WhatsApp Automation Privacy Policy

This notice explains how Underpitch handles information through the Underpitch Automation WhatsApp service. It covers the automated service menu and callback-request workflow, not all features of the Underpitch website or the separate services of financial-product providers.

Who operates this service

Underpitch is based in Ahmedabad, Gujarat, India. For questions about this service or your information, email underpitch2022@gmail.com.

Information processed

When you message the bot, it processes your WhatsApp phone number, message identifiers, message timestamps, message text or menu selections, language preference, and conversation stage. If you agree to request a callback, it records your name, chosen service, preferred callback time, phone number and request time. It also stores queued replies and technical sending status to operate the service and prevent duplicate processing.

Please do not send PAN, Aadhaar, account passwords, OTPs, bank or card details, medical records, or financial documents to this bot. Information you voluntarily type can be processed as message text even when the bot has not asked for it.

How information is used

The bot uses this information to present English or Gujarati menus, process your selections, record callback requests for the Underpitch team, manage conversation preferences, troubleshoot delivery, and control message volume. It asks for agreement before collecting a name and preferred callback time. Requesting a callback is not consent to promotional campaigns.

This version uses predefined responses. It does not send your messages to a generative-AI service, make investment decisions, execute transactions, or decide eligibility for insurance, loans or credit. A callback request is not a confirmed appointment.

Service providers and access

Messages pass through WhatsApp and Meta's WhatsApp Business Platform. The bot runs on Underpitch's GoDaddy hosting. These providers process information needed to provide their services, subject to their own terms and privacy notices. The Underpitch team can access callback records to respond to enquiries. The automated workflow does not forward callback records to investment, insurance or lending providers.

See WhatsApp's privacy policy and GoDaddy's privacy policy for their practices, including processing locations and retention.

Storage and retention

Bot records are stored in a private server folder outside the public website directory. The scheduled cleanup removes incoming and outgoing message records and callback requests older than 30 days, and conversation records that have not been updated for 30 days. Processed incoming message text is cleared from the incoming queue, while information needed for a callback may remain in the conversation and callback records until cleanup.

Cleanup depends on the scheduled task running. The callback export is refreshed when the active worker completes. Hosting logs, provider records, backups, downloaded copies and any separate customer records are not erased by the bot's database cleanup and may follow different retention processes. Contact Underpitch about information held outside the bot.

Your choices and deletion requests

Send STOP to stop automated replies, or START to restart. STOP does not delete stored information. The stopped preference is stored in the conversation record and is subject to the retention period above.

To request access, correction, or deletion of information held by Underpitch for this bot, email underpitch2022@gmail.com with the subject WhatsApp data request. Include the WhatsApp number used, with country code, and describe your request. We may ask you to confirm control of that number before acting. Do not send an OTP, password or identity document by email. Requests are handled manually by Underpitch; sending an email does not itself trigger automatic deletion.

Underpitch will review the request and explain the action taken and any information that must be retained. Deletion of Underpitch's records does not delete messages on your device or records independently held by WhatsApp or other providers.

Security and changes

The bot uses HTTPS, validates incoming webhook signatures, and keeps its credentials and customer database outside the public website folder. No system can guarantee complete security. Report a privacy or security concern to the email above. This notice will be updated when the service's data practices change.