Privacy Policy

Last updated: 05/08/2026

This Privacy Policy explains how Kfami Technologies Private Limited ("Kfami", "we", "us") collects, uses, shares and protects personal information when you use the WAH Kfami mobile application and the website at wah.kfami.com (together, the "Service").

WAH Kfami is a business tool. It lets you manage customer contacts, run WhatsApp messaging campaigns, reply to customer conversations, and manage your account and billing. Because of this, you will give us two different kinds of information: information about you, and information about your customers. This policy covers both.

1. Information we collect

1.1 Information you give us

Account details — first and last name, email address, phone number, password, and your profile photo if you upload one.
Business and address details — company name, address, city, state, postal code and country where you provide them.
Identity verification (KYC) — documents and information you submit to verify your account, where verification is required.
Support information — the content of support tickets, attachments you send, and your correspondence with us.
Team members — if you invite agents to your account, we collect their name, email and the permissions you assign them.

1.2 Contacts you choose to import

With your permission, the app can read the contact list stored on your device so you can select people to add to your customer list. This is optional. We only read your address book after you grant the permission and open the contact picker, and we only transmit and store the contacts you actually choose to add.

You may also add customer contacts manually or by importing a file. Contact records may include name, phone number, email address, tags, notes and message history.

Your responsibility: when you upload contact details about other people, you are responsible for having a lawful basis to do so, and for any consent or notice those people are entitled to under the law that applies to you. For that data you are the controller and we act as your processor.

1.3 Content you create in the Service

Messages — the content of messages you send and receive through the Service, including campaign content, templates and replies.
Voice recordings — if you record a voice message in a conversation, we process the audio file so it can be delivered.
Files and media — images, video and documents you attach to messages, campaigns or support tickets.
Notes — internal notes you save against a contact or conversation.

1.4 Payment and wallet information

We record your wallet balance, deposits, withdrawals, subscription plan and transaction history. Card and bank details are entered on the payment provider's own page, which opens in a secure browser view. We do not receive or store your full card number.

1.5 Information collected automatically

Device information — device model, operating system version and app version, used for compatibility and troubleshooting.
Push notification token — an identifier issued by the platform so we can send you notifications.
Log and usage data — IP address, timestamps, actions taken in the Service, and error reports.
Website data — on wah.kfami.com, cookies and similar technologies as described in our Cookie Policy.

1.6 Social sign-in

If you sign in with Google or LinkedIn, we receive your name, email address and profile picture from that provider. We do not receive your password. Your use of that provider is governed by its own privacy policy.

2. Permissions the app asks for

Each permission is requested only when you use the feature that needs it, and you can decline or revoke it in your device settings. Declining a permission only disables the related feature.

Permission	Why we ask	Required?
Contacts	To let you pick people from your device address book and add them to your customer list.	Optional
Microphone	To record voice messages in a conversation.	Optional
Photos, media and files	To attach images, video and documents to messages, campaigns and support tickets, and to save media you receive.	Optional
Notifications	To alert you to new messages and campaign activity.	Optional
Network access	To connect to our servers. The app cannot function offline.	Required

3. How we use your information

To create and administer your account, and to authenticate you.
To deliver the Service — sending and receiving messages, running campaigns, and storing your contacts and conversations.
To process deposits, withdrawals, subscriptions and billing.
To verify identity where KYC is required, and to meet anti-fraud and legal obligations.
To send service messages such as delivery reports, security alerts and account notices.
To provide customer support and respond to your requests.
To monitor reliability, diagnose faults and improve the Service.
To detect, investigate and prevent fraud, abuse and violations of our terms.
To send marketing about our own products, where you have opted in or where permitted by law. You can opt out at any time.

We do not sell your personal information, and we do not sell or rent your contact lists. We do not use the content of your customer conversations to train advertising profiles.

4. Messaging through the WhatsApp Business Platform

The Service sends and receives messages through the WhatsApp Business Platform, operated by Meta. When you send a message or run a campaign, the message content and the recipient's phone number are transmitted to and processed by Meta in order to deliver it, and delivery and read receipts come back to us the same way.

This means Meta processes that data under its own terms and privacy policy, which you should read. You are responsible for complying with WhatsApp's Business Messaging Policy, including its rules on obtaining opt-in from recipients before messaging them.

5. Who we share information with

We share personal information only as described below.

Meta Platforms — message content, recipient phone numbers and delivery status, to operate the WhatsApp Business Platform.
Google — Firebase Cloud Messaging for push notifications, and Google Sign-In if you use it.
Pusher — to deliver messages to your device in real time.
[PAYMENT PROVIDER NAME — confirm, e.g. Razorpay] — to process deposits and withdrawals.
Hosting and infrastructure providers — [NAME YOUR HOSTING PROVIDER] which stores data on our behalf.
Professional advisers — auditors and lawyers, under confidentiality obligations.
Authorities — where we are required to by law, court order or a valid legal request, or to protect our rights or someone's safety.
In a business transfer — if we are involved in a merger, acquisition or sale of assets, subject to this policy continuing to apply.

Service providers may only process personal information on our instructions and are bound by contract to protect it.

6. International transfers

We are based in India. Some of our providers process data in other countries, including the United States and the European Union. Where personal information is transferred out of your country, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep information

Account information — for as long as your account is open, and then for 90 days after deletion.

8. Deleting your account

You can request deletion of your account and its associated data at any time:

In the app — go to Account → Delete Account, which opens the request page.
On the web — visit https://wah.kfami.com/delete-account.
By email — write to info@kfami.com from your registered email address.

What is deleted: your profile, your customer contacts, your conversations and message content, your uploaded media, and your notes.

What is kept: transaction and invoice records we are legally required to retain, and records needed to resolve disputes or enforce our agreements. Anonymised statistics that cannot identify you may be retained.

We will confirm your identity before acting on a deletion request, so that nobody can close your account on your behalf. Requests are actioned within [PERIOD — we recommend 30 calendar days to stay inside GDPR's one-month window].

Before you delete: if your wallet holds a balance, [STATE WHAT HAPPENS — e.g. withdraw it first; balances are forfeited on deletion; we refund to the original method]. This must be answered explicitly.

9. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you, and receive a copy.
Correct information that is inaccurate or incomplete.
Delete your personal information.
Object to or restrict certain processing.
Withdraw consent at any time, without affecting processing already carried out.
Receive your data in a portable, machine-readable format.
Complain to your data protection authority.

To exercise any of these, email info@kfami.com. We respond within one month.

If you are in the EEA or UK: we process your information to perform our contract with you, to meet legal obligations, on the basis of your consent for optional features such as contacts access and marketing, and for our legitimate interests in securing and improving the Service.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.

If you are in India: you may contact our Grievance Officer, named in section 13, under the Digital Personal Data Protection Act, 2023 and the Information Technology Rules.

10. Security

We protect personal information with encryption in transit and at rest, access controls that limit which staff can reach production data, authentication controls on your account, and regular review of our systems. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authority as required by law.

11. Children

The Service is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above, and for significant changes we will notify you in the app or by email before they take effect.

13. Contact us

Kfami Technologies Private Limited
204–205, Tower C, 2nd Floor, Unitech Cyber Park, Sector 39, Gurugram, Haryana 122003, India
Email: info@kfami.com
Phone: +91 99150 95580

This policy is governed by the laws of India, and the courts at Gurugram, Haryana have exclusive jurisdiction.