Privacy policy

WavesFlo is operated by Eclipse Private Limited, which is the entity responsible for the personal data described below.

From this website: what you type into a form, the page you came from, and campaign parameters in the URL.

This site runs Vercel Web Analytics and Speed Insights, which are anonymous and set no cookie. Google Analytics and Google Tag Manager load only if you accept analytics cookies; the next section says what they set. None of it is joined to your platform account, and none of it is sold or shared for advertising.

From the platform: the WhatsApp data your connected accounts already hold — group membership, message metadata and delivery acknowledgements — plus the catalogue data you upload.

From the inbox: what people write to your connected numbers, and what your team writes back. How long that content is kept is your workspace's setting — a year by default, and as little as nothing at all. When it expires, the message remains as a record that it happened and its content is cleared. Attachments are kept only to the extent your workspace asks for them, and are served from links that expire within two hours.

On your first visit a banner asks whether we may use analytics cookies. Until you accept, this site sets no cookies and loads nothing from Google. Reject is offered at the same size as Accept, and the site works the same either way.

If you accept, Google Analytics sets the cookies below. They hold a random identifier that lets Google Analytics recognise a returning browser, so its reporting is per visitor rather than purely aggregate. The consent we pass to Google denies advertising storage and ad personalisation.

Your choice, and whether you paused the page's animation, are kept in your browser's local storage rather than in a cookie. Neither is sent to us.

To change your mind, use Cookie settings at the foot of any page. Rejecting after accepting deletes the Google Analytics cookies, and from the next page onward nothing loads from Google.

• –_ga: Google Analytics, a random visitor identifier, kept for up to two years
• –_ga_ followed by an identifier: Google Analytics, the state of the current visit, kept for up to two years

Phone numbers, message bodies, access tokens and session credentials are excluded from application logs by rule, and identifiers are redacted before storage. This is a property of the system rather than an operational habit. Conversation content is held for the inbox to show, for as long as your workspace's retention setting says, and not in the logs or the audit trail.

Some group members are visible to us only as a privacy identifier rather than a phone number. We never convert one into a phone number by inference. Where a member cannot be resolved, exports say so instead of guessing.

You can ask what we hold about you, ask for it to be corrected, and ask for it to be erased. Withdrawing consent is as easy as giving it: a reply asking to stop is recorded and honoured before every subsequent send, permanently.

Write to privacy@wavesflo.com. If you are not satisfied with the response, the same address reaches the person responsible for grievance redressal.

Platform data is processed in India unless your agreement says otherwise. The data processing addendum covers sub-processors, and the current list is available on request.