How we handle your data

1. Introduction

Voji ("we", "our", or "us") is committed to protecting the privacy of all individuals who use our WhatsApp Business API platform, website and related services. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website or use our platform.

By accessing or using Voji, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide

We collect information you voluntarily provide when you:

• Create an account or register for our services — name, email address, phone number, company name
• Fill out a contact or demo request form — name, email, phone, company details
• Apply for a job — name, email, phone, resume, and any other information you submit
• Communicate with our support or sales teams — correspondence records

2.2 Information collected automatically

When you visit our website, we automatically collect certain information, including:

• IP address, browser type, operating system, device information
• Pages visited, time spent, referral source, and other usage data
• Cookies and similar tracking technologies (see Section 6)

2.3 Information from WhatsApp API integration

When you use Voji's platform to connect with the WhatsApp Business API, we process the following data on your behalf:

• Message content, timestamps, and delivery status
• Contact information of your customers (phone numbers, names)
• Message templates and broadcast campaign data
• Analytics and engagement metrics

This data is processed solely to provide the service. We do not sell or share your customers' data with third parties for their own marketing purposes.

3. Lawful basis and purpose of processing

We process your personal data only when we have a lawful basis to do so under the DPDP Act, 2023 and other applicable laws. Our lawful bases include:

• Consent: Where you have given explicit consent for a specific purpose (e.g., marketing communications, contact form submissions)
• Contract: Where processing is necessary to fulfil a contract with you (e.g., providing our platform services)
• Legal obligation: Where processing is required to comply with applicable laws and regulations
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided your rights do not override those interests

How we use your information

• To provide, maintain and improve our platform and services
• To process transactions and manage your account
• To communicate with you about updates, security alerts, and support
• To send marketing communications (with your consent, where required)
• To detect, prevent and address technical issues and fraud
• To comply with legal obligations

4. Data sharing and disclosure

We may share your information in the following circumstances:

• Service providers: With third-party vendors who help us operate our platform (cloud hosting, analytics, email delivery) under strict data processing agreements
• Legal requirements: If required by law, regulation or legal process, or to protect our rights and safety
• Business transfers: In connection with a merger, acquisition or sale of assets — with notice to you
• With your consent: For any other purpose with your explicit consent

We never sell your personal information or your customers' data to third parties.

5. Data retention

We retain your information for as long as your account is active or as needed to provide you with services. We may retain certain data longer to comply with legal obligations, resolve disputes, or enforce our agreements. When data is no longer needed, we securely delete or anonymise it.

Message content and campaign data are retained in accordance with our data retention policies, which you can configure within your account settings.

6. Cookies and tracking

We use cookies and similar tracking technologies to improve your experience, analyse usage, and support our marketing efforts. You can control cookie preferences through your browser settings.

Types of cookies we use:

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors interact with our site
• Marketing cookies: Used to deliver relevant advertisements and measure their effectiveness

7. Data security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Regular security audits and penetration testing
• Access controls and authentication protocols
• Employee training on data protection best practices

While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and enable two-factor authentication where available.

8. Your rights (Data Subject Rights)

Under the Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your data, subject to legal retention requirements
• Right to Portability: Request transfer of your data to another service provider
• Right to Grievance: File a complaint with our Grievance Officer
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please submit a request via our Data Subject Access Request (DSAR) portal or contact us. We will respond within 7 days as per DPDP Act.

9. Third-party services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

10. International data transfers

Your information may be transferred to and processed in countries other than your own (including India, where our servers are primarily located). When we transfer data across borders, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) with our service providers
• Data processing agreements that comply with applicable laws
• Adequacy decisions where recognised by law

By using our services, you consent to the transfer of your data to countries that may have different data protection laws than your jurisdiction. We take reasonable steps to ensure your data receives an equivalent level of protection.

11. Children's data and parental consent (DPDP Act Section 9)

Our services are not directed to individuals under the age of 18. In compliance with Section 9 of the DPDP Act, 2023:

• We do not knowingly collect, process or store personal data of children
• We do not engage in behavioural monitoring or targeted advertising directed at children
• Where age-verification is feasible, we may implement an age gate mechanism
• If we become aware that a child has provided us with personal data without verifiable parental consent, we will promptly delete such data and disable the associated account

If you are a parent or guardian and believe your child has provided us with personal information, please contact our Grievance Officer immediately at ambesh@voji.in so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, via email or platform notification. Your continued use of Voji after changes constitutes acceptance of the updated policy.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer to oversee our compliance with data protection laws and to serve as a point of contact for data protection authorities and data subjects.

• DPO Name: Ambesh Kumar Gautam
• Email: ambesh@voji.in
• WhatsApp: +91 8178658664

14. Grievance Officer

In accordance with Section 13 of the DPDP Act, 2023, we have appointed a Grievance Officer to address any complaints or concerns regarding the processing of your personal data.

• Name: Ambesh Kumar Gautam
• Email: ambesh@voji.in
• Web: File a grievance

15. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: sales@voji.in
• DPO: ambesh@voji.in
• Grievance Officer: ambesh@voji.in
• WhatsApp: +91 8178658664