Legal

Privacy Policy

Last updated: August 2026  |  Version 2.0  |  Effective immediately

1. Introduction & Scope

YIELD AI ("we", "us", "our") is an enterprise WhatsApp AI automation platform operated by YIELD AI, registered at Torna Complex, Rajgurunagar, Pune, Maharashtra, India - 410505. This Privacy Policy describes how we collect, use, store, and protect information when you:

• Visit our website at yieldai.space
• Use our WhatsApp AI automation services via the Meta Business API
• Connect your WhatsApp Business Account through our onboarding portal
• Interact with us via email or other communication channels

This policy applies to all data collected through our services and complies with applicable data protection laws, including India's Digital Personal Data Protection Act, 2023 (DPDPA) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Data We Collect

2.1 Business Client Data

When you onboard as a B2B client, we collect:

• Identity Data: Business name, contact person name, designation
• Contact Data: Work email address, business phone number
• Account Data: Meta Business Account ID, WhatsApp Business Account (WABA) ID, phone number IDs linked to your account
• Configuration Data: AI system instructions, automation flow settings, lead qualification criteria
• Billing Data: Subscription plan details (payment processing handled by third-party processors; we do not store raw card details)

2.2 WhatsApp API Conversation Data

When your AI agent operates via the Meta WhatsApp Business API, we process:

• Message Content: Inbound and outbound message text, media metadata (not raw media files unless explicitly configured)
• Contact Metadata: Lead phone numbers (hashed where possible), interaction timestamps, conversation state
• Qualification Data: BANT signals, lead scores, and conversation outcomes generated by the AI agent
• Webhook Events: Message status updates (sent, delivered, read) from Meta's infrastructure

Important: All WhatsApp conversation data belongs to you (the B2B client). We act as a data processor on your behalf. Your end-users' data (leads) is processed under your authority as the data controller.

2.3 Technical & Usage Data

• IP addresses, browser type, operating system (collected for security and fraud prevention)
• API request logs (retained for 30 days for debugging purposes)
• Dashboard usage analytics (anonymized, used to improve our product)

3. How We Use Your Data

• Service Delivery: Operating the AI agent, processing WhatsApp messages, and delivering automation workflows on your behalf
• Account Management: Managing your subscription, providing customer support, and communicating service updates
• Security & Compliance: Detecting fraudulent activity, enforcing our Terms of Service, and complying with Meta's WhatsApp Business Policy
• Product Improvement: Analyzing anonymized, aggregated usage patterns to improve AI accuracy and platform performance
• Legal Obligations: Responding to valid legal requests from competent authorities as required by law

We will never use your data or your leads' data for advertising targeting, profiling for third-party benefit, or any purpose not explicitly stated above.

4. Data Storage & Security

We implement industry-standard security measures to protect all data under our control:

• Encryption at Rest: All stored data is encrypted using AES-256
• Encryption in Transit: All API communications use TLS 1.3
• Access Controls: Role-based access controls (RBAC) ensure only authorized personnel can access client data
• Infrastructure: Our backend services are hosted on secured cloud infrastructure. Data is processed primarily in India and/or the EU
• Backups: Encrypted backups are retained for 30 days and then permanently deleted
• Audit Logs: All access to client data is logged and regularly audited

5. Third-Party Data Processors

We share data with the following third-party processors to deliver our service. All processors are bound by data processing agreements:

• Meta Platforms, Inc.: WhatsApp Business API infrastructure (message routing, delivery). Governed by Meta's Data Processing Terms.
• PocketBase: Database and real-time data synchronization backend
• HubSpot / Salesforce: CRM synchronization (only when you explicitly configure CRM integration)
• Custom Webhook Endpoints: Data is forwarded to your specified webhook URLs only upon your explicit configuration

We do not use advertising networks, data brokers, or analytics platforms that retain your business or lead data.

6. Data Retention

• Active client accounts: Data retained for the duration of your subscription plus 90 days after termination
• WhatsApp conversation logs: Retained for 90 days by default; configurable to shorter periods upon request
• API request logs: Retained for 30 days, then automatically purged
• Billing records: Retained for 7 years as required by Indian financial regulations
• Upon account deletion, all personal and business data is permanently deleted within 30 days, except where retention is legally required

7. Your Rights

As a data subject under applicable laws (DPDPA, GDPR), you have the right to:

• Access: Request a copy of all data we hold about you or your business
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to specific types of processing
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at support.yieldai@gmail.com. We will respond within 30 days.

8. WhatsApp API Specific Policies

Our use of the Meta WhatsApp Business API is subject to Meta's Platform Terms and Policies. Key commitments:

• We only send messages to users who have opted in to receive communications from your business
• We do not send unsolicited bulk messages or spam
• All message templates are pre-approved by Meta before use
• We maintain opt-out mechanisms as required by Meta's Messaging Policy
• We do not use WhatsApp data to target users with ads on any platform

9. Cookies & Tracking

Our marketing website uses minimal, privacy-respecting tracking:

• Strictly necessary cookies: Session management for the client portal (required for functionality)
• No third-party advertising cookies
• We do not use Facebook Pixel, Google Ads, or similar advertising trackers on client portal pages

10. International Data Transfers

If you are located outside India, your data may be transferred to and processed in India. Such transfers are made with appropriate safeguards in place to ensure your data remains protected to the standard required by your local data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify active clients by email at least 14 days before material changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy inquiries, data subject requests, or concerns:

Enterprise Name: YIELD AI
Registered Address: Torna Complex, Rajgurunagar, Pune, Maharashtra, India - 410505
Privacy Contact Email: support.yieldai@gmail.com
Response Time: Within 30 business days