Privacy Policy

Last updated: March 25, 2026

1. Introduction

Depra ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered customer support platform, including our voice, WhatsApp, email, and live chat services.

Data Controller: Depra
Email: team@depra.in / team@depra.ai

By using our services, you agree to the collection and use of information in accordance with this policy. Our use of messaging platforms, including WhatsApp, is governed by WhatsApp Business Policy and Meta's Privacy Policy.

2. Information We Collect

We collect the following categories of information:

  • Account Information: Name, email address, phone number, company name, and billing details when you create an account.
  • WhatsApp & Messaging Data: Your WhatsApp phone number, WhatsApp profile name, message content, message timestamps, read receipts, and conversation history exchanged through the WhatsApp Business Platform.
  • Voice & Call Data: Voice call recordings, transcripts, call duration, and caller identification data processed through our voice AI services.
  • Usage Data: Information about how you interact with our platform, including conversation logs, agent configurations, analytics data, and interaction timestamps.
  • Customer Data: Data you upload or process through our platform, including knowledge base documents, conversation transcripts, and business transaction data (order details, support ticket content).
  • Technical Data: IP address, browser type, device type, operating system, and cookies.

3. How We Collect Information

We collect information through:

  • Direct interactions when you create an account, configure agents, or contact support.
  • Messages you send and receive through our supported channels (WhatsApp, email, live chat, voice).
  • Automated technologies such as cookies and analytics tools when you use our website and platform.
  • Third-party platforms including Meta's WhatsApp Business Platform, which transmits message data to us for processing.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you opt in to receive WhatsApp messages, marketing communications, or other messaging services.
  • Contractual Necessity: To provide and maintain the services you have requested.
  • Legitimate Interest: To improve our platform, prevent fraud, and ensure security.
  • Legal Obligation: To comply with applicable laws, regulations, and legal processes.

5. How We Use Your Information

  • To provide and maintain our AI customer support services across all channels (voice, WhatsApp, email, live chat).
  • To process your conversations and deliver accurate AI-powered responses.
  • To send transactional messages (order confirmations, shipping updates, appointment reminders) via WhatsApp and other channels.
  • To send marketing and promotional messages only with your explicit consent.
  • To send authentication messages (OTPs, verification codes) when requested.
  • To improve and optimize our platform and AI models.
  • To send you important updates about your account and our services.
  • To comply with legal obligations.

6. WhatsApp Messaging Consent & Opt-In

We obtain your explicit consent before sending you messages via WhatsApp. By opting in, you acknowledge and agree to the following:

  • Opt-In Method: You consent to receive WhatsApp messages by actively opting in through our website form, checking a consent checkbox during signup, sending a keyword (e.g., "START") to our WhatsApp number, or providing consent through an in-app toggle.
  • Message Types: You may receive transactional messages (order updates, support responses), customer service messages, marketing and promotional messages (only with separate explicit consent), and authentication messages (OTPs).
  • Message Frequency: Message frequency varies based on your interactions and the message types you have consented to. Transactional messages are sent as triggered by your activity; marketing messages are limited in frequency.
  • Channel: Messages will be delivered specifically via WhatsApp to the phone number you provided.
  • Cost: Standard data rates from your mobile carrier may apply. We do not charge you for receiving WhatsApp messages.
  • AI-Powered Responses: Some or all responses you receive via WhatsApp may be generated by our AI agent. You will always have the option to request a human agent.

7. Opt-Out & Unsubscribe

You can opt out of receiving WhatsApp messages at any time through any of the following methods:

  • Reply "STOP" to any WhatsApp message from us.
  • Use the unsubscribe option within the message or conversation.
  • Contact us at team@depra.in to request removal.
  • Block our business number directly on WhatsApp at any time.

Opt-out requests are processed immediately. You will receive a confirmation message acknowledging your unsubscribe request. You may opt out of marketing messages while continuing to receive transactional and support messages related to active orders or requests.

8. Data Sharing & Third-Party Disclosure

We do not sell your personal information. We may share data with the following categories of third parties:

  • Meta / WhatsApp: Messages sent and received via WhatsApp are transmitted through Meta's WhatsApp Business Platform. Meta processes this data in accordance with their own Privacy Policy.
  • Business Solution Providers: We may use WhatsApp Business Solution Providers (BSPs) such as Twilio to facilitate message delivery and voice services.
  • Cloud Infrastructure: Your data is hosted on Amazon Web Services (AWS) with data centers located in secure regions.
  • AI & Automation Providers: We use AI services (including OpenAI) to process conversations and generate responses. Message content may be sent to these providers for processing.
  • Analytics Providers: We use analytics tools to understand platform usage and improve our services.
  • Legal & Regulatory: We may disclose data when required by law, regulation, legal process, or government request.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

9. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest (AES-256).
  • Role-based access controls and authentication.
  • Regular security audits and vulnerability assessments.
  • Secure cloud infrastructure with AWS.
  • WhatsApp messages are end-to-end encrypted by the WhatsApp platform.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

  • Account Data: Retained for as long as your account is active, plus 30 days after account deletion.
  • Conversation & Message Data: WhatsApp messages, chat transcripts, and voice recordings are retained for up to 12 months from the date of the interaction, unless a longer period is required by law.
  • Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely.
  • Backup Data: Encrypted backups are retained for up to 90 days.

After the retention period, data is securely deleted or anonymized. Meta may retain certain metadata per their own policies. You may request early deletion of your data at any time (see "Your Rights" below).

11. Your Rights

Depending on your location, you have the following rights regarding your personal data:

For All Users

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data.
  • Opt-Out: Withdraw consent for messaging at any time.
  • Portability: Request your data in a structured, machine-readable format.

For EU/EEA Residents (GDPR)

  • Right to restrict processing of your data.
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time (withdrawal is as easy as giving consent).
  • Right to lodge a complaint with your local Data Protection Authority.

Cross-border Transfers: If your data is transferred outside the EEA, we ensure adequate safeguards are in place through Standard Contractual Clauses (SCCs) or equivalent mechanisms.

For California Residents (CCPA/CPRA)

  • Right to know what personal information is collected and how it is used.
  • Right to delete your personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information (we do not sell your data).
  • Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@depra.com. We will respond to your request within 30 days.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at privacy@depra.com, and we will take steps to delete such information.

13. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our platform. These include essential cookies (required for platform functionality), analytics cookies (to understand usage patterns), and preference cookies (to remember your settings). You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

14. Messaging Compliance

Our use of the WhatsApp Business Platform complies with the WhatsApp Business Policy and WhatsApp Commerce Policy. We do not use WhatsApp to send prohibited content, including messages related to regulated goods or services that violate Meta's policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and sending a notification via email or WhatsApp where appropriate. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.