AiOneChat

Privacy Policy

How we collect, use, and protect your information.

Last updated · May 20, 2026

Aionechat is operated by SolvSutra Software("we", "our", "the platform"), a company based in India. We operate the website aionechat.com and the WhatsApp Business API platform at app.aionechat.com(collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. SolvSutra Software is the data controller responsible for the personal data processed through the Service.

1. Information we collect

Information you provide

  • Account data - name, email, password, company name, phone number you provide at sign-up.
  • WhatsApp Business Account data- your WhatsApp Business Account (WABA) ID, phone number ID, display name, and business profile information you authorize us to access via Meta's Embedded Signup flow.
  • Contact list data - phone numbers and metadata you upload to send campaigns or build automations.
  • Payment data - billing details collected and stored by our payment processor (Razorpay). We do not store card numbers.

Information collected automatically

  • WhatsApp messages and metadata- message content, timestamps, delivery and read receipts received via Meta's Cloud API webhooks for accounts you have connected.
  • Usage logs - IP address, browser type, pages viewed, timestamps, and referring URL.
  • Cookies and similar tracking - to keep you signed in and remember preferences.

2. How we use information

  • Operate the Service - onboard WhatsApp accounts, deliver and receive messages.
  • Provide AI auto-reply, automation rules, broadcasts, and analytics features that you explicitly enable.
  • Process payments and prevent fraud.
  • Send service emails (account, billing, security). We will not send marketing emails unless you opt in.
  • Improve product quality, troubleshoot issues, and maintain security.

3. Data processors and sub-processors

We do not sell your data. We share Platform Data only with the following processors and service providers, strictly to operate the Service:

  • Meta Platforms, Inc. (United States) - origin of WhatsApp Cloud API Platform Data; required to send and receive messages on your behalf.
  • MongoDB, Inc. - MongoDB Atlas (India / United States) - managed cloud database; stores merchant account data, encrypted access tokens, message logs, and webhook history.
  • Hostinger International Ltd. (India) - VPS hosting for the Aionechat application backend.
  • Cloudflare, Inc. (United States / India edge) - CDN, DNS, and TLS termination for aionechat.com and app.aionechat.com.
  • Razorpay Software Private Limited (India) - payment processing for subscriptions and wallet top-ups. Does not receive WhatsApp Platform Data.
  • OpenAI, LLC(United States) - only when the merchant enables the AI Chatbot feature; receives message context to generate replies. Per OpenAI's API policy no data is used to train models.
  • SolvSutra Software (India) - the operating company of Aionechat; internal staff process Platform Data under strict access controls to operate and support the Service.
  • Legal compliance- disclosure may be required by valid legal process. See “Government requests” below.

4. Data security

  • WhatsApp access tokens are encrypted at rest with AES-256-GCM.
  • All traffic between you and the Service is encrypted via HTTPS / TLS 1.2+.
  • Meta webhook signatures are verified via HMAC-SHA256 before processing.
  • Passwords are hashed with bcrypt (no plaintext storage).
  • Access to production systems is restricted and audited.

5. Data retention

We retain account, message, and billing data while your account is active and for up to 90 days after deletion (unless longer retention is required for legal or compliance reasons). You may request earlier deletion - see our Data Deletion page.

6. Your rights

Subject to applicable law (GDPR, CCPA, India DPDP Act), you have the right to:

  • Access a copy of your data
  • Correct inaccurate information
  • Delete your account and associated data
  • Opt out of marketing communications
  • Port your data to another provider

Email privacy@aionechat.com to exercise any of these rights.

7. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children.

8. International transfers

Data may be stored or processed in countries other than your own (including the US and EU). Where required, we use standard contractual clauses.

9. Government and law enforcement requests

We may receive lawful requests for user data from government agencies, courts, or law enforcement. SolvSutra Software follows these principles when handling such requests:

  • Legality review - every request is reviewed for legal validity, jurisdiction, and authority before any data is disclosed.
  • Right to challenge - we reserve the right to challenge any request that is overly broad, unlawful, or otherwise improper.
  • Data minimization - we disclose only the minimum data strictly required to comply with a valid request; we do not provide bulk access.
  • Documentation - every request and our response is documented internally, including the legal basis and personnel involved.
  • User notice - where legally permitted, we notify the affected user before disclosing their data.

In the past 12 months we have not provided personal data to any public authority in response to national security requests.

10. Changes to this policy

We may update this policy. Material changes will be notified via email and via a banner on the dashboard 14 days before they take effect.

11. Contact

SolvSutra Software · operator of Aionechat · aionechat.com
Country: India
Email: privacy@aionechat.com
Data Protection Officer: dpo@aionechat.com