WhatsApp Marketing & Automation Platform Privacy Policy

Operator: Techno Webs India
Effective date: 15 October 2026 (replace with actual publication date if different)
Website: https://technowebsindia.com/

1. Scope and relationship to our website policy

This policy supplements our general Website Privacy Policy. It covers Platform-specific processing, including contact imports, WhatsApp messaging, integrations, customer-support automation and campaign reporting. The general policy continues to apply to ordinary use of our corporate website.

2. Our role and business customers' responsibilities

When a business customer uploads contacts, configures campaigns or communicates with its own customers, that business generally determines the purpose and permitted use of those records. Techno Webs India processes that information to deliver the contracted Platform services and may act as a data processor or service provider on the business customer's instructions, as applicable under relevant law. We separately determine the purposes for our own account administration, security, billing and legal compliance.

Business customers must provide appropriate privacy notices, establish a valid basis for processing personal data, obtain required WhatsApp marketing opt-ins, honor withdrawals and comply with applicable law and Meta/WhatsApp policies. A phone number in an address book or a purchased list does not by itself establish marketing consent.

3. Information we may process

• Business account data: business name, representative name, email, telephone number, account roles, subscription, billing details and support requests.
• Imported contact data: names, phone numbers, optional tags or customer attributes, contact-list membership, opt-in status, consent source and timestamps.
• Messaging data: message content and template details, attachments where enabled, message identifiers, timestamps, delivery/read/failure statuses, inbound replies and opt-out requests.
• Automation and CRM data: chatbot responses, enquiry categories, lead notes, follow-up tasks, agent assignments and conversation status.
• Technical and security data: IP addresses, device/browser information, authentication and audit logs, error logs, API event metadata and abuse-prevention signals.
• Payment data: invoices, payment status and transaction references from payment processors; full payment-card credentials should be handled by the payment provider rather than stored in the Platform.

Business customers should avoid importing sensitive information unless necessary, legally permitted and supported by suitable safeguards. The Platform should not be used to solicit passwords, OTPs, payment PINs or unnecessary government identification documents in chat.

4. Sources of information

We may receive information directly from business customers and their staff, from their authorized contact imports and connected systems, from individuals who message participating businesses, and from Meta's WhatsApp Business Platform webhooks and other authorized integrations.

5. How information is used

• Provide business accounts, authorized WhatsApp connections, contact management and CRM functionality.
• Process approved message templates and send communications requested by business customers, subject to eligibility, consent and messaging rules.
• Receive inbound messages and support configured automated replies, customer-service workflows and human handover.
• Maintain delivery status, campaign reports, billing and service-support records.
• Record and enforce opt-outs, suppression lists, account-quality safeguards and misuse prevention.
• Secure the Platform, investigate incidents, comply with lawful requests and enforce applicable agreements.

6. WhatsApp marketing consent and opt-outs

Business customers must obtain any consent required for WhatsApp communications, including clear permission for promotional messages where applicable. We may provide fields and tools for storing consent evidence, but importing a record or selecting a checkbox in our dashboard does not independently verify that consent was lawfully obtained.

Recipients may opt out through an unsubscribe action, by contacting the sending business, or through supported reply instructions such as "STOP". The Platform is intended to record opt-outs and prevent subsequent marketing to suppressed contacts. Transactional or legally required communications may be treated differently where permitted by law and platform rules. Recipients may also block or report businesses through WhatsApp.

7. WhatsApp Business Platform and Meta

Where authorized, the Platform may connect to WhatsApp Business Accounts through Meta's official APIs or an approved service provider. Relevant information, including message content and delivery events, is processed by Meta and potentially authorized integration providers to operate messaging services. Meta's own terms and privacy notices also apply. We do not claim to control Meta's independent processing, account reviews, messaging restrictions or delivery decisions.

Business customers should retain ownership and appropriate administrative control of their own WhatsApp Business Accounts and connected phone numbers.

8. AI-assisted replies and automated decisions

If a business customer enables AI-assisted replies, relevant messages and conversation context may be sent to a configured AI service provider to generate a response. The business customer must provide any required notice and authorization before enabling this feature. AI-generated replies may be inaccurate and should not be relied upon for financial, medical, legal or other high-impact decisions without qualified human review. Automated replies should provide an appropriate route to human assistance.

Any AI provider, data-retention configuration and applicable cross-border processing details should be disclosed in the customer's service agreement or additional notice before that integration is activated.

9. Sharing and service providers

We may share data only as reasonably necessary with Meta/WhatsApp, approved messaging integration providers, hosting and database services, payment processors, email and support services, AI providers when enabled, professional advisers, and authorities where legally required. Access by our staff and contractors should be limited according to their duties and subject to appropriate safeguards. We do not sell uploaded customer contact lists.

10. Security and account separation

We intend to use reasonable technical and organizational measures appropriate to the data processed, including encrypted transport, role-based access, access logging, protected API credentials, backup and recovery procedures, and separation of different business customers' records. No online service can guarantee absolute security. Actual safeguards and security commitments should be confirmed in the service agreement and implemented before launch.

11. Retention and deletion

We retain personal data only as long as needed to provide the relevant services, meet legitimate operational requirements, resolve disputes, maintain necessary suppression records, and comply with applicable legal obligations. Retention periods may vary by record type and customer agreement. Upon a verified request or account termination, we will delete or return eligible data in accordance with the applicable agreement and law, subject to backups, fraud-prevention needs and mandatory recordkeeping. Specific retention periods and deletion timelines will be published or contractually documented before the Platform goes live.

12. Individual privacy requests

Subject to applicable law, individuals may request access, correction, deletion, or withdrawal of consent, and may exercise other available privacy rights. For messages sent by a business customer, contacting that sending business directly is often the fastest way to manage preferences. Requests received by Techno Webs India will be assessed and, where appropriate, forwarded to the relevant business customer or handled within our own responsibilities. We may need to verify identity before acting.

13. International processing

Depending on the providers selected and service configuration, personal data may be processed or stored outside the individual's state or country. Where cross-border transfers occur, we will assess applicable legal requirements and appropriate safeguards. Hosting locations and relevant subprocessors should be disclosed to business customers before production onboarding.

14. Children's data and restricted business categories

The Platform is intended for business use, not for direct use by children. Business customers must not use it to unlawfully target minors or to market products or services prohibited by WhatsApp policies or applicable law. We may suspend campaigns or accounts that present significant compliance or safety concerns.

15. Cookies and platform analytics

The Platform may use essential cookies for authentication and security and, if enabled, analytics or preference cookies. Where required, additional notice and consent controls will be provided. Browser settings may allow users to restrict cookies, although essential functionality may be affected.

16. Changes to this policy

We may update this policy when the Platform, our service providers or legal requirements change. The current version and effective date will be posted here. Where required, we will provide additional notice of material changes.

17. Contact and privacy requests

For a privacy or data deletion request, email us with the subject WhatsApp SaaS Privacy Request. Please do not include passwords, OTPs or sensitive financial information in your request.