1. Commitment to Privacy & Data Protection
GenesisWay Technology is firmly committed to upholding the privacy rights of all users, businesses, and developers. Our service architecture is designed on the principle of data minimization: we only process what is strictly necessary to route API requests to your paired WhatsApp multi-device instances.
We comply with applicable provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023 of the Republic of India.
2. Information We Collect
- Account Registration Details: When you register on WhatsAPI, we collect your name, email address, mobile phone number, and optional company name.
- API Credentials & Usage Telemetry: We record generated API keys, endpoint invocation counts, response HTTP status codes, and IP addresses solely for rate limiting, DDoS mitigation, and billing quota management.
- Session Status Metadata: We store the operational status of your paired WhatsApp instances (e.g., "ready", "scan_qr", "STARTING"), battery/connection state, and your WhatsApp public push name as reported by the gateway.
3. Information We DO NOT Collect, Retain, or Monetize
We NEVER read, harvest, sell, license, or share your outbound message contents, inbound chats, media files, contact directories, or conversation logs with any third parties or advertisers.
Customer message logs in your dashboard are stored locally in your account's dedicated database for your personal reference, and can be completely wiped at any moment via the "Clear All Logs" button.
4. WhatsApp Multi-Device Pairing & Cryptographic Keys
WhatsAPI utilizes multi-device web session emulation. When you scan the QR code using your WhatsApp application:
- Your device exchanges cryptographic session keys directly with WhatsApp's authentication servers.
- These authentication tokens are stored in an encrypted, isolated container vault dedicated solely to your user account.
- If you delete or disconnect an instance, all associated session data and encryption keys are immediately and permanently erased from our server storage.
5. Payment & Billing Information Security
All subscription payments for WhatsAPI are handled through the GenesisUPI Payment Gateway (genesisupi.com) via official UPI QR rails (NPCI framework).
We do not collect or store your bank account passwords, UPI MPIN, debit/credit card numbers, or CVVs. All payment transactions occur inside your banking application (Google Pay, PhonePe, Paytm, or BHIM).
6. Data Security Standards & Protocols
All data in transit between your application and WhatsAPI is encrypted with modern TLS 1.3 cryptography.
Continuous automated traffic inspection blocks brute-force attempts and unauthorized intrusion.
7. Your Rights & Data Erasure (Right to Be Forgotten)
Under Indian DPDP Act guidelines, you have the right to inspect, correct, export, or request the complete deletion of your account and personal data. You may exercise these rights anytime by:
- Clearing message history directly within the dashboard console.
- Deleting connected WhatsApp instances to immediately destroy session tokens.
- Submitting an account deletion request to official@app-genesis.in. Upon verification, all associated records are permanently purged within 48 hours.
8. Grievance Officer & Contact Details
In accordance with the Information Technology Act, 2000 and Rules made thereunder, the name and contact details of our designated Grievance Officer are provided below: