New: Instagram comment-to-DM automation is now in WapifySee how
WapifyWapify

Privacy Policy

Last updated: 28 October 2026

This Privacy Policy explains how The Custom Solution ("we", "us"), based in India, collects, uses, shares and protects information in Wapify, our software for businesses to manage customer conversations on WhatsApp and Instagram (the "Service"), available at wapify.io. By using the Service you agree to this policy.

1. Who this policy covers

  • Our customers: businesses and their team members who sign up for Wapify.
  • End users: people who message, call, comment or buy from those businesses on WhatsApp or Instagram. For their data, the business is the data controller and we process it on the business's behalf, only to provide the Service.

2. Information we collect

  • Account information: name, email address, login details, organization name and team roles.
  • Connected accounts: when a business connects WhatsApp Business or Instagram through Meta's login, we receive account IDs, phone number IDs, the Instagram username and access tokens granted by the business. We use the permissions the business approves, such as sending and receiving messages, managing message templates, reading and replying to comments, and managing catalogs.
  • Messages and contacts: messages, media, form answers, orders, call records and comments sent to or from the business's connected accounts, plus contact details such as phone number, WhatsApp or Instagram name and username, tags and notes the business adds.
  • Ad referral details: when someone messages a business from a Click-to-WhatsApp ad, Meta includes the ad's ID, headline and link, which we show to that business.
  • Billing information: plan, invoices and payment status. Card and bank details are entered on our payment provider's pages (Zoho Payments) and are not stored by us. Payments that end users make to a business inside WhatsApp are handled by Meta and the business's payment gateway (such as Razorpay); we only store the order and its payment status.
  • Technical data: IP address, browser type, request logs and anonymous page-view and performance statistics (Vercel Analytics, which does not use cookies). We use essential cookies only, to keep you signed in and remember your selected organization.

3. How we use information

  • To provide the Service: show conversations in the inbox, send replies, campaigns and automated replies set up by the business, and run bot flows, forms, orders and calls.
  • To keep accounts secure, prevent abuse and fix problems.
  • To bill customers and send service messages about their account.
  • To meet legal obligations.

We do not sell personal data, do not use WhatsApp or Instagram data for advertising, and do not use it for any purpose other than providing the Service to the business that connected the account.

4. Data from Meta platforms (WhatsApp, Instagram, Facebook)

Data we receive through Meta's APIs is used only to provide the features the business has turned on, in line with the Meta Platform Terms and Developer Policies. Access tokens are encrypted (AES-256-GCM) and are never shown to team members. A business can disconnect an account at any time, which stops all access; you can also remove Wapify from your Facebook or Instagram settings under "Apps and websites".

5. Sharing

We share data only with service providers that help us run the Service, under contracts that protect it:

  • Meta Platforms (WhatsApp Business Platform, Instagram API) to send and receive messages;
  • Supabase (database and login, hosted in Mumbai, India) and Vercel (hosting);
  • Zoho Payments for subscription billing;
  • webhooks or API endpoints that a business itself configures to receive its own data.

We may also disclose data when required by law or to protect our rights and users' safety.

6. Security

Data is sent over HTTPS, stored in access-controlled databases where each business can see only its own data, and access tokens are encrypted. Webhooks from Meta are verified with a signature before they are processed. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as the law requires.

7. Retention

We keep data while the business's account is active. When a business deletes its account or asks us to delete its data, we delete it within 30 days, except records we must keep by law (such as invoices). Technical logs are kept for up to 30 days.

8. Your rights and data deletion

You can ask to access, correct or delete your personal data, or withdraw consent. Customers of a business using Wapify should contact that business first; we will help it respond. See our data deletion instructions for how to have your data deleted.

9. Children

The Service is meant for businesses and is not directed at children under 18.

10. Changes

We may update this policy. We will change the date above and, for important changes, notify customers by email.

11. Contact

The Custom Solution
F1-2, First Floor, Hamidia Road, Bhopal, Madhya Pradesh 462001, India
Email: info@thecustomsolution.in
WhatsApp: +91 83193 74006