DPDP Act, 2023 (India)

1. Our role

For the personal data of our own account holders — the people who sign up, configure a business, and pay for a plan — WhizzAct is the Data Fiduciary.

For the personal data your embedded widget collects from visitors to your website, you are the Data Fiduciary and WhizzAct is a Data Processor acting on your behalf under our Terms of Service. We process that data only to provide the service to you, and only in line with your instructions.

2. Notice and consent

We ask for personal data only where it is needed for a stated purpose, and we tell you that purpose at the point of collection — at signup, in billing, and in our Privacy Policy. Consent can be withdrawn at any time by writing to us; withdrawal doesn't undo processing already carried out lawfully, and it may mean we can no longer provide part of the service.

Where your widget asks a visitor for a name, phone number, or email address, the notice and consent obligation is yours as the Data Fiduciary for that collection. The platform helps you meet it: intro questions state what you're asking for, phone and email verification is opt-in per business, and a visitor can be allowed to decline to give a contact number and still use the chat.

3. Purpose limitation and retention

Personal data is used for the purpose it was collected for and no other. We do not sell personal data, we do not share it between tenants, and we do not use tenant or visitor data to train AI models. Chat sessions that never captured a contact detail are deleted automatically after 24 hours of inactivity. Other data is erased when it is no longer needed for its purpose — on account deletion, or on your instruction — except where retention is required by tax, accounting, or other law.

4. Rights of Data Principals

If we hold your personal data as Data Fiduciary, you have the right to:

• obtain a summary of the personal data we process about you and how we process it;
• have inaccurate or incomplete data corrected, completed, or updated;
• have your data erased when it is no longer needed for the purpose it was collected for;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity;
• have your grievance heard, through the escalation path in section 7 below.

If you are a visitor who used a chat widget on some other company's website, that business — not WhizzAct — is the Data Fiduciary. Raise your request with them; where they instruct us, we will action it.

5. Duties of Data Principals

The Act also asks you not to impersonate someone else when providing personal data, not to suppress material information, and not to file false or frivolous grievances. We ask the same.

6. Children's data

WhizzTalk is a business tool and is not directed at children. Accounts may not be created by anyone under 18. If your widget is likely to be used by children, you are responsible for obtaining verifiable parental consent before collecting their personal data, and you must not use the platform to track children or target advertising at them.

7. Grievance redressal

Write to our Grievance Officer at grievance@whizzact.com. We acknowledge every grievance and respond within the period prescribed under the Act. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

WhizzAct Private Limited

8. Security and breach notification

We apply reasonable security safeguards to prevent personal data breaches — the specific measures are listed on our Compliance page. In the event of a breach we will notify the Data Protection Board of India and every affected Data Principal, as required by the Act, and we will tell affected account holders promptly so they can meet their own obligations.

9. Transfers outside India

Account and chat data is hosted in India. Some sub-processors — AI providers and messaging services, listed on the Compliance page — process data outside India in the course of delivering their service. Such transfers are made only to countries not restricted by the Central Government under the Act.