Location Data Policy

Location Data Policy

Last updated: 2026-07-16

This location data policy applies to the website, products and services offered under the brand WAAPI, operated by WAAPI (“we”, “us”, “our”), acting as the business. By accessing or using our services you agree to this location data policy. If you do not agree, please discontinue use of the services.

1. What location data we handle

  • Approximate location from IP address — derived at country/city level from the IP address of every request, for security (detecting anomalous sign-ins), fraud prevention, analytics and tax determination. This is not precise and we do not track your movement.
  • Business address — the registered address you give us for invoicing, and the address of any Google Business Profile location you connect.
  • Shared location messages — where a contact sends a location pin through a messaging channel, or you send one, the coordinates form part of that message’s content and are stored with the conversation.
  • Device location — our mobile applications request precise device location only if you use a feature that needs it, and only after your explicit operating-system permission. You can revoke that permission at any time in your device settings, and the rest of the app continues to work.

2. What we do not do

We do not track your background location, do not build a movement profile, do not sell location data, and do not share it with data brokers or advertising networks.

3. Retention

IP-derived location is held with the security and analytics logs it belongs to and is deleted on the log retention cycle (see the Data Retention Policy). Location shared inside a message follows the message retention window.

4. Your controls

Revoke device-location permission in your operating system at any time. Ask us for a copy of, or the deletion of, the location data associated with your account using the contacts below.

Governing law & jurisdiction

This document is governed by the laws of India. For operators in India this includes the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Consumer Protection Act, 2019. Where we serve customers in other jurisdictions we honour applicable local requirements, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to the extent they apply. Courts at India have exclusive jurisdiction, subject to any non-waivable consumer rights in your country of residence.

Contact us

WAAPI is operated by WAAPI. For any question about this document, contact us: