Privacy Policy
Last updated: 6 September 2026
This policy explains what personal data AutoPend collects, why we collect it, who we share it with, and the choices you have. It covers our website, our WhatsApp messaging, and the enquiry forms we run on Facebook and Instagram.
The short version. If you fill in one of our enquiry forms, we get your name, phone number and email so we can contact you about the work you asked about. We reply to you on WhatsApp, and those replies are written by a person, not an AI. We use analytics to understand how our website is used. We do not sell your data. You can ask us to delete it at any time.
1. Who we are
AutoPend builds websites, WhatsApp automation, AI voice agents and ERP/CRM software for businesses in India. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), AutoPend is the Data Fiduciary for the personal data described in this policy — meaning we decide why and how it is processed.
You can reach us at:
- Email: hello@autopend.com
- Phone / WhatsApp: +91 79734 13659
If you are a client of ours, note that for personal data inside systems we build and operate for you (your customers' data in your CRM, for example), you are the Data Fiduciary and we act as a Data Processor on your instructions. That relationship is governed by our agreement with you, not by this policy.
2. What we collect
2.1 Information you give us directly
| Data | Where it comes from | Why |
|---|---|---|
| Name | Lead form, WhatsApp, email | To address you properly and identify your enquiry |
| Phone number | Lead form, WhatsApp | To contact you about your enquiry |
| Email address | Lead form, email, WhatsApp | To send proposals and follow-ups |
| What you tell us about your business | Lead form answers, WhatsApp conversation, calls | To understand what you need and quote for it |
2.2 Information collected automatically
When you visit autopend.com we collect standard technical data through analytics and advertising tools: pages viewed, time on page, approximate location (usually city level, derived from IP address), device and browser type, and the site or advert that referred you.
We also receive the advertising context of an enquiry — which campaign, ad set and advert you responded to — from Meta. We use this to understand which adverts work and to make our first message relevant to your industry.
2.3 What we do not collect
We do not ask for and do not want financial information, government identity numbers (Aadhaar, PAN, passport), passwords, or health information. Please do not send these to us over WhatsApp or email. If you send them anyway, we will delete them.
3. How we use your data
- To respond to your enquiry. This is the main reason. If you submit a form, we contact you about it.
- To qualify the enquiry. We ask about your business, what you need built and your timeline, so we can tell you honestly whether we are a fit.
- To deliver work if you become a client — including support and account communication.
- To improve our marketing. Aggregate analytics tell us which pages and adverts work. This is statistical, not about you individually.
- To meet legal obligations, such as tax and accounting records.
We do not sell your personal data, rent it, or share it with third parties for their own marketing.
4. WhatsApp messaging
Most of our contact with prospective clients happens on WhatsApp, so it is worth being specific.
- When we message you. Only after you have submitted an enquiry form or messaged us first. We do not send cold WhatsApp messages to purchased or scraped lists.
- Our first message identifies AutoPend immediately and refers to the enquiry you made.
- Who replies to you. A person from our team reads your message and writes the reply. We do not use an AI assistant to draft or send our WhatsApp messages, as section 5 sets out.
- Stopping messages. Reply STOP at any time, or simply say you are not interested. We will mark the conversation closed and stop messaging you.
- WhatsApp itself. Messages are sent and received through WhatsApp, operated by Meta. Meta processes them under its own terms and privacy policy, which we do not control.
5. Automated processing and AI
We want to be plain about this, because many companies are not.
We build AI systems for our clients, but we do not point one at your enquiry. The content of your messages to us is not sent to any AI or language-model provider. When you message us on WhatsApp, a person reads it and writes the reply, and the notes we keep about your enquiry are written by that person.
What this means in practice:
- Your messages are not processed by an AI service provider, and are not used to train anyone's model.
- The only automated processing of your data is the website analytics and advertising measurement described in section 6, which is about site traffic rather than the content of your conversation with us.
- No decision with a legal or similarly significant effect on you is made automatically. Decisions about pricing, whether to take on work, and what we agree to are made by people.
- If we ever introduce an AI assistant into our own messaging, we will update this section and the date at the top before we do, as section 14 describes.
6. Cookies and tracking
Our website uses the following. Most set cookies or similar identifiers in your browser.
| Service | Provider | Purpose |
|---|---|---|
| Google Analytics 4 | Understanding how the site is used — pages, sources, broad location | |
| Google Tag Manager | Managing the tags above without changing site code | |
| Meta Pixel | Meta | Measuring which adverts lead to enquiries, and showing relevant adverts |
| Google Fonts | Typefaces used on the site |
You can block or delete cookies in your browser settings. Analytics and advertising cookies are not required for the site to work — blocking them affects our measurement, not your experience. You can also opt out of Google Analytics using Google's browser add-on, and adjust ad personalisation in your Meta ad preferences.
7. Who we share data with
We share personal data only with service providers who help us operate, and only as far as they need it:
| Provider | What they handle | Where |
|---|---|---|
| Meta Platforms | Lead adverts, WhatsApp messaging, advertising measurement | Global |
| Website analytics and tag management; typefaces used on the site | Global | |
| Railway | Hosting for our lead database and automation systems | Global |
| Render | Website hosting | Global |
| Cloudflare | DNS and content delivery for autopend.com | Global |
We may also disclose data if required by law, a court, or a government authority, or to establish or defend a legal claim.
8. Where your data goes
Several providers above process data on servers outside India. Where that happens, we rely on the provider's own safeguards and contractual commitments. Under the DPDP Act, transfers are permitted except to countries the Government of India specifically restricts, and we will comply with any such restriction that is notified.
9. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that did not convert | 24 months from last contact, then deleted |
| WhatsApp conversation history | 24 months from the last message, then deleted from our account |
| Client records and project data | For the engagement, plus 7 years where tax or accounting law requires |
| Website analytics | 14 months (Google Analytics default retention) |
| Records of people who asked not to be contacted | Kept indefinitely, minimally — we need to know not to contact you again |
10. Your rights
Under the DPDP Act you have the right to:
- Access — ask what personal data of yours we hold and how we use it.
- Correction — have inaccurate or incomplete data corrected or completed.
- Erasure — ask us to delete your data, unless we are legally required to keep it.
- Withdraw consent — at any time, as easily as you gave it. Reply STOP on WhatsApp, or email us.
- Grievance redressal — raise a complaint with us and receive a response.
- Nominate — nominate someone to exercise these rights on your behalf in the event of death or incapacity.
To exercise any of these, email hello@autopend.com with the phone number or email address you used to contact us, so we can find your record. We will respond within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Security
We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across our website and systems, encrypted storage of credentials and access tokens, access limited to people who need it, and hosting with established providers.
No system is perfectly secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.
12. Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
13. Third-party links
Our website links to demonstration builds and to client sites. Those are separate properties with their own privacy practices, and this policy does not apply to them.
14. Changes to this policy
We may update this policy as our services change. The "last updated" date at the top always reflects the current version. For material changes affecting how we use data you have already given us, we will make reasonable efforts to notify you directly.
15. Contact and grievances
For any question about this policy, or to raise a grievance about how we have handled your data:
- Email: hello@autopend.com
- Phone / WhatsApp: +91 79734 13659
Please write "Privacy" or "Grievance" in the subject line so it reaches the right place quickly.