01The short version
WAFlow is built by Techno Ved IT Solutions ("we", "us"). It runs as a Chrome extension inside WhatsApp Web, backed by a small license server that checks whether the WhatsApp number you're using has an active license.
Your actual work — boards, contacts, chatbot flows, canned replies, broadcast lists, calendar entries and settings — is stored only in your own browser and is never uploaded to us. The license server sees a narrower, separate set of data: the WhatsApp number a license belongs to, and basic technical details (device, browser, IP-derived location) used to keep that license honest. The sections below spell out exactly what that means, table by table.
We don't sell personal data, and we don't run advertising or third-party trackers on either the extension or this website.
02What stays on your device
Everything you actually build with WAFlow lives in Chrome's own storage APIs, local to your browser profile:
- Kanban boards, dashboards, cards and their tags, notes and reminders
- The CRM detail drawer for each contact
- Chatbot flows, keyword-triggered Message Bot rules, and canned
/shortcuts - Broadcast lists, schedules and delivery reports
- Calendar entries and appointments
- Your display settings, accent colour and blur/privacy preferences
None of this is transmitted to Techno Ved IT Solutions or to any server we operate. If you export a backup file yourself, that file is written to your own computer — we don't receive a copy.
03What the license server collects
To confirm a license is genuine, active and being used within reasonable bounds, the extension periodically asks our license server "is this WhatsApp number licensed?" — nothing about your chats or contacts is included in that question. The server records the following, tied to your license record:
| Data point | Why we collect it |
|---|---|
| WhatsApp number the number a license is issued to | A license is tied to a number, not a device — this is how we match the two. |
| License key | Identifies which license is being checked. |
| Device identifier, browser and OS e.g. Chrome 128 on Windows | Lets you see (and us investigate, on request) which browsers are actively using a license. |
| Extension version | Support and compatibility — knowing what version reported an issue. |
| IP address, and an approximate location derived from it country, city-level, not GPS-precise | Fraud and abuse prevention — flags a license being shared far outside its expected use. |
| Timestamps first seen, last seen, validation count | Shows a license is actively in use, and powers the "last active" details you see in your own dashboard. |
| Event logs e.g. "license applied", "license suspended", with the IP and browser that triggered them | An audit trail, mainly for the admin or reseller who issued the license, and for troubleshooting support requests. |
This happens automatically whenever WhatsApp Web (with WAFlow installed) loads or reloads. It is not optional while a license key is applied — without it, WAFlow has no way to confirm the license is still valid, suspended or revoked.
04Account and trial data
If a license is issued to you — whether purchased directly, resold to you by one of our resellers, or requested as a free trial through our public trial request page — we (or the reseller who issued it) hold basic contact details against that license:
- Name, email address and mobile/WhatsApp number
- Company name and country, where supplied
The trial request page also records the IP address the request came from and a small anti-abuse signal, so one WhatsApp number can't be used to generate unlimited trials.
If you're a reseller, admin or Super Admin who signs in to the license portal itself, we additionally hold your own name, email, login history (last sign-in time and IP) and, if you choose to add them, your own company's support details — these are shown to the customers you issue licenses to, so they know who to contact.
05The AI Assistant and your own API keys
WAFlow's AI Assistant works with your own API key for OpenAI, Google Gemini or Anthropic — whichever you choose to configure. When you use it, your browser talks directly to that provider using your key. We never see, receive, log or store the messages you send through it, and we are not a party to your agreement with that provider — their own privacy policy governs what they do with that traffic.
08How long we keep it
License and account data is kept for as long as the license or account is active, plus a reasonable period afterwards for support and accounting purposes. Trial requests that never convert to a paid license are kept for a limited period and then removed. You can ask us (or your reseller) to delete your data sooner — see Your rights below.
09How it's protected
- Every license check the server answers is signed with an RSA-SHA256 key pair; the extension verifies that signature before trusting the answer, so a tampered response is rejected outright.
- All traffic between the extension and the license server runs over HTTPS.
- Passwords for portal accounts are hashed, never stored in plain text.
- Access inside the portal is role-based — a reseller's account can only ever see its own customers, never another reseller's or the Super Admin's full customer list.
10Your rights and choices
Depending on where you're located, you may have the right to ask us to access, correct, export or delete the personal data we (or a reseller, on our platform) hold about you. To exercise any of these, write to us using the details below — if you were licensed through a reseller, we'll route the request to them where the data is theirs to act on, or handle it ourselves where it's ours.
11Children's privacy
WAFlow is a business tool and is not directed at, or knowingly used to collect data from, children. If you believe a child's data has reached us in error, contact us and we'll remove it.
12Changes to this policy
If this policy changes in a way that matters — what we collect, or who we share it with — we'll update the effective date at the top of this page. Continuing to use WAFlow after a change means you accept the updated policy.
13Contact us
Questions about this policy, or a request about your own data, go to:
Near Spearhead Academy, Pune 411004, India