Privacy Policy

1. Introduction

BotWave Intelligence Systems ("BotWave", "we", "us", or "our") is committed to protecting the privacy of our clients and their customers. This Privacy Policy explains how we collect, use, store, and protect information when you use our WhatsApp AI automation platform at botwave.store ("the Service").

2. Information We Collect

We collect the following categories of data:

• Business Information: Your business name, WhatsApp number, email address, and plan details when you register.
• Bot Configuration: FAQs, business context, catalog, and settings you configure in your dashboard.
• WhatsApp Conversation Logs: Messages exchanged between your customers and your AI bot are stored to power the service and provide you with an inbox view.
• Lead Data: Customer names, WhatsApp numbers, and other information your bot captures from your customers.
• Order Data: Order details captured by the bot on behalf of your business.
• Usage Data: Monthly message counts and feature usage, used for plan enforcement and billing.
• Payment Data: Processed by our payment partner (PayU). We do not store card or UPI credentials on our servers.

3. How We Use Your Information

• To deliver and operate the BotWave AI bot service for your business.
• To generate automated replies to your customers using AI (Gemini/Groq).
• To display conversation logs, leads, and orders in your dashboard.
• To enforce your plan limits and process billing via PayU.
• To send service notifications and critical account updates.
• To improve the quality and accuracy of our AI models (in aggregate, anonymised form only).

4. Data Sharing

We do not sell, rent, or trade your data or your customers' data to any third party. We only share data with:

• Supabase: Our database and storage provider. Data is stored on Supabase's secure servers.
• Google (Gemini API): Customer messages are processed by Google's Gemini AI to generate bot replies. Google's data processing terms apply.
• PayU: Payment gateway for subscription billing. Governed by PayU's privacy policy.
• Legal Authorities: Only when required by law or a valid court order under the Indian IT Act 2000.

5. Data Storage & Security

All data is stored securely on Supabase's infrastructure with encryption at rest and in transit (TLS/SSL). Access to your data is protected by row-level security policies. We implement industry-standard security practices to protect against unauthorized access, alteration, disclosure, or destruction of your data.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your data within 30 days, except where retention is required by law. WhatsApp conversation logs may be retained in anonymised form for service improvement.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to processing of your data.

To exercise these rights, contact us at [email protected].

8. Governing Law

This Privacy Policy is governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India.

9. Contact

For any privacy-related questions or data requests:

📧 [email protected]

📱 +91 87459 05666