This Privacy Policy (“Policy”) explains how WWAI Technologies Pvt. Ltd. (“WWAI”, “we”, “us” or “the Data Fiduciary”) collects, uses, shares and protects personal data when you visit https://wwaitech.com or otherwise engage with us. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) read with the Digital Personal Data Protection Rules, 2025.
You can request this Policy in Hindi or any other language set out in the Eighth Schedule to the Constitution of India by writing to admin@wwaitech.com.
1. Who is the Data Fiduciary?
WWAI Technologies Pvt. Ltd.
Registered office: 2nd Floor, SCF-155, HUDA Market, Sector 9, Faridabad 121006, Haryana, India
Email: admin@wwaitech.com
2. Personal data we collect
We collect only the data we need. The specific items we collect are:
- Enquiry data (contact form): your name, email address, company name (optional) and the message you write.
- Consent data: a record of whether you accepted the privacy notice when submitting the form, with a timestamp.
- Technical / server-log data: IP address, device and browser type, pages viewed, referring URL, request method and response code, request timestamps.
We do not knowingly collect any sensitive personal data (financial information, government IDs, health records, biometric data) through the Site. Please do not share such data through the contact form.
3. Why we process your data (purpose and lawful basis)
We process personal data on specific, itemised purposes. One purpose per processing activity:
- Respond to your enquiry. We use your enquiry data to read, reply to and (if an engagement follows) continue corresponding with you. Lawful basis: your consent at the point of submission.
- Operate and secure the Site. We use server-log data to run the Site, prevent abuse and investigate incidents. Lawful basis: our legitimate uses under the DPDP Act for security, debugging and preventing fraud.
- Measure aggregate usage (optional). If you opt in to analytics in our cookie banner, we use a privacy-friendly analytics provider (Plausible) to understand aggregate traffic patterns. No individual profiles are built. Lawful basis: your consent.
- Comply with the law. We may process data to meet legal, regulatory or audit obligations. Lawful basis: compliance with Indian law.
We do not use personal data for automated decision-making, profiling or behavioural advertising.
4. Consent and withdrawal
Where we rely on consent, you give it by actively checking the consent box on the contact form or clicking an “Accept” option in the cookie banner. We do not use pre-ticked boxes.
Withdrawing your consent is as easy as giving it. You can:
- Change your cookie preferences at any time via the Cookie Settings link in the footer;
- Email admin@wwaitech.com to withdraw consent to any processing we are carrying out on the basis of consent;
- Clear the
wwai_cookie_consent_v1value from your browser's local storage to reset the banner.
Withdrawing consent does not affect the lawfulness of processing we carried out before the withdrawal. Once you withdraw consent, we will stop the relevant processing and, if there is no other lawful basis for keeping the data, erase it in line with Section 7 below.
5. Who we share data with
We do not sell personal data. We share limited data with a small set of trusted Data Processors that help us operate:
- Hosting infrastructure: Google Cloud (Cloud Run, Cloud Build, Cloud Storage) — processes the Site traffic and server logs.
- Email delivery: our in-house
wwai-mailerservice running on Google Cloud Run, which uses Gmail / Google Workspace to deliver enquiries to our inbox. - Analytics (only after consent): Plausible Analytics — cookieless, aggregate-only.
- Professional advisers: our lawyers, accountants and auditors, strictly on a need-to-know basis.
Every processor is bound by a written contract to use the data only on our instructions and to protect it adequately.
6. Cross-border transfers
Some of our processors (Google Cloud, Plausible) may process data outside India. We rely on their contractual safeguards and standard operating practices, and we will only transfer data to jurisdictions not restricted by the Central Government under the DPDP Act.
7. Retention and erasure
| Data | Retention period |
|---|---|
| Enquiry data (name, email, company, message) | Up to 24 months from last interaction. Then erased or anonymised. |
| Consent records (timestamped) | 7 years, to evidence consent in case of audit. |
| Server-log data | Up to 90 days. |
| Analytics data (if you opted in) | Aggregated at source; retained up to 26 months. |
| Cookie-preference record | 12 months (local storage) or until you reset it. |
We erase personal data when the retention period expires or when you withdraw consent and we have no other lawful basis to keep it, whichever is earlier.
8. Your rights as a Data Principal
Under the DPDP Act, you have the following rights with respect to the personal data we hold about you:
- Right to access — a summary of the personal data we hold about you and the processing activities we carry out.
- Right to correction, completion, updating and erasure — ask us to correct inaccurate or incomplete data or erase data that is no longer necessary.
- Right to grievance redressal — raise a complaint with our Grievance Officer (see Section 11).
- Right to nominate — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — see Section 4.
To exercise any right, email admin@wwaitech.com with the subject “DPDP request”. We will respond within 30 days.
9. Children's data
Our services are intended for business users. We do not knowingly process the personal data of children (individuals below 18 years of age under the DPDP Act) without verifiable parental consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe we have inadvertently collected a child's data, email admin@wwaitech.com and we will erase it promptly.
10. Security and breach notification
We follow reasonable security practices and procedures appropriate to the data we handle, including transport-layer encryption, access controls, principle of least privilege, logging and vendor due-diligence. In the event of a personal data breach that is likely to cause harm, we will notify affected Data Principals and the Data Protection Board of India in the manner and within the timelines prescribed by law.
11. Grievance Officer
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023:
Designation: Grievance Officer
Email: admin@wwaitech.com
Address: 2nd Floor, SCF-155, HUDA Market, Sector 9, Faridabad 121006, Haryana, India
Our response SLA: we will acknowledge grievances within 48 hours and resolve them within 30 days of receipt.
If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India constituted under the DPDP Act, 2023. Details of the Board's complaint procedure are published by the Ministry of Electronics and Information Technology (MeitY) at meity.gov.in.
12. Consent Managers
The DPDP Act allows Data Principals to give, manage and withdraw consent through a Consent Manager registered with the Data Protection Board of India. Once the Consent Manager framework is operational, we will accept, record and respond to consent decisions received through a registered Consent Manager in the same manner as decisions made on this Site.
13. Links to third-party sites
The Site may link to third-party websites (for example, Google Maps directions in our Contact section). We do not control those websites, and this Policy does not apply to them. Please read the privacy policies of any third-party sites you visit.
14. Changes to this Policy
We may update this Policy from time to time. The “last updated” date at the top will reflect the most recent change. Where a change materially affects how we process your personal data, we will highlight it on this page and, where appropriate, seek fresh consent.