Your information
Privacy Policy
Last updated: 31 July 2026
This policy explains how GPTWala collects and uses information when you visit our pages, register for a webinar, receive reminders, attend a session, make a purchase, or use a connected social-account feature.
Information we collect
- Registration details such as your name, email address, phone number, business information, city and answers submitted in a form.
- Webinar activity such as registration, attendance, join and leave time, reminder status, offer clicks and purchase status.
- Communication activity such as email delivery, opens, clicks, bounces and WhatsApp message delivery or read status.
- Technical and attribution information such as a pseudonymous visitor and page-session identifier, pages visited, time and scroll engagement, device, browser, approximate location, IP-derived security information, referral URL, cookies, Meta click identifiers and UTM campaign parameters. Private query values and page fragments are excluded from our first-party page analytics.
- Payment confirmation and transaction references supplied by our payment provider. We do not store full card or bank-account credentials.
- When an authorised GPTWala team member connects a social account, the account or channel name, account identifier, granted permissions, profile image and encrypted access or refresh tokens supplied by Meta or Google.
- For Instagram comment automation, the relevant post and comment identifiers, commenter account identifier and username, comment text, matched rule, message delivery status, button activity and tracked-link clicks.
How we use information
We use this information to register you for workshops, send confirmations and requested reminders, provide joining and replay information, operate customer support, measure webinar performance, prevent abuse, attribute advertising results, record purchases, publish approved social content, and respond when a person asks for information by commenting a configured keyword on a GPTWala Instagram post.
Connected social accounts
Social Center uses Meta OAuth for Instagram and Facebook, and Google OAuth for YouTube. The separate GPTWala OpenReply feature uses Meta's Instagram Login for one connected professional Instagram account. We request only the permissions needed for the selected feature, including identifying eligible accounts, reading configured post comments, receiving comment and messaging events, replying to a matching comment, sending the requested private reply, and reading limited insights. We do not receive an Instagram password or read unrelated conversation history.
You can revoke access at any time from your Meta or Google account settings. Revoking access stops future publishing but does not remove content already published on a platform.
WhatsApp and email communications
We send webinar WhatsApp reminders only when you provide the relevant phone number and consent. Business-initiated WhatsApp messages use approved templates. You may opt out by replying STOP, asking us not to message you, or emailing us. Transactional records may still be retained when reasonably necessary for security, compliance and dispute resolution.
Service providers
We use service providers that help us operate the service, including Hostinger for website hosting, Supabase for application data, authentication and private media storage, Amazon SES for email delivery, Meta for WhatsApp, advertising measurement and authorised Instagram or Facebook publishing, Google for authorised YouTube publishing, Zoom for webinar attendance, Razorpay for payments and Microsoft Clarity for website experience analytics. Each provider processes information according to its own terms and privacy commitments.
Sharing and selling
We do not sell your personal information. We share only the information required for the service providers above to perform their functions, when you direct us to do so, or when disclosure is reasonably required to protect users, enforce agreements or comply with a valid legal request.
Retention and security
We retain information only for as long as it is reasonably needed for the purposes described here, including business records, support, security and legal obligations. We use access controls, encrypted connections, restricted server-side credentials and operational logging, but no online system can guarantee absolute security.
Your choices
You may ask to access, correct or delete your information, or withdraw communication consent. See our data deletion instructions. Some information may be retained when required for fraud prevention, transaction records or other legitimate obligations.
Contact
For privacy questions or requests, email sanganisahil@gmail.com.
Updates
We may update this policy as our services change. The latest version and its effective date will remain available on this page.