Home › Privacy Policy

Privacy Policy

Last updated: 2 Nov 2026

This Privacy Policy explains how to be updated ("Wefru", "we", "us") collects, uses, shares and protects personal data when you use wefru.com, its sub-pages, business websites, digital cards and related services (together, the "Platform"). It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). By using the Platform you agree to this policy. If you do not agree, please do not use the Platform.

1. Who is responsible for your data

For data about your own Wefru account, Wefru is the data fiduciary. For data that a business user stores about its own customers (for example in invoices, leads, reminders or appointments), that business decides why and how the data is used, and Wefru processes it on the business's behalf. See section 7.

2. Data we collect

Data you give us

  • Account data: name, mobile number, email address, password (stored in encrypted form) and profile photo.
  • Business data: business name, category, address, city, GSTIN, products, services, photos, prices you choose to show, website and card content.
  • Verification data: email address verified by one-time password (OTP) and any documents you choose to upload for business verification.
  • Content: blogs, questions, answers, comments, job posts, job seeker profiles, rental listings, reviews and messages.
  • Payment data: payment reference, amount, date and the receipt or screenshot you upload when you pay for a plan by UPI or bank transfer. We do not collect or store your card number, UPI PIN or net banking password.
  • Support data: what you write in support tickets, emails, WhatsApp messages and contact forms.

Data collected when you use the Platform

  • device and browser type, IP address, pages visited, date and time, referring page and approximate location derived from IP;
  • cookies and similar technologies, as explained in our Cookie Policy.

Data from others

  • Google sign-in: if you choose to sign in with Google, we receive your name, email address and profile photo from Google. We do not receive your Google password.
  • Enquiries about you: when a visitor sends an enquiry to your business, we receive the details they enter.

3. Why we use your data

  • to create and manage your account and verify your email;
  • to publish your listing, website, digital card, blogs, jobs and rental posts as you instruct;
  • to pass enquiries and leads to the business they are meant for;
  • to provide dashboard tools such as billing, leads, reminders and appointment booking;
  • to confirm payments and activate plans;
  • to send service messages such as OTPs, enquiry alerts, reminders, receipts and important notices;
  • to answer support requests and complaints;
  • to keep the Platform safe, prevent spam, fraud and misuse, and enforce our Terms and Conditions;
  • to understand how the Platform is used and improve it;
  • to meet legal obligations and respond to lawful requests from authorities.

We process personal data on the basis of your consent, or for legitimate uses allowed under the DPDP Act, such as providing a service you asked for or meeting a legal requirement. You may withdraw consent at any time (see section 10); this does not affect processing already done.

4. Leads and enquiries

Wefru helps buyers and service seekers contact businesses. When you submit an enquiry, contact form or requirement, the details you enter, such as your name, phone number, email address, message and the page you sent it from, are shared with the owner of that listing or page so they can reply to you. Enquiries can be captured from:

  • business listing and product pages;
  • rental (sell, rent or donate) enquiries;
  • city and category pages;
  • business websites hosted on Wefru;
  • digital business cards;
  • contact forms and requirement forms on the Platform.

Once a business receives your details, it may contact you by phone, WhatsApp, SMS or email. That business is responsible for how it uses your details. If a business misuses your details, please tell us through our Grievance Redressal process.

5. Public information

Information you choose to publish, such as your business profile, contact number on a listing, blogs, answers, job posts and rental posts, is visible to anyone and may be indexed by search engines. Please do not publish anything you want to keep private.

6. Health-related appointment data

When you book an appointment with a doctor or clinic through Wefru Vaidya, we collect the details needed for booking, such as patient name, phone number, age, preferred date and time and any reason for visit you enter. Some of this may be health information, which is sensitive. It is shared only with the doctor or clinic you book with and is used to manage your appointment. The doctor or clinic is responsible for the medical care and for any records they keep. Please share only what is needed to book.

7. Data that business users store about their customers

Business users can store their own customers' data in Wefru tools, for example names, phone numbers, addresses and GSTINs in invoices, enquiry history in Leads, dates in Reminders and patient or client details in appointments. For this data:

  • the business user is responsible for having a lawful reason and, where needed, consent to collect and use it;
  • the business user must keep it accurate and respond to its own customers' requests;
  • Wefru processes it only to provide the tools to that business user, and does not sell it;
  • messages sent to customers must follow our Messaging and Reminders Consent policy.

If you are a customer of a business on Wefru and want your data corrected or removed, please contact that business first. If you cannot reach them, contact us and we will help.

8. Who we share data with

We do not sell your personal data. We share it only as follows:

  • Businesses you contact through enquiries, bookings and job applications, as explained above;
  • Service providers who help us run the Platform, such as our hosting provider, email delivery provider, SMS or messaging provider, Google (for Google sign-in), Cloudflare (for website security, performance and protection against attacks) and, where used, analytics and advertising partners. They may use data only to provide their service to us;
  • Partners in our Partner Program, limited to the details needed to track businesses they referred;
  • Authorities when required by law, court order or a lawful request, or to protect the rights, safety and property of users, the public or Wefru;
  • A buyer or successor if Wefru's business is merged, sold or transferred, subject to this policy.

9. Cookies

We use cookies to keep you signed in, remember your preferences, protect against misuse and understand how the Platform is used. Read our Cookie Policy for details and choices.

10. Your rights

Subject to the DPDP Act and other applicable law, you have the right to:

  • Access: ask for a summary of the personal data we hold about you and how we process it;
  • Correction and updating: correct inaccurate data, complete missing data and update your details. Most details can be edited from your profile;
  • Erasure: ask us to delete personal data that is no longer needed, or your whole account;
  • Withdraw consent: withdraw consent you gave earlier, as easily as you gave it;
  • Grievance redressal: complain to us and get a response within the time limits in our Grievance Redressal policy;
  • Nominate: nominate another person to exercise your rights if you die or become unable to do so.

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is available for such complaints.

11. How to request deletion or exercise your rights

Account deletion and data requests are not self-service at present. To make a request:

  1. raise a support ticket from your account, or email [email protected] from your registered email address;
  2. say what you want (access, correction, deletion, withdrawal of consent or nomination) and the account or listing it concerns;
  3. we may ask you to confirm your identity, for example by an OTP sent to your registered email.

We will acknowledge your request and act on it within to be updated. When an account is deleted, your public listing, website, card and posts are removed. We may keep some records where the law requires it, such as payment and tax records, records needed to resolve a dispute or complaint, or records needed to prevent fraud.

12. Children

The Platform is meant for people who are 18 years or older. We do not knowingly collect personal data of children (persons under 18) without verifiable consent of a parent or lawful guardian, and we do not track, monitor or target advertising at children. If you believe a child has given us personal data, please contact us and we will delete it.

13. How long we keep data

We keep personal data only as long as needed for the purpose it was collected, or as required by law. In general:

  • account and listing data is kept while your account is active;
  • payment records are kept for the period required under tax and accounting laws;
  • logs needed for security and legal compliance are kept for the period required by law, including at least 180 days where the IT Rules require it;
  • data of inactive accounts may be deleted after to be updated, after giving notice where the law requires.

14. Security

We use reasonable security practices to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls, protection against automated attacks and regular review of our systems. No system is fully secure. Keep your password and OTPs private, and tell us at once if you think your account is being misused. If a personal data breach occurs, we will inform affected users and the authorities as required by law.

15. Data stored outside India

Some of our service providers may store or process data on servers outside India. Where this happens, we transfer data only to countries not restricted by the Government of India under the DPDP Act, and we expect those providers to protect the data in line with this policy.

16. Links to other websites

Listings, blogs and business websites may link to other websites. We are not responsible for the privacy practices of those websites.

17. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its date. For important changes, we will give notice on the Platform or by email.

18. Grievance Officer and contact

For questions, requests or complaints about your personal data, contact:

  • Grievance Officer: to be updated
  • Email: [email protected]
  • Phone: +91 74529 99988
  • Address: 106, 1st Floor, Shivam Complex, Eves Crossing, Hapur Road, Meerut, Uttar Pradesh to be updated, India