Zapin
Official Legal Governance • Zayto India

Privacy Policy & Data Protection Charter

Transparent disclosure of how Zapin processes, encrypts, and protects WhatsApp Business Account data in strict compliance with Meta Platform Terms, GDPR, and the Digital Personal Data Protection Act (DPDP).

Effective Date: October 20, 2026•Operated by: Zayto India•TLS 1.3 / AES-256 Encrypted
1

Company Identity & Scope of Agreement

Zapin ("Platform", "we", "our", or "us") is a multi-tenant enterprise WhatsApp Business Cloud API engagement platform developed, owned, and operated exclusively by Zayto India ("Company", a registered business entity under the laws of India).

Operating Entity: Zayto India (Operating as Zapin)

Platform Domain: zapincloud.in (app.zapincloud.in / admin.zapincloud.in)

Business Jurisdiction: India • Global Compliance with GDPR & Meta Tech Provider Agreements

2

Meta WhatsApp Business Cloud API Data Usage

When you connect your WhatsApp Business Account (WABA) to Zapin via Meta Embedded Signup or Direct API credentials, our servers securely process the following specific metadata and telemetry:

WABA Account Details

WABA ID, Phone Number ID, WhatsApp Business Profile Name, Quality Score, and verified namespace.

Message Telemetry

Inbound and outbound messages, message delivery status receipts (sent, delivered, read), and template sync.

Audience Contact Lists

Customer phone numbers and profile display names provided strictly via webhooks to power your 2-way live CRM.

Access Tokens & Webhooks

System user tokens and webhook verification tokens, encrypted at rest using AES-256 GCM cryptographic vaults.

Strict Commercial Commitment

Zero Third-Party Data Selling Guarantee

Zayto India and Zapin do not sell, rent, broker, or monetize your WhatsApp messaging conversations, customer phone directories, or business data under any circumstances.

Your data is never shared with third-party advertising networks, data aggregators, or unauthorized commercial third parties. Data processed is solely utilized to execute your authenticated business operations through the official Meta Graph API.

4

Purpose of Data Processing

We collect and process your information strictly for the following operational SaaS purposes:

  • Live Chat & Multi-Agent Inbox: Routing incoming customer WhatsApp messages to your support agents in real-time.
  • Broadcast Delivery Velocity: Formatting and dispatching pre-approved Meta message templates across customer CSV audiences.
  • Template Management: Submitting message templates to Meta for approval and synchronizing approval statuses.
  • Billing & Delivery Telemetry: Generating delivery rate analytics, sent/read receipts, and billing statements.
5

Cryptographic Security Standards

Zapin implements industry-grade technical and organizational security controls:

In-Transit EncryptionAll communications between clients, Zapin, and Meta Cloud API servers utilize mandatory TLS 1.3 encryption.
At-Rest VaultingAccess tokens and API credentials are stored using AES-256 encryption within isolated database containers.
HMAC Webhook VerificationEvery incoming Meta webhook is validated using SHA-256 HMAC signatures to prevent spoofing or unauthorized injection.
Role-Based Access ControlWorkspace boundaries are strictly partitioned; no client or agent can access another workspace's data.
6

Data Retention & User Deletion Rights

We retain your conversation logs and audience records only as long as your workspace account remains active. Under GDPR and Indian DPDP Act guidelines, you have the right to request immediate erasure of your data.

Automated Data Deletion Request

Submit an automated deletion callback or delete your account immediately.

Data Deletion Portal →
7

Legal Grievance Redressal & Official Contact

In accordance with Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules and GDPR:

Zayto India Legal OfficeStatus: Active Operating Entity
Entity: Zayto India (Zapin Platform)
Grievance Email: contact@novixis.in / tharan.afj@gmail.com
Jurisdiction: Tamil Nadu / Kerala, India
SLA: Grievance resolved within 48 hours