Privacy Policy —
Your Data, Protected

We are committed to protecting your privacy and complying with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and GDPR where applicable.

Effective Date: April 2, 2026 · Last Updated: April 18, 2026

Technology Provider Notice: WhatsApp™, Twilio™, Microsoft®, Azure®, Microsoft Copilot®, Razorpay®, Google™, Google Gemini™ are trademarks of their respective owners.

Independence Notice: WACRM by ASRSBot Technology is not endorsed, affiliated with, or sponsored by Meta, Twilio, Microsoft, Google, or Razorpay.

AI Disclaimer: AI-generated responses are provided "as-is". Users are solely responsible for reviewing AI content.

1. Introduction

ASRSBot Technology (CIN: U72500UP2019OPC118905), a Microsoft Partner, ("we", "us", or "our"), with its registered office at MIG-49, Barra-6, Kanpur (UP) 208027 – India, operates WACRM, a WhatsApp Business CRM platform. This Privacy Policy describes how we collect, use, protect, and share your personal information.

2. Information We Collect

Account Information: Business name, personal name, email address, and password (stored in hashed form).

Billing Information: Company legal name, billing address, GST number, VAT/PAN number. Payment cards are processed by Razorpay.

Business Data: Customer records, contacts, conversation histories, campaign data, pipeline stages, products, templates, and notes.

WhatsApp Data: Messages sent and received through WhatsApp Business API, including text, media, and metadata.

Usage Data: Login timestamps, feature usage, browser/device information.

3. How We Use Your Information

✓Service Delivery — Provide, maintain, and improve the CRM platform

✓Account Management — Create and manage your tenant workspace

✓Billing — Process payments, generate invoices, manage subscriptions

✓Communication — Service-related notifications and security alerts

✓Security — Detect, prevent, and respond to fraud and abuse

✓Analytics — Understand usage patterns (aggregated, non-personal data)

✓Legal Compliance — Comply with legal obligations and resolve disputes

4. Data Storage & Security

Your data is stored on secure cloud infrastructure hosted on Microsoft Azure with industry-standard encryption at rest and in transit (TLS 1.2+).

Passwords are hashed using bcrypt with a cost factor of 12

All API communications are encrypted via HTTPS

JWT-based authentication with token expiration and refresh

Role-based access control (RBAC) within each tenant

Complete tenant data isolation

Regular automated backups of all databases

5. Third-Party Services

WhatsApp Business API (Meta)

For sending and receiving WhatsApp messages.

Twilio (Voice & SMS)

For outbound/inbound voice calls and SMS delivery.

Razorpay

For processing payments. Card info never stored on our servers.

Microsoft Azure

For cloud hosting, database services, and infrastructure.

Microsoft Copilot (Optional)

For AI-powered content generation and smart replies.

Google Gemini AI (Optional)

For AI-powered reply suggestions.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

•With your explicit consent

•With service providers under strict data processing agreements

•To comply with legal obligations or court orders

•To protect rights, safety, or property of ASRSBot Technology or users

7. Data Retention

We retain your account and business data for as long as your account is active.

→All personal data is permanently deleted on account deletion

→Payment records may be retained for up to 7 years (Indian tax regulations)

→Anonymized analytics data may be retained indefinitely

Inactive free accounts may be deleted after 12 months of inactivity, with prior email notification.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

✓Right to Access: Request a copy of your personal data

✓Right to Correction: Update or correct inaccurate data

✓Right to Deletion: Delete your account and all associated data

✓Right to Data Portability: Export your data via export features

✓Right to Withdraw Consent: Withdraw consent for optional processing

✓Right to Object: Object to processing for specific purposes

To exercise any of these rights, contact us at info@asrsbot.com.

9. Cookies & Tracking

We use minimal cookies and local storage for essential functionality.

Authentication Token: Stored in local storage to maintain your login session.

Theme Preference: Stored in local storage to remember dark/light mode preference.

We do not use third-party tracking cookies, advertising pixels, or analytics trackers.

10. Children's Privacy

The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

11. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in India and other Microsoft Azure regions. We ensure appropriate safeguards for cross-border data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email at least 30 days before changes take effect.