Privacy Policy

TenXAbility India Private Limited ("10xAbility", "we", "us", "our") operates Founders Chat (the "Service"), a WhatsApp business messaging and automation tool used by our partners and their teams to reply to leads and customers, run automations, and send broadcasts over WhatsApp. This policy explains what information we collect, why, and the choices you have.

1. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and password (stored as a salted hash, never in plain text).
• WhatsApp contact & conversation data — the phone numbers, names, and message content (text, media, template messages) of the contacts you message through your connected WhatsApp Business Account, plus any tags, notes, or pipeline stage you record against them.
• Business configuration — quick replies, automation/flow definitions, broadcast lists, and AI agent knowledge-base entries you or your team create inside the Service.
• Payment data — subscription payments are processed by Razorpay. We store the resulting transaction reference and amount; we never receive or store your card, UPI, or bank credentials.
• Usage & device data — login timestamps, IP address, and browser/device information, used for account security.

2. WhatsApp Business Platform Data

Founders Chat connects to Meta's WhatsApp Business Platform using your own WhatsApp Business Account (WABA) and access credentials. Messages you send and receive through the Service are transmitted via Meta's platform, in addition to being processed by us so we can show them in your shared inbox and run the automations and AI agent you configure. We do not use your contacts' WhatsApp data for advertising and do not sell it. Meta's own Business Data Transfer terms and Privacy Policy also apply to how Meta processes this data on the platform side.

3. Optional AI Agent

If you enable the AI auto-reply agent, you supply your own API key for your chosen provider (OpenAI or Anthropic). Conversation content needed to generate a reply is sent directly to that provider using your credentials — we do not route it through our own AI account or use it to train any model. Your API key is encrypted at rest and never shown again in full once saved.

4. How We Use Information

We use the information above to:

• Operate the Service — authenticate you, run your shared inbox, and store your business records.
• Run the automations, quick replies, broadcasts, and AI agent replies you configure.
• Process subscription payments and send billing receipts.
• Send transactional email — account and billing notifications.
• Detect and prevent fraud, abuse, or unauthorized access.

5. Who We Share Information With

We do not sell your personal information. We share it only with:

• Meta — to deliver and receive WhatsApp messages through your connected WhatsApp Business Account.
• Your chosen AI provider (OpenAI or Anthropic) — only if you enable the AI agent, using your own API key.
• Razorpay — to process subscription payments and refunds.
• Infrastructure providers (Supabase and our hosting provider) — who host our database and servers under contractual confidentiality obligations.
• Law enforcement or regulators, only where legally required.

6. Data Retention

We retain account, contact, and conversation data for as long as your account is active, and for a reasonable period afterward to meet accounting and legal obligations. You may request deletion of your account and associated personal data at any time — see Section 9.

7. Your Rights & Choices

• You can review and update your profile information at any time from Settings.
• You can disconnect your WhatsApp Business Account or remove your AI provider key at any time from Integrations/Settings.
• You can request a copy of, correction to, or deletion of your personal data by contacting us (Section 9).

8. Security

Passwords are hashed. Sessions use short-lived, HttpOnly authentication cookies. API keys and access tokens are encrypted at rest. We use HTTPS for all traffic between your browser and our servers. See our Cookie Policy for details on the cookies we use.

9. Children's Privacy

The Service is intended for business use by adults operating as our partners or their team members. It is not directed at children under 18, and we do not knowingly collect personal information from children.

10. International Users

Our servers are located in regions used by our infrastructure providers. By using the Service you consent to your information being processed there, in accordance with this policy and applicable Indian law.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after a change constitutes acceptance of the revised policy.

12. Contact Us

Questions about this policy or your data? Reach us at connect@10xability.com or WhatsApp +91 96489 52820. See our Contact Support page for our registered office address.