Privacy Policy

Wingly (wingly.space) is a WhatsApp CRM and AI agents platform developed and operated by Irsoftwares (irsoftwares.in), a software company based in India. In this policy, "we", "us", and "our" refer to Irsoftwares.

For privacy-related queries, contact us at privacy@irsoftwares.in.

• Account data: name, email address, and password when you create an account.
• Business data: WhatsApp Phone Number ID and Access Token you provide to connect your Meta Business account.
• Customer data: contact names and phone numbers of your end-customers, stored on your behalf as data processor.
• Usage data: message counts, conversation history, automation logs, and feature usage — used solely to operate the service and enforce plan limits.
• Payment data: billing plan and payment status. Full payment card details are never stored by us; they are processed by Razorpay (a PCI DSS-compliant payment gateway operated by Razorpay Software Private Limited).
• Technical data: IP address, browser type, and device information collected automatically for security and fraud prevention.

• To provide, operate, and improve the Wingly platform.
• To process payments and manage your subscription via Razorpay.
• To send transactional emails (account confirmation, billing receipts, trial expiry notices).
• To enforce plan limits and detect abuse.
• To respond to support requests.

We do not sell your personal data to third parties.

Your data is stored in Supabase (hosted on AWS) with row-level security (RLS) enforced at the database layer. WhatsApp access tokens are encrypted at rest using AES-256-GCM. All data in transit is protected by TLS 1.2 or higher.

We retain your account data for the duration of your subscription and for 90 days after account deletion, after which it is permanently purged. You may request immediate deletion by contacting support@wingly.space.

We use the following third-party services to operate Wingly:

• Meta (WhatsApp Business API) — to send and receive WhatsApp messages on your behalf.
• Razorpay — to process subscription payments. Razorpay's Privacy Policy applies to payment data.
• Supabase — for database and authentication infrastructure.
• Resend — for transactional email delivery.
• OpenRouter / Google Gemini — for AI agent inference (messages are processed by the AI model; no message content is stored by OpenRouter beyond their stated retention policy).

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to processing of your data for marketing purposes.

To exercise any of these rights, email privacy@irsoftwares.in.

We use only essential cookies required for authentication (Supabase session cookies). We do not use advertising or analytics cookies.

We will notify you of material changes to this policy via email or an in-app notice at least 14 days before they take effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Irsoftwares
irsoftwares.in
privacy@irsoftwares.in