Privacy policy

Last updated: 29 October 2026

This policy explains how RADHAMADHAV WEBSTORE LLP, a Limited Liability Partnership registered in India (GSTIN 27ABJFR6148J1ZO), operating MeAPI by TheWebStore028 (“MeAPI”, “we”, “us”) at meapi.in, login.meapi.in and onboard.meapi.in, handles personal data. It is written with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them in mind.

1. Two roles: our customers’ data and their customers’ data

• Account data — about the businesses and people who sign up for MeAPI and their team members. For this data we decide why and how it is processed (we are the data fiduciary).
• Customer content — the contacts, WhatsApp messages, media, templates, knowledge-base documents and other data our customers put into MeAPI about their customers. We process this only on our customer’s instructions to provide the service (we act as a data processor). The business using MeAPI is responsible for having a lawful basis and the consents needed to message its customers, including WhatsApp opt-in.

2. What we collect

• Account and contact details: name, business name, email address, WhatsApp / phone number, password (stored only as a one-way hash), and agent logins you create.
• Billing details: plan, invoices, GSTIN and billing address if you give them, and payment references. Card, UPI and bank details are handled by our payment partners (Razorpay, PayPal); we do not store card numbers. For manual UPI payments we store the transaction reference and the payment screenshot you upload, privately.
• WhatsApp connection data: your WhatsApp Business Account and phone number IDs, and the access token Meta issues to us when you connect through Meta’s Embedded Signup (stored encrypted).
• Customer content: as described in section 1.
• AI provider keys you add (stored encrypted, never shown again) and AI usage records (token counts, estimated cost).
• Technical data: IP address, browser type, log-in times and security logs, used to keep accounts secure and the service running.
• Support communication: emails and WhatsApp messages you send us.
• Demo requests: the name, business name, WhatsApp number, city, team size and message you send with “Book a free demo”, plus the page, IP address and browser it came from — used only to contact you about the demo.
• Advertising measurement (only if you accept cookies): Meta Pixel cookies and events on our public pages, and the matching signup and payment events we send to Meta — see section 9.

The public website does not use advertising or analytics trackers. It stores only your light/dark theme choice in your browser. The panel keeps your sign-in session in your browser’s local storage.

3. Why we use it

• To create and run your account and provide the features you use (inbox, campaigns, automation, AI, integrations, API).
• To send messages through Meta’s WhatsApp Business Platform on your behalf.
• To process payments, issue invoices and meet tax and accounting obligations.
• To send service emails (password resets, renewal reminders, security and quality alerts).
• To keep the service secure, prevent abuse and fix problems.
• To comply with law and lawful requests.

We rely on your consent and on the “legitimate uses” allowed by the DPDP Act, including performing the contract with you. We do not sell personal data and do not use customer content to train AI models.

4. Who we share it with

• Meta Platforms — WhatsApp messages and related data pass through Meta’s WhatsApp Business Platform, which is governed by Meta’s own terms and policies.
• AI providers you choose — when you add your own key (for example OpenAI, Google, Anthropic, Groq, Mistral, DeepSeek, xAI, OpenRouter, Microsoft Azure or a custom endpoint), the text needed for an AI feature (customer messages, knowledge-base passages, your instructions) is sent to that provider under your account with them, and their terms apply.
• Payment partners — Razorpay and PayPal, to take payments.
• Meta Platforms, for advertising measurement — only if you accept cookies; see section 9.
• Integrations you connect — such as Shopify, WooCommerce, Google Sheets or your own webhook URLs, which receive the data you configure.
• Service providers who host our servers, send our emails and back up data, under confidentiality obligations — see the list of sub-processors below.
• Authorities, when the law requires it.
• Resellers / white-label partners — if you signed up through a MeAPI partner, that partner can see your account and billing details needed to support you.

Sub-processors

These providers process personal data for us, or on your instructions, to run MeAPI:

• Our hosting provider — servers, storage and backups.
• Hostinger — email (sending and receiving our service and support emails).
• Meta / WhatsApp Business Platform — delivering and receiving WhatsApp messages, templates and media.
• Razorpay — card, UPI, net-banking and wallet payments.
• PayPal — international payments.
• The AI provider you choose — only when you add your own AI key, and only for the AI features you use.

5. Where data is stored and for how long

Your data is stored and processed on secure servers operated by us and by our service providers, which may be located outside India. Data sent to Meta or to an AI provider may be processed in other countries under their terms.

• Account and customer content: for as long as your account is active, and 30 days after it ends so you can export it, after which it is deleted from active systems. Backups are overwritten within 30 days after that.
• Billing and tax records: for the period required by Indian tax law (currently up to eight years).
• Security logs: up to 180 days.

6. How we protect it

• Encrypted connections (HTTPS) everywhere.
• WhatsApp access tokens, AI provider keys, webhook secrets and payment-gateway secrets are encrypted at rest; passwords and API keys are stored only as one-way hashes.
• Uploaded documents and payment screenshots are stored privately and never published at a public address.
• Access is limited by role; agents cannot see billing, connection settings or AI keys.
• Daily backups. If a personal data breach occurs we will inform affected users and the Data Protection Board of India as the law requires.

7. Your rights

You can access and correct most of your data in the panel and export your contacts; to delete your account, write to us. Under the DPDP Act you may also ask us for a summary of your data, correction or erasure, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Write to support@meapi.in. If you are a customer of a business that uses MeAPI, please contact that business first — we will help them respond.

8. Grievance Officer

Ankit Panchal, Grievance Officer
RADHAMADHAV WEBSTORE LLP · Address available on request (Contact us)
Email: ankit@meapi.in

• Acknowledgement: we acknowledge every grievance within 24 hours of receiving it.
• Resolution: we resolve it within 15 days of receipt, as required by Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Personal data (DPDP Act): grievances about your personal data under the Digital Personal Data Protection Act, 2023 are answered within the same 15 days, and in any case within the maximum period set under the Digital Personal Data Protection Rules, 2025 (90 days). If you are not satisfied with our answer, you may complain to the Data Protection Board of India after using this grievance process.

Please include your account email, what the grievance is about and any message or payment references, so we can act quickly.

9. Cookies and advertising measurement (Meta Pixel)

Our public pages — meapi.in (including the blog, /docs and /learn) and the signup page on onboard.meapi.in — show a cookie banner. Until you click Accept, no advertising cookie is set and the Meta Pixel is not loaded. The logged-in API Panel (login.meapi.in) and the admin console never load it.

If you accept, we use the Meta Pixel and Meta’s Conversions API to measure which of our ads lead to signups and payments:

• In your browser: the Pixel sets Meta’s _fbp / _fbc cookies and reports page views, which feature or pricing pages you viewed, WhatsApp chat buttons you clicked, forms you submitted, and a completed signup or started trial.
• From our server: for a signup, a started free trial and a payment we approve, we send Meta the event with your email address and phone number hashed (SHA-256) — Meta receives a fingerprint, not the plain address or number — together with the _fbp / _fbc cookie values, your IP address, browser user agent, and, for a payment, the amount before GST. We keep those cookie values, IP and user agent with your account only for this purpose.

Meta processes this data under its own privacy policy. We store your choice in a meapi_consent cookie for 180 days. You can change it at any time withCookie settings(also in the footer), or by deleting our cookies; declining stops further measurement. To have stored measurement data deleted, write to us (section 12).

10. Children

MeAPI is a business service and is not meant for anyone under 18.

11. Changes

We will post updates here and, for significant changes, tell account owners by email before they take effect.

12. Contact

RADHAMADHAV WEBSTORE LLP · GSTIN 27ABJFR6148J1ZO · Address available on request (Contact us)
support@meapi.in · WhatsApp +91 91676 96213