Waaro
Official Privacy Policy

Privacy Policy

Effective Date: March 2026 | Last Updated: October 01, 2026

This Privacy Policy explains how Waaro India Private Limited ("Waaro", "we", "us", or "our") collects, processes, and protects your information when you access our website, CRM tools, Meta / Facebook Lead Ads integrations, and WhatsApp automation systems.

Our Privacy Guarantee

Your data belongs to you and your business.

  • ●We never sell, rent, or trade your business, contact, or Meta lead data to third-party data brokers or advertisers.
  • ●All lead data ingested from Facebook, Instagram, Google Ads, or your website is strictly isolated within your authenticated business account.
  • ●We apply robust encryption and security controls to protect all data in transit and at rest.

f1. Meta Platform & Facebook Lead Ads Data

WAARO provides an omnichannel CRM connector for Meta Technologies (Facebook and Instagram). When you authenticate your business using Facebook Login or connect your Facebook Page, we request specific permissions under the Meta Platform Terms:

🔹 `leads_retrieval` Permission:

Used exclusively to receive inbound lead submissions from your Facebook and Instagram Instant Forms. When a prospective customer submits a lead ad, Waaro receives the `leadgen_id` and queries Meta Graph API to securely retrieve the customer's full name, telephone number, email, and specific form answers for storage in your private CRM workspace.

🔹 `pages_show_list` & `pages_manage_ads` Permissions:

Used to allow you to select which Facebook Business Page you wish to connect with Waaro, and to subscribe that specific Page to our inbound real-time webhook (`leadgen` subscription) so leads arrive with zero delay.

Strict Restrictions on Meta User Data:

  • Meta Platform data is processed solely on behalf of the page owner who authorized the integration.
  • We do not aggregate lead data across multiple advertisers.
  • We do not use lead contact details for our own marketing purposes or to build retargeting audiences for third parties.
  • You can revoke authorization at any time from your Facebook settings or via our Data Deletion Instructions.

2. Information We Collect

We collect information in the following categories:

A. Account & Profile Information:

Name, business email address, mobile number, company name, GST/tax ID, business address, and password credentials provided during registration.

B. Lead & Customer Data (Processed as a Data Processor):

Contact details of your customers (names, phone numbers, emails, inquiry requirements, order values) submitted through Meta Lead Ads, Google Ads, website chat widgets, or uploaded CSV files.

C. Technical & Operational Data:

IP addresses, browser type, device information, session timestamps, and authentication logs to safeguard against unauthorized access and maintain system uptime.

3. How We Use Your Data

We use the collected information for the following legitimate business purposes:

  • To provide, maintain, and improve the Waaro CRM and sales automation platform.
  • To ingest real-time ad inquiries and display them in your sales pipeline.
  • To trigger automated speed-to-lead responses and catalog dispatches via WhatsApp (when configured by you).
  • To send transactional alerts, subscription invoices, security notices, and customer support communications.
  • To detect and prevent fraudulent access, spam, and security incidents.

4. Data Sharing & Third-Party Services

We share information only with trusted service providers who assist us in operating our platform, subject to strict confidentiality and Data Processing Agreements (DPA):

  • Cloud Infrastructure: Secure cloud database and hosting providers (e.g., AWS, MongoDB Cloud).
  • Communication Gateways: Official WhatsApp Business API / Meta Cloud API and transactional email service providers.
  • Legal Compliance: When required by lawful court orders, law enforcement requests, or to enforce our Terms of Service.

We do NOT sell, rent, or monetize your personal or customer data to any third parties.

5. WhatsApp Business Messaging & Anti-Spam

WAARO enables users to automate lead greetings and customer communication via WhatsApp:

  • Users must ensure they have received prior affirmative consent or an active inquiry from leads before sending automated WhatsApp messages.
  • Messages sent through our system must comply with Meta's WhatsApp Business Messaging Policy.
  • Spamming, unsolicited broadcasting, or distributing misleading content is strictly prohibited and grounds for immediate account suspension.

6. Data Storage & Security Controls

We implement administrative, technical, and physical safeguards designed to protect personal data against accidental loss, unauthorized access, and alteration:

  • All communications are encrypted in transit using industry-standard TLS 1.3 / HTTPS encryption.
  • Sensitive credentials and tokens (such as Meta Page Access Tokens) are encrypted at rest.
  • Access to production databases is restricted to authorized engineers on a least-privilege basis with multi-factor authentication.

7. Data Retention & Erasure

We retain personal data only for as long as your account remains active or as required to fulfill the purposes outlined in this policy:

  • Lead records are stored in your CRM until deleted by you or upon account closure.
  • Meta Page Access Tokens are immediately invalidated upon disconnecting the integration.
  • To request permanent deletion of your data or Meta platform data, follow our Data Deletion Instructions or email privacy@waaro.in. Requests are processed within 24 to 48 hours.

8. Your Privacy Rights

Depending on your jurisdiction (including DPDP Act 2023, GDPR, and CCPA), you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request permanent deletion (erasure) of your personal data.
  • Withdraw consent at any time where processing was based on consent.
  • Export your data in a machine-readable format (CSV/JSON).

9. Legal & Regulatory Compliance

This policy adheres to:

  • The Digital Personal Data Protection (DPDP) Act, 2023 and Information Technology Act, 2000 of India.
  • Meta Platform Terms & Developer Policies.
  • General Data Protection Regulation (GDPR) (EU/EEA) and California Consumer Privacy Act (CCPA), where applicable.

10. Contact & Grievance Officer

If you have questions, concerns, or grievances regarding this Privacy Policy or our data practices, please reach out to our Grievance Officer:

Waaro India Private Limited

Grievance & Data Protection Officer: Dharmik Gadhiya

Email: privacy@waaro.in / support@waaro.in

Registered Address: Surat, Gujarat, India - 395006

Website: https://waaro.in