Privacy policy
This policy explains what data Exatyl handles, why, where it is stored, and how long it is kept.
Last updated 10 September 2026
Who this covers
Exatyl is a platform used by businesses to handle their own customer conversations on WhatsApp. This policy covers two groups: the business that subscribes to Exatyl, and the end customers who message that business.
Our role
A business’s customer data belongs to that business. Exatyl acts as a data processor on the business’s behalf and is not the owner of that data. The business decides what its AI employee does, what information is collected, and when data should be removed.
What data is handled
- Customer WhatsApp messages, including conversation transcripts
- Names, phone numbers, and enquiry details
- Appointment and booking details
- Photos and documents sent during a conversation
Information collected on this website
The contact form on this website collects a name, a work email address, a business name, an optional website, an industry, a WhatsApp number, and whatever is written in the two message fields.
It is used to reply to the enquiry and to send communications about the platform, which is what the form asks you to agree to when you send it. It is kept for 12 months and then deleted. It is not sold, and it is not used to train AI models.
To stop receiving those communications, reply to any one of them or write to hello@exatyl.com.
This is data about visitors to this website. It is separate from the end-customer conversation data described above, which belongs to the business whose AI employee handled the conversation.
Why it is handled
This data is handled for customer support and lead management, on behalf of the business that subscribes to Exatyl. It is used to run the AI employee that business has configured: answering questions, qualifying enquiries, booking appointments, alerting staff, and handing conversations over to a person.
What we do not do
We do not sell customer data. We do not use it to train AI models.
Where it is stored
Conversation and lead data is stored in a per-tenant database hosted on Supabase, in region ap-south-1 (Mumbai).
Where data is processed
Data may be stored and processed outside India, depending on the infrastructure each sub-processor uses.
OpenRouter forwards AI requests on to third-party model providers, which may be located in different countries.
Each sub-processor handles data under its own data protection terms.
How data is protected
- Data is encrypted in transit, over HTTPS/TLS.
- Each business's data is kept separate from every other business's, as its own tenant.
- Access is limited to Exatyl personnel who need it to run the platform.
How long it is kept
| Data | Retention |
|---|---|
| Conversation transcripts | 12 months, then deleted |
| Lead records | For as long as the subscription runs. After cancellation, 30 days for export, then deleted. |
| Media files | 90 days |
A business can request deletion of its data at any time, without waiting for these periods to end.
Sub-processors
Running the platform involves the following providers. Each one handles data only for the purpose listed.
| Provider | What it does |
|---|---|
| Meta Platforms Ireland Ltd | WhatsApp Business Platform, message delivery |
| GetGabs | WhatsApp Business Solution Provider, message routing |
| OpenRouter | AI model routing. OpenRouter forwards requests on to third-party model providers. |
| Supabase | Database hosting, region ap-south-1 (Mumbai) |
| Cal.com | Appointment booking. Used only if a visitor chooses to book a call after using the contact form. |
| Telegram | Internal alert notifications to staff |
Your rights
End customers may request access to their data, correction of it, deletion of it, or raise a grievance. Requests are handled in the context of India’s Digital Personal Data Protection Act, 2023.
Because Exatyl processes this data on behalf of a business, a request may be passed to that business where it is the right party to decide.
Grievance contact
Write to hello@exatyl.com. Exatyl is based in Bareilly, Uttar Pradesh, India.
This policy is provided for transparency and does not constitute legal advice.