the DPDP Act, the business is the Data Fiduciary and Aireplo acts as a Data Processor on its behalf.

• Our client owns its Meta app, WhatsApp Business account, contacts and chat history.
• We process that data only to build, host, maintain and support the service our client asked for.
• Our client is responsible for collecting its customers’ consent (opt-in) before messaging them and for answering their privacy requests. We help our client do this.
• When a project or maintenance ends, we return or delete the client’s data on request, except where we must keep it by law.

If you are a customer of a business that uses Aireplo, please contact that business first about your data.

8. Where data is stored

Our service providers may store and process data on servers outside India, including in the United States and the European Union. We use providers with strong security commitments, and we transfer data outside India only as permitted under the DPDP Act. Enterprise clients can ask for hosting with data kept in India.

9. How long we keep it

• WhatsApp conversations with Aireplo: for as long as needed to serve you, and no longer than 3 years after your last message, unless you ask us to delete them sooner.
• Website chat: we do not store these conversations ourselves. Our AI provider may keep them for a short period for safety and abuse checks under its own policy.
• Client and billing records: for as long as the law requires (for example, 8 years for tax and accounting records).
• Server logs: kept by our hosting provider for a short period, usually days to weeks.

10. Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, unless we must keep it by law;
• withdraw your consent at any time (this does not affect anything we did before you withdrew it);
• nominate another person to use these rights if you die or cannot act yourself; and
• raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.

To use any of these rights, contact us using the details below. We will reply within 30 days. We may ask you to confirm your identity first, for example by messaging us from the same WhatsApp number.

11. Security

We protect data with encrypted connections (HTTPS), encrypted storage of passwords and access keys, signature checks on every message received from Meta, password-protected access to the team inbox, and access limited to people who need it. No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

12. Cookies and browser storage

Our website does not use advertising or tracking cookies. The team inbox keeps your sign-in for the current browser tab only (session storage), and it is cleared when you close the tab. If we add analytics in the future, we will update this policy first.

13. Children

Aireplo is a service for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our service or the law changes. We will change the “Last updated” date above, and for important changes we will tell our clients directly.

15. Contact and grievances

For privacy questions, requests or complaints, contact our Grievance Officer:

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.