Privacy Policy

This policy applies to:

• visitors to our website;
• people and businesses who request a demo, email us, or message our WhatsApp number;
• businesses that subscribe to aibaatchit; and
• people who message a WhatsApp Business number that a customer has connected to aibaatchit.

For our website, our own sales and support, and messages sent from aibaatchit’s own WhatsApp number, Rishi Automation Studio is the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

For conversations on a customer’s WhatsApp Business number, that customer decides why the messages are sent and what the agent is allowed to ask. They are the data fiduciary for those chats. We process that personal data on their instructions so the agent, inbox, reminders, and handoff can work.

WhatsApp is operated by Meta. Messages you send or receive on WhatsApp also go through Meta’s systems under WhatsApp’s Privacy Policy and the WhatsApp Business terms that apply to the sender.

Website and demos. The demo form asks for your name, business name, WhatsApp number, and industry. That form does not upload those details to our servers. It opens WhatsApp with a prefilled note so you can send them to us. If you send the note, or you email or message us, we keep that conversation so we can reply and follow up on the demo you asked for.

Our website host may keep ordinary server logs, such as IP address, browser type, date, and the page requested, for security and to keep the site available. The marketing site does not use advertising cookies or a third-party analytics tracker.

The service. When a business connects WhatsApp, we process what the Cloud API and the business configuration make available to run the product:

• phone number, WhatsApp profile name, message text, media, and timestamps;
• details the agent collects to do the job the business set, such as an appointment slot, a budget, a product interest, or a delivery area;
• business settings: FAQs, scripts, booking rules, and who on the team should take over;
• account and billing contacts for that business, including name, email, phone, and invoice details.

The marketing website does not ask you to create a password.

We use personal data to:

• answer demo requests, support questions, and grievances;
• run the AI agent: reply, qualify leads, book, remind, and hand off to the business’s team;
• send the messages a business has asked us to send, including reminders and updates;
• honour stop-message requests and keep a record that we did;
• protect the service, investigate abuse, and fix failures;
• invoice customers and keep accounting records; and
• meet duties under the DPDP Act and other laws that apply to us.

We do not sell personal data. We do not use client conversation content to advertise other businesses to those people.

aibaatchit uses the WhatsApp Business Platform (Cloud API). Message content needed to deliver and answer a chat passes through Meta’s infrastructure. Template approval, quality rating, and delivery are governed by Meta’s rules. We connect businesses through that official platform.

Where the DPDP Act or WhatsApp’s rules require consent, the business that sends the message is responsible for having it. You can withdraw consent or stop messages at any time, free of charge:

• reply STOP or UNSUBSCRIBE in the same WhatsApp chat;
• use our stop messages page; or
• email rishi@aibaatchit.com.

A valid request is actioned within 2 business days. If the messages came from a business using aibaatchit, we suppress that number from further business-initiated messages on that business’s agent and tell the business. If you message that number again later, the business may reply to the conversation you started.

Stopping messages leaves an appointment, order, or payment you already made in place. Say so in the same request if you also want that cancelled, and we will pass it to the business.

We share personal data with:

• the business whose WhatsApp number the conversation belongs to, and the staff they name;
• Meta, to send and receive WhatsApp messages;
• hosting and infrastructure providers who process data for us under contract;
• payment and accounting providers when a business pays an invoice; and
• authorities or advisers when the law requires it, or to establish or defend a legal claim.

We do not give personal data to advertisers or data brokers.

Demo and support messages are kept while we are talking with you and for a reasonable period afterwards so we can continue that relationship, then deleted or reduced to what an invoice or legal record still needs.

Conversation data in a customer’s workspace stays for the subscription, plus a short wind-down so the business can export it and so open issues can be closed, unless we agree a shorter period or the law requires longer. Stop-message records are kept so we can show the number stays opted out. Server logs are kept for a short operational period.

When a customer ends the service, or a data fiduciary asks us to delete personal data we process for them, we delete it or return it, except an opt-out list, invoices, and anything we must keep for a legal claim or a legal duty.

Access to customer workspaces is limited to people who need it to provide the service. The website is served over HTTPS, and WhatsApp traffic uses the protections of the Cloud API. If we learn of a personal-data breach that creates a risk to people, we will inform the affected business and, where the DPDP Act requires it, the people concerned and the Data Protection Board of India.

Subject to the DPDP Act, you may ask us for:

• a summary of the personal data we process and the processing;
• correction, completion, or erasure;
• a nominee for your rights; and
• withdrawal of consent, which includes stopping messages.

If the data sits in a business customer’s workspace, contact that business first, because they decide the purpose of the chat. If you cannot reach them, contact us and we will route the request. We may ask you to confirm that the phone number or email is yours before we act.

Email a grievance to rishi@aibaatchit.com or message +91 96259 91946 on WhatsApp. We acknowledge grievances within 2 business days and resolve them within the time the DPDP Act and its rules require. If you are not satisfied, you may complain to the Data Protection Board of India.

aibaatchit is a service for businesses. We do not knowingly design agents to collect personal data from anyone under 18. If you believe a child has sent personal data to a number we operate, email us and we will delete it.

We are based in India. If a provider processes personal data outside India, we do so only as the DPDP Act allows.

We will post updates on this page and change the date above. If a change materially affects a business customer, we will also email the account contact we have on file.

Rishi Automation Studio
Email: rishi@aibaatchit.com
WhatsApp: +91 96259 91946
Stop messages: https://aibaatchit.com/stop-messages

For a formal notice that needs a postal address, email us and we will provide it. The Terms & Conditions govern use of the service.