Data Processing
Last updated: June 2026
Roles
For personal data of your end-customers processed through Watx, you are the data controller and Watx is the data processor. We process that data only on your documented instructions, which include your use of the product’s features.
Scope of processing
We process contact details and message content across WhatsApp, Instagram and web chat solely to provide the service: routing, storage, delivery via the Meta Cloud API, automations, AI replies you configure, and reporting.
Security measures
Per-workspace isolation at the database level, encryption of credentials and tokens at rest, encryption in transit, access controls, outbound URL guarding on customer-supplied endpoints, and audit logging.
Sub-processors
We use sub-processors including our cloud host, Meta (WhatsApp Business Cloud API), Stripe and Razorpay (payments), and an embeddings/LLM provider where you use included AI credits. We give notice of material changes so you can object.
International transfers
Where data is transferred across regions, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data subject requests
We provide tooling and reasonable assistance so you can fulfil access, correction, deletion and portability requests from your end-customers.
Return & deletion
On termination we delete or return end-customer personal data within a defined window, except where retention is required by law.
Contact
To sign a DPA or request our sub-processor list, email info@watx.in.