Privacy Policy
Last Updated: October 20, 2026 • Compliance Version 3.1
At Empirican Digital, we take privacy and data security seriously. This Privacy Policy explains how we collect, process, secure, and disclose personal and enterprise information across our conversational AI widgets, official WhatsApp Cloud API services, and client portals.
1. Information We Collect
We collect information in three primary categories:
- Tenant Account Data: Name, work email address, company name, telephone number, billing details, and encrypted credentials when registering an enterprise workspace.
- End-User Conversational Data: Text inquiries, appointment preferences, phone numbers, and visitor metadata exchanged through embedded website chat widgets or verified WhatsApp Business channels.
- Technical & Telemetry Data: IP addresses, browser user-agents, webhook delivery timestamps, and anonymized AI response latencies for performance monitoring.
2. How We Use Information
Empirican Digital uses collected data exclusively for:
- Delivering autonomous AI conversational responses and booking workflows;
- Transmitting automated WhatsApp appointment confirmations, visit passes, and rescheduling options;
- Dispatching authenticated webhook payloads to Customer’s configured CRM systems (Zoho, Salesforce, LeadSquared);
- Generating tax-compliant invoices (GST & LUT export) and processing subscription billings;
- Attributing partner commissions under our 30-day first-party affiliate cookie network.
3. WhatsApp Business & Meta Policy Compliance
When utilizing our WhatsApp AI integration:
- We strictly adhere to Meta’s WhatsApp Business Messaging Policies;
- Phone numbers are used exclusively for requested transactional notifications, visit reminders, and customer support queries;
- End-users may opt out of automated messaging at any time by replying "STOP" or "UNSUBSCRIBE";
- We never sell or distribute end-user contact lists to third-party advertisers.
4. Data Isolation & Cryptographic Security
Empirican Digital enforces architectural multi-tenancy. Every tenant's records, custom prompt embeddings, and chat histories are isolated by strict cryptographic controls.
- Encryption: AES-256 for data at rest; TLS 1.3 for all data in transit.
- Webhooks Security: HMAC-SHA256 signatures generated per endpoint to guarantee payload integrity.
- Retention: Chat logs and webhook delivery logs are retained for 90 days or according to Customer’s contractual data retention policies.
5. Cookies & Tracking Disclosures
We use necessary session cookies (e.g. empirican_auth_session) to maintain secure logins, and first-party attribution cookies (e.g. affiliate_ref with a 30-day expiration) to credit partner referrals. We do not deploy third-party cross-site advertising trackers.
6. Data Subject Rights & Contact
Depending on your jurisdiction (such as GDPR, CCPA, or India's DPDP Act), you may have the right to access, rectify, or request deletion of your personal data.