Privacy Policy

Ajay Gupta & Sons ("we", "us", "our") provides a WhatsApp Business messaging platform that helps businesses connect WhatsApp Business Accounts, manage message templates, send messages, receive webhooks, and monitor delivery status. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website, portal, APIs, and WhatsApp messaging services.

1. Information We Collect

We may collect account information such as name, business name, email address, phone number, login information, tenant information, user roles, and authentication/session records.

We may collect WhatsApp Business information such as WhatsApp Business Account ID, Phone Number ID, display phone number, template names, template categories, template statuses, local template metadata, message IDs, webhook events, delivery/read/failure statuses, and conversation or billing metadata provided by Meta.

We may collect technical and security information such as IP address, browser information, request logs, audit logs, API usage logs, security events, and error logs.

2. How We Use Information

• To provide and operate the WhatsApp messaging platform.
• To authenticate users and manage secure sessions.
• To send WhatsApp messages through Meta's WhatsApp Business Platform.
• To receive and process WhatsApp webhook events.
• To manage templates, delivery statuses, tenant isolation, billing telemetry, and audit records.
• To detect abuse, fraud, unauthorized access, security incidents, and platform misuse.
• To improve reliability, performance, support, and user experience.
• To comply with applicable legal, regulatory, security, and platform requirements.

3. WhatsApp and Meta Platform Data

Our service integrates with Meta's WhatsApp Business Platform. When you connect a WhatsApp Business Account or send WhatsApp messages through our platform, certain information is processed by Meta according to Meta's own terms, policies, and privacy practices.

You are responsible for ensuring your use of WhatsApp messaging complies with applicable law, WhatsApp Business Messaging Policy, Meta Platform Terms, and all consent requirements for contacting recipients.

4. Consent and Lawful Basis

Where required by law, you must obtain appropriate opt-in consent from your customers before sending WhatsApp messages. You agree not to upload, send, or process personal data unless you have a lawful basis to do so.

5. How We Share Information

We do not sell personal information. We may share information with Meta/WhatsApp as required to send messages and receive messaging events, and with hosting, infrastructure, security, monitoring, professional, legal, or support providers where necessary to provide, secure, and operate the service.

6. Data Retention

We retain information only as long as necessary to provide the service, maintain security/audit records, provide support, satisfy billing or operational needs, and comply with legal obligations. Message logs, webhook events, audit logs, and session records may be retained according to our internal retention policy unless deletion is requested and legally permitted.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards including HTTPS access, session-based authentication, role-based access control, tenant isolation, audit logging, sensitive credential protection, restricted provider-admin access, and server/database access controls. No system can be guaranteed 100% secure, but we continuously work to reduce risk.

8. Account Recovery

For client accounts, we may use the registered WhatsApp phone number to send username recovery messages or password reset one-time codes. We do not send plaintext passwords over WhatsApp. Provider administrator accounts cannot be recovered through public browser-based recovery flows and must be reset through secure server-side administrative procedures.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, export your data, or withdraw consent. To exercise these rights, contact us at ajaygupta.kota@gmail.com.

10. Customer Data Deletion

You may request deletion of your account or associated data by visiting the Data Deletion page or contacting us at ajaygupta.kota@gmail.com. We will process deletion requests subject to legal, security, billing, and compliance obligations.

11. Children's Privacy

Our service is intended for business users and is not directed to children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised effective date.

Effective date: August 12, 2026