Privacy Policy

1 Overview & Scope

HAT INNOVATIONS ("we," "our," or "us") operates the WAHATBOT platform (https://wa.thehatai.com). This Privacy Policy explains how we collect, process, store, and safeguard personal and business data in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

2 Information We Collect

We collect information to deliver seamless WhatsApp automation and CRM services:

• Account Information: Name, business name, official email address, phone number, and password credentials hashed using cryptographic algorithms (Scrypt).
• Workspace Data: WhatsApp contact tags, automated auto-reply keyword rules, flow bot graphs, message template content, and incoming customer conversation history.
• Billing Identifiers: Razorpay customer ID, subscription order IDs, payment transaction status, and invoice history.
• Technical Metadata: IP address, browser type, device identifiers, session cookies, and system access timestamps for security telemetry.

3 Payment Information Security (Razorpay)

All payment data transmission is tokenized and protected end-to-end via Transport Layer Security (TLS 1.3 / AES-256) encryption by Razorpay in strict compliance with the Payment Card Industry Data Security Standards (PCI-DSS Level 1).

4 How We Use Your Data

Your data is used solely for legitimate business operations:

• To activate, manage, and verify your WAHATBOT software workspace.
• To execute scheduled WhatsApp campaigns, chatbot replies, and team live chat.
• To send transactional billing notifications, invoice receipts, and system alerts.
• To prevent fraudulent access, unauthorized brute-force attempts, and abusive spamming.
• To provide proactive customer support and resolve technical queries.

5 Data Protection & No Third-Party Selling

We never sell, rent, monetize, or trade your personal or customer business contact lists to third-party advertisers or data brokers.

Information is shared only with trusted infrastructure subprocessors (such as cloud hosting facilities, Cloudflare security CDN, and Razorpay) strictly for platform execution, under confidentiality obligations.

6 Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act, you have the right to:

• Access & Summary: Request a copy of your personal data held by us.
• Correction & Updating: Correct inaccurate or obsolete account details.
• Data Erasure: Request the deletion of your account and WhatsApp session tokens upon service cancellation.
• Grievance Redressal: File a concern directly with our designated Grievance Officer.

7 Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the contact details of our Grievance Redressal Officer are as follows: