Legal

Privacy Policy

Last updated: April 2026

1. Overview

This Privacy Policy explains how weYou World ("we", "us") collects, uses, and protects your personal data when you use Envoy AI. We are committed to compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

2. Data We Collect

Account Data: Name, email, phone number, business name provided during registration.

Content Data: Documents you upload, service tree configurations, booking details.

Customer Data: Information your customers provide through the chatbot widget (name, email, phone, chat messages).

Usage Data: IP addresses (hashed), session data, page URLs, activity logs.

Payment Data: Processed by Razorpay. We do not store card numbers or UPI PINs.

3. Purpose of Processing

We process your data to: (a) provide and improve the Service; (b) send transactional emails and WhatsApp notifications; (c) process payments; (d) generate analytics; (e) comply with legal obligations.

4. Consent (DPDP Act, Section 6)

By creating an account, you consent to the processing of your personal data as described in this policy. You may withdraw consent at any time by deleting your account or contacting us at privacy@weyouworld.com.

5. Data Storage & Security

Data is stored on servers in India. We use encryption in transit (TLS) and at rest. API keys are stored as SHA-256 hashes. Passwords are hashed with bcrypt. We conduct regular security reviews.

6. Data Sharing

We do not sell personal data. We share data only with: (a) AI providers for chatbot responses — only document content, never personal identifiers; (b) Razorpay for payment processing; (c) Meta for WhatsApp notifications; (d) law enforcement when legally required.

7. Data Retention

Active account data is retained while your account exists. After account deletion, data is retained for 30 days then permanently erased. Activity logs are automatically deleted after 90 days.

8. Your Rights (DPDP Act, Section 11-14)

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) erase your data; (d) withdraw consent; (e) nominate someone to exercise your rights. Contact: privacy@weyouworld.com.

9. Data Principal's Duties (DPDP Act, Section 15)

As a data principal, you must: (a) provide accurate information; (b) not impersonate others; (c) not suppress material information during registration.

10. Grievance Officer

For data protection concerns:
Email: privacy@weyouworld.com
Response time: Within 72 hours.

11. Changes

We may update this policy periodically. We will notify you via email of material changes.