Privacy Policy

This policy explains what personal data SandeshWA handles, why, and what rights you have. It applies to people who use the service (our customers and their team members) and to the data our customers upload about the people they message. "We" is the business named in the "Who we are" box on this page.

Two roles

• For your own account (your name, email, business details, payments), we decide how the data is used. We are responsible for it.
• For the contacts and messages you put into the service, you decide why and how they are used, and we process them on your behalf and on your instructions. You must have a lawful basis, such as consent, for messaging them.

What we collect

• Account details: your name, email address, password (stored only in hashed form by our authentication provider) and the business workspace you create.
• Business and connection details: your business name and your WhatsApp Business Account identifiers. Your WhatsApp access token is stored encrypted and is never shown back to you or exposed to your browser.
• Contacts you add: names, phone numbers, email addresses, tags, consent status and how consent was obtained.
• Message records: the recipient's number, the template used, its status and timestamps, and error information. We do not store the content of customer replies.
• Payment records: the amounts, GST, dates and references of your payments. Card, UPI and bank details are entered on our payment provider's page and are not seen or stored by us. The mobile number you enter at payment is passed to our payment provider for that payment. We do not keep it on our servers; your browser remembers it on your own device so you do not have to retype it, and you can clear it by clearing your browser's site data.
• Technical data: sign-in sessions, security logs and basic diagnostic information needed to run and protect the service.

Why we use it

• To provide the service: create your account, connect WhatsApp, send messages, show delivery status and keep your wallet.
• To take payments and keep the financial and tax records the law requires.
• To keep the service secure, prevent abuse, and investigate problems.
• To contact you about your account, security, billing and important changes.
• To meet legal obligations. We do not sell personal data and we do not use it for advertising.

Who we share it with

Only with providers that help us run the service, and only as needed:

• Meta (WhatsApp), to send your messages and receive delivery updates.
• Our payment provider, to take and reconcile payments.
• Our hosting, database and authentication providers, which store and process data on our behalf. They may process data outside India.
• Authorities, where the law requires it.

Cookies

We use only the cookies the service needs to work: to keep you signed in, to remember your workspace and your display preferences such as light or dark mode. We do not use advertising or cross-site tracking cookies.

How long we keep it

We keep account and workspace data while your account is active. When a workspace is deleted, its contacts, templates and message records are deleted. We keep payment and tax records for as long as the law requires, and security logs for a limited period.

How we protect it

Data is separated between customers so one business cannot see another's. Access is limited by role, secrets are kept on the server, connections use encryption in transit, and WhatsApp credentials are encrypted at rest. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you may ask to access the personal data we hold about you, have it corrected or erased, withdraw consent, and raise a grievance. You can correct your profile in the app. For anything else, or if you are one of a customer's contacts and want to be removed, contact us; where we act for a customer we will pass your request on to them and help them meet it.

Children

The service is for businesses and is not directed at children. We do not knowingly collect children's personal data.

Grievances and changes

Privacy questions and complaints go to the grievance contact named on this page, who will acknowledge them and respond within the time the law allows. We may update this policy; the date at the top shows the latest version.