Privacy Policy

Last updated: 21 September 2026

Waterzy (“Waterzy”, “we”, “us”) operates a software platform for packaged-drinking-water vendors in Kerala, India, and lets their customers order water through WhatsApp. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to the Waterzy website (waterzy.in), the Waterzy vendor app, and the Waterzy WhatsApp ordering service.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India). For the purposes of that Act, Waterzy is the data fiduciary for the data described in this policy.

1. Who uses Waterzy, and whose data we hold

Vendors are water-distribution businesses that sign in to the Waterzy vendor app to manage orders, customers, payments, jar stock and riders. The vendor is the only person with an account.

Customers are the people a vendor delivers water to. Customers do not create accounts. A vendor records his customers in the app, and a customer may also order from that vendor through WhatsApp. Each customer’s record belongs to one vendor.

Riders are delivery staff registered by a vendor. Riders do not have accounts; their details are entered and managed by the vendor.

2. What we collect

From vendors

• Business name, owner name, district, shop location and delivery area, working days and holidays.
• Mobile number and a sign-in PIN, used to sign in and to secure the account.
• Optional business details: UPI ID (used to generate a payment QR code), GST number and logo.
• Everything the vendor records while running the business: orders, deliveries, bills, payments, expenses, jar stock, notes, and a permanent history of changes to money, stock and prices.
• Support requests and messages sent to Waterzy.

About customers (entered by their vendor)

• Name, mobile number, delivery address and, where the vendor records it, approximate location.
• The customer’s agreed price, outstanding dues, jar and deposit balance, standing (repeat) order, bill and payment history, and any notes the vendor adds.
• Where a vendor imports an existing customer book by photographing a notebook page, pasting text or uploading a file, the data in that book.

From customers who order through WhatsApp

• Your WhatsApp mobile number and profile name, as provided to us by WhatsApp when you message us.
• The join code from the vendor’s sticker, which links you to that vendor’s shop.
• The content of your conversation with the Waterzy WhatsApp number: products, quantities, confirmations, the payment method you choose, and any free-text questions you ask.

About riders (entered by their vendor)

• Name and mobile number, assigned deliveries, daily start and finish, cash handed over, expenses and deposits.

Automatically

• Technical information needed to keep the service working: device and browser type, app version, IP address, and error logs. We do not use advertising trackers or third-party analytics on the website or app.

3. How we use it

• To provide the service: creating and delivering orders, keeping each vendor’s customer records, bills, payments, stock and rider settlements accurate.
• To receive and respond to WhatsApp orders and questions, and to show the vendor the resulting order and conversation.
• To let a vendor send bills and payment reminders to customers who owe money, using WhatsApp.
• To generate a UPI QR code from the vendor’s own UPI ID. Payment is made directly by the customer to the vendor. Waterzy does not receive, hold or take a share of any payment.
• To read handwritten or typed customer lists that a vendor chooses to import, and to tidy addresses and place names.
• To answer free-text WhatsApp questions with an automated assistant that knows only that vendor’s products and prices.
• To approve, pause or suspend vendor accounts, and to prevent fraud and abuse.
• To provide support and to meet legal obligations.

We do not sell personal data, and we do not use it for advertising.

4. WhatsApp

• Waterzy uses the WhatsApp Business Platform, provided by Meta Platforms, Inc. and WhatsApp LLC, through one Waterzy WhatsApp number shared by all vendors.
• You are only connected to a vendor’s shop when you scan that vendor’s sticker or enter its join code. Without it, no menu, prices or ordering are available.
• Waterzy only replies to messages you send. We do not send the first message. Outbound notifications, such as delivery notices or scheduled reminders, are not yet in use and will be introduced only with your consent.
• Messages sent to and from the Waterzy number are processed by Meta under WhatsApp’s own terms and privacy policy, and by Waterzy as described here. Messages between you and WhatsApp are end-to-end encrypted in transit; Waterzy, as the business you are messaging, can read the messages you send to its number.
• To stop, simply stop messaging the number, or ask your vendor or Waterzy to remove your record (see section 9).

5. Who we share data with

We share personal data only with the service providers needed to run Waterzy, and only for the purposes above:

• Your vendor. A customer’s orders, dues, jar balance and WhatsApp conversation are visible to the vendor that customer belongs to, and to nobody else on the platform.
• Meta Platforms / WhatsApp — delivery of WhatsApp messages.
• Supabase — database hosting.
• Google Cloud — application hosting, and Google Gemini for the automated assistant, reading imported customer lists and tidying addresses. Data sent for these tasks is used only to produce the result and is not used to train Google’s models.
• Vercel — website and app hosting.
• OpenStreetMap — converting locations to place names.

We may also disclose data where the law requires it, or to protect the rights and safety of Waterzy, its vendors, customers or the public. Some providers store data outside India; where they do, we rely on their contractual and security commitments.

6. How long we keep it

• Vendor accounts and business records are kept while the account is active and for up to three years after it closes, so that dues, bills and settlements remain verifiable, unless the law requires longer.
• A customer record removed by a vendor is hidden, not erased, so that the vendor’s accounts stay consistent; it is erased on request under section 9, provided no money is outstanding.
• WhatsApp conversations are kept for as long as the customer’s record with that vendor exists.
• Technical logs are kept for up to 90 days.

7. Security

• Vendors sign in with a mobile number and PIN; repeated wrong attempts lock the account.
• Every request to our servers is verified, and each vendor can see only his own data.
• Incoming WhatsApp messages are cryptographically verified as coming from Meta before they are processed.
• Data is encrypted in transit and at rest with our hosting providers.
• No system is perfectly secure. If a breach affecting your data occurs, we will notify you and the Data Protection Board of India as the law requires.

8. Children

Waterzy is for businesses and their adult customers. We do not knowingly collect data from anyone under 18.

9. Your rights, and how to delete your data

Step-by-step instructions are on our Data Deletion page.

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• tell you what personal data we hold about you;
• correct or update it;
• erase it;
• withdraw consent for any processing that is based on consent;
• nominate someone to exercise these rights for you.

To request deletion of your data:

• Customers: message the Waterzy WhatsApp number with the word DELETE, or email admin@waterzy.in from any address, stating the mobile number you used. We will confirm your identity, remove your record and conversation history, and confirm completion within 30 days. If you owe money to a vendor, we will retain the minimum record of that debt until it is settled, and tell you so.
• Vendors: from the vendor app, open More → Account → Support and request account deletion, or email admin@waterzy.in from your registered number. Business records subject to the retention period in section 6 are kept for that period and then erased.

You may also raise any concern with our grievance officer at admin@waterzy.in. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Changes to this policy

We will post any changes on this page with a new date. Material changes affecting WhatsApp users will also be mentioned in the conversation the next time they message us.

11. Contact

Waterzy, Ernakulam, Kerala, India
Email: admin@waterzy.in
WhatsApp: +91 79024 72020
Website: https://www.waterzy.in