WAAPI Privacy Notice

Effective: 15 October 2026. This notice covers WAAPI at waapi.ehelium.in, operated by Helium Enterprises Private Limited. The company website has a separate privacy policy.

Our role

For account administration, security and support, Helium uses information to operate the service. For a client's recipient and conversation data, we process information to provide that client's authorised messaging service. The client determines why it contacts recipients and is responsible for the required permissions.

Information processed

Business and team account details; connected WhatsApp Business account and phone-number identifiers; access credentials needed for the authorised connection; recipient numbers and profile details; messages, templates, attachments and verification-message content supplied to the service; opt-in and opt-out records; delivery statuses, webhook events, usage records, security logs and support communications.

How we use it

To connect authorised business accounts, deliver messages, display conversations and delivery results, enforce permissions and opt-outs, measure usage, investigate failures, prevent abuse and provide support. Clients should provide only information needed for their messaging purpose, and must not send passwords or live OTPs in support requests.

Providers and access

WhatsApp messages and related account data are exchanged with Meta's WhatsApp Cloud API. Hosting and technical providers process information needed to operate the platform. Access is limited by workspace and role, with administrative access used for service operation and support. We do not sell recipient or conversation data.

Retention

Retention differs by record type and the business's configured policy. Message history is retained for the workspace's operational needs unless a retention policy or deletion request applies. Raw webhook and status payload cleanup has a 30-day default, subject to processing and outstanding delivery retries. Audit, consent and suppression records are retained separately for accountability and to prevent unwanted messaging; deleting a conversation does not automatically remove those records. Backups and legally required records may remain for their applicable lifecycle.

Requests and deletion

Recipients should first contact the business that messaged them. Businesses and users can request access, correction, export or deletion through info@ehelium.in. We verify authority and explain any necessary retained records. See our data deletion instructions.

Security and location

The platform uses HTTPS, scoped workspace access, protected credentials and activity records. No system guarantees absolute security. Meta or infrastructure providers may process data outside India under their applicable terms.

Contact

Privacy and grievance contact: Ajay Majethiya, Helium Enterprises Private Limited, info@ehelium.in, +91 73595 20911. Our registered address appears below. We update this notice when our practices change.