Privacy policy

Engazly is operated by Engazly, [Registered office address]. Engazly is software that lets businesses (“Customers”) manage WhatsApp conversations and sales leads as a team.

• For your account (the people who sign up and use Engazly), we decide how data is used. Under the DPDP Act we are the Data Fiduciary.
• For your customers’ data (contacts, WhatsApp messages and leads that a business stores in Engazly), the business is the Data Fiduciary and we act as its Data Processor: we process that data only to provide the service, on the business’s instructions.

If you are a customer of a business that uses Engazly, please contact that business first about your data. We will help them respond.

• Account data: name, work email, mobile number, business name, role and password (stored only as a secure hash).
• Billing data: plan, billing details you give us (such as GSTIN and billing address) and payment references. We do not store card numbers.
• Customer content: contacts, WhatsApp messages and media, notes, leads and follow-ups that a business adds or receives through connected sources (WhatsApp, IndiaMART, Google Ads, Facebook/Instagram lead forms, forwarded emails, CSV imports, website forms).
• Connection credentials: access tokens and keys for the services a business connects (stored encrypted).
• Usage and device data: log-in times, IP address, browser type and actions in the app, for security and support.
• Enquiries: what you send us through the contact form, email, phone or WhatsApp.

• To provide, secure and support the service, including sending WhatsApp messages and notifications that you or your team ask for.
• To create your account, verify you and manage your subscription and invoices.
• To answer your enquiries and send service messages (for example, password resets and plan reminders).
• To prevent misuse and fraud, and to meet legal obligations.
• To improve Engazly, using aggregated statistics that do not identify you or your customers.

We process account data with your consent and for the legitimate uses allowed by the DPDP Act (such as providing a service you asked for). Businesses using Engazly are responsible for having a lawful basis — including any consent WhatsApp requires — to message and store data about their own customers.

We do not sell personal data, and we do not use your customers’ data for advertising. We share data only with:

• Meta Platforms (WhatsApp Business Platform, Facebook/Instagram lead forms), to send and receive messages and leads you have connected.
• Other lead sources you connect (IndiaMART, Google Ads, email providers), only to fetch your leads.
• Our hosting and infrastructure providers (Amazon Web Services, Mumbai region) and service providers for email and SMS, under confidentiality terms.
• Authorities, when required by law or to protect rights and safety.

Data is stored in India (AWS Mumbai). It is encrypted in transit (HTTPS) and at rest; connection tokens are additionally encrypted by us. Each business’s data is kept separate, and within a business, team members see only what their role allows. Access by our staff is limited, logged and only for support or security.

• Account and customer content: for as long as the workspace is active.
• After a workspace is closed: deleted within 30 days, except where the law requires us to keep records (such as invoices).
• Backups: overwritten within 14 days.
• Technical logs and raw webhook data: 30–90 days. Copies of emails we send: 30 days.

Under the DPDP Act you can ask to access, correct, update or erase your personal data, withdraw consent, nominate someone to act for you, and raise a grievance. Email support@engazly.io from your registered email address. Business admins can also export their data as CSV and delete contacts in the app.

For deletion, see Data deletion.

We use only essential cookies to keep you signed in and secure. We do not use advertising cookies. If we add analytics in the future, we will update this policy and ask for consent where required.

Engazly is a business tool and is not meant for anyone under 18. We do not knowingly collect children’s data.

We will post any changes here and update the date above. For significant changes, we will also notify account admins by email or in the app.

Grievance Officer: [Grievance Officer name], Engazly, [Registered office address]. Email: support@engazly.io. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.