This policy explains what AXSUS collects when you use Sowhat, why, and what
control you have. It covers https://app.converzen.tech.
Two kinds of data. Data about you, our customer —
your account and billing details. And data about your customers — the contacts and
conversations you bring in. For the second kind you are the data controller and we process
it on your instructions.
What we collect
About your account
- Name, email, phone, business name.
- Password, stored only as a cryptographic hash — never in readable form.
- Plan, subscription status and payment records.
- Log data: IP address, browser, timestamps, actions.
Data you bring in
- Contact records you create, import or receive.
- WhatsApp messages sent and received through your numbers, including attachments.
- Leads, deals, notes, forms and sales records you create.
Credentials you connect
WhatsApp access tokens, payment gateway keys and AI provider keys are
encrypted at rest, never sent to your browser, and never written to logs.
Why we process it
- To run the service — deliver messages, store your data, show your inbox.
- To bill you — process subscription payments.
- To support you — answer questions, investigate faults.
- To keep it safe — detect abuse, fraud and security incidents.
- To meet legal obligations — tax and accounting records.
We do not sell your data. We do not sell your customers' data. We do not use your
customers' conversations to train our own models.
Who we share it with
- Meta
- WhatsApp messages necessarily pass through Meta's WhatsApp Business
Platform to be delivered.
- Payment gateway
- Razorpay processes subscription payments. We do not store card
details.
- AI providers
- If you enable AI features, the relevant message content is sent to
the provider you configured, to generate a reply. Disable the feature and nothing is sent.
- Hosting
- Our servers run on rented infrastructure.
- Authorities
- Where we are legally required to disclose.
Where it is stored
On servers in Kuala Lumpur, Malaysia. Each workspace's data is held in its own separate
database, isolated from every other workspace.
How long we keep it
- While your account is open, so the service works.
- After closure you have 30 days to export; then we delete your workspace data.
- Invoices and tax records for as long as Indian law requires.
Security
- Traffic encrypted in transit with TLS.
- Third-party credentials encrypted at rest.
- Passwords hashed, never stored readably.
- Databases backed up nightly, backups restore-tested.
- Production access restricted.
No system is perfectly secure. If a breach affects your data we will tell you and the
relevant authority as the law requires.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you may ask us to tell you what
personal data we hold, correct anything inaccurate, delete your data (subject to records we
must keep by law), withdraw consent where processing relies on it, or nominate someone to
act for you. Write to ianandparaman@gmail.com; we respond within 30 days.
If a request concerns someone you messaged through the platform, send it to the
business that holds that relationship — our customer, not us. We will help them action it.
Cookies
One session cookie to keep you signed in, and local browser storage for interface
preferences such as your theme. No advertising or cross-site tracking cookies.
Children
The service is for businesses, is not directed at children, and we do
not knowingly collect data from anyone under 18.
Changes
Updates are posted here with a new date. Material changes are notified in
the app or by email.
Contact
- Data fiduciary
- AXSUS
- Address
- No 880 E, Parvathi Nagar, KTC Nagar, Mangammal Salai, Tirunelveli, Tamil Nadu 627011, India
- Email
- ianandparaman@gmail.com
- Also known as
- Global Marketing School, a registered unit of AXSUS
- Phone
- +91 96779 00677
- Udyam
- UDYAM-TN-18-0090596