Your data, handled with consent and care.

Claywire is a multi-tenant WhatsApp AI CRM platform operated by Aetheron Solutions (“Claywire”, “we”, “us”), based in India. For the personal data of our own account holders, Aetheron Solutions acts as a Data Fiduciary under the DPDP Act 2023. For the lead and customer contact data that our business customers upload and process through the platform, we act as a Data Processor on their behalf (see Section 4).

Registered entity and address: Aetheron Solutions, Jamda, Belopsi, Mayurbhanj, Odisha, India.

Account and workspace data

• Account information — name, work email, phone number, password hash, and role within a workspace.
• Workspace and billing data — company name, GSTIN where provided, plan, credit balance, invoices, and payment metadata (handled by our payment processor; see Section 10).
• Configuration data — connected channels, WhatsApp Business numbers, message templates, agent knowledge bases, and workflow settings.

Customer / lead data processed on behalf of business customers

• Lead and contact records — names, phone numbers, email addresses, and enquiry details that our business customers collect from their own lead sources and import into their workspace.
• WhatsApp message content — inbound and outbound messages, media, and conversation history exchanged between a business customer and their leads through the WhatsApp Business Platform.
• Interaction metadata — message delivery and read status, opt-in / opt-out state, qualification stage, and agent handoff events.

Usage and technical data

• Usage and credit data — feature usage, AI replies generated, automation runs, voice tasks, and credits consumed.
• Device and log data — IP address, browser and device type, timestamps, and audit-trail records of actions taken in a workspace.
• Cookies and similar technologies — see Section 11.

Under the DPDP Act 2023, we process personal data either on the basis of the data principal’s consent or for legitimate uses permitted by the Act (such as providing a service you have signed up for).

• Account data — processed to provide, secure, and bill the Claywire service under our contract with you, and with your consent where required.
• Lead and WhatsApp data — processed on the documented instructions of the business customer who controls that workspace. The business customer is responsible for obtaining valid, informed, free, specific, and unambiguous consent from their leads before messaging them (see also our Terms and Agent Policy).
• Marketing communications from Claywire — sent only with your consent, which you can withdraw at any time.

Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before withdrawal.

• Data Fiduciary — for personal data of our account holders (their name, login, billing). We decide the purpose and means of processing this data and are directly accountable for it under the DPDP Act.
• Data Processor — for the lead, customer, and WhatsApp message data inside each customer workspace. The business customer is the Data Fiduciary for that data; we process it only to operate the service on their instructions, and we do not sell it or use it for our own marketing.

If you are an end customer or lead of a business that uses Claywire, please direct privacy requests to that business in the first instance. We will support them in fulfilling your rights.

• To operate the platform — route messages, run AI agents, qualify and follow up with leads, and book appointments on a workspace's behalf.
• To meter usage and credits, process payments, and prevent abuse.
• To secure the service, detect fraud, and maintain audit logs.
• To provide support and to send you service and (with consent) product communications.
• To comply with legal obligations and respond to lawful requests.

We do not use customer lead data or WhatsApp message content to train general-purpose AI models. AI agents answer only from a workspace’s approved knowledge base (see the Agent Policy).

Messaging is delivered through the WhatsApp Business Platform. Your use of WhatsApp through Claywire is also governed by the WhatsApp Business Messaging Policy and Meta’s terms.

• We handle WhatsApp message content solely to deliver the messaging service to the controlling business customer and their opted-in contacts.
• Businesses must use approved message templates for business-initiated messages and must honour user opt-outs and STOP requests.
• We do not repurpose WhatsApp content for advertising or share it with third parties except as needed to deliver the service (e.g. Meta as the messaging provider).

We share personal data only with:

• Sub-processors and infrastructure providers (hosting, the WhatsApp Business Platform / Business Solution Providers, payment processing, email delivery) under contracts that require appropriate safeguards.
• The business customer who controls a workspace, for data within that workspace.
• Authorities or third parties where required by law or to protect rights and safety.

A current list of sub-processors is available on request at privacy@claywire.in. We do not sell personal data.

Subject to the DPDP Act 2023, you have the right to:

• Access — obtain a summary of the personal data we process about you and how we process it.
• Correction and completion — have inaccurate or incomplete data corrected or updated.
• Erasure — request deletion of personal data that is no longer needed for the purpose it was collected, subject to legal retention requirements.
• Grievance redressal — raise a complaint with our Grievance Officer and receive a timely response before escalating to the Data Protection Board of India.
• Nomination — nominate another individual to exercise your rights in the event of death or incapacity.
• Withdraw consent — withdraw previously given consent at any time.

To exercise these rights, contact us at privacy@claywire.in. We may need to verify your identity before acting on a request.

Retention

We retain account data for as long as your account is active and for a reasonable period afterward to meet legal, tax, and accounting obligations. Lead and message data within a workspace is retained per the business customer’s instructions and deleted or returned on termination, subject to a short backup-expiry window of 30 days.

Security safeguards

• Tenant isolation — each workspace's data is logically segregated and access-controlled by role.
• Encryption — data is encrypted in transit (TLS); API keys and sensitive secrets are encrypted at rest.
• Access control and audit — least-privilege access, signature-verified webhooks, and audit logging of agent and user actions.
• Reasonable security practices in line with DPDP Act expectations for a Data Fiduciary; we will notify affected principals and the Data Protection Board of a personal data breach as required.

Personal data is primarily stored and processed in India. Where a sub-processor (such as the WhatsApp Business Platform or a cloud or email provider) processes data outside India, we do so consistent with the DPDP Act 2023 and any restrictions notified by the Central Government, and under contractual safeguards.

Our website and dashboard use strictly necessary cookies for authentication and security, and — with consent where required — analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may break parts of the dashboard.

Claywire is a business tool not directed at children. We do not knowingly process the personal data of children except as permitted by the DPDP Act, and business customers must not use the platform to message children without the verifiable consent the Act requires.

We may update this Privacy Policy from time to time. Material changes will be notified through the dashboard or by email, and the “Last updated” date above will change.

For privacy questions, to exercise your rights, or to raise a concern about how your data is handled, contact us: