Privacy Policy

Last updated: 15 August 2026

PranaviSoft provides a platform that lets businesses send WhatsApp messages to their own customers using the WhatsApp Business Platform (Cloud API) provided by Meta. This policy explains what data we handle, why, and what choices you have.

In short: we process business account data and the customer contact lists that our business users upload, solely to operate the messaging service on their behalf. We do not sell personal data, and we do not use uploaded contact data for our own marketing.

Who this policy covers

Business users — the businesses and their team members who hold an account with us.
Message recipients — the contacts a business uploads and messages through the platform. We process their data on that business's instructions, as a processor.

Information we collect

Account information: name, email address, phone number, business name, and an encrypted password hash.
WhatsApp account connection: when a business connects its WhatsApp Business Account, we store the WhatsApp Business Account ID, phone number ID, display phone number and an access token issued by Meta. Access tokens are encrypted at rest.
Contact data: phone numbers, names and any additional fields a business chooses to upload for its own customers.
Message data: message templates, campaign details, message status (sent, delivered, read, failed) and replies received from recipients.
Billing information: subscription and payment records. Card details are handled by our payment processor (Razorpay) and are not stored on our servers.
Technical data: server logs, including IP address and timestamps, used for security and troubleshooting.

How we use information

To provide the service — sending messages, managing templates, and reporting delivery status.
To authenticate users and secure accounts.
To process subscription payments.
To provide support and diagnose technical problems.
To meet legal and tax obligations.

We do not sell personal data. We do not use contact data uploaded by a business for any purpose other than delivering that business's own messages.

Sharing with third parties

We share data only with providers necessary to run the service:

Meta Platforms — to deliver WhatsApp messages and manage message templates.
Razorpay — to process subscription payments.
Hosting and infrastructure providers — to run our servers and databases.

We may also disclose information where required by law.

Data retention

We retain account, contact and message data for as long as an account remains active. On account closure, data is deleted or anonymised within 90 days, except where we are required to retain records for legal, tax or accounting purposes. Financial transaction records are retained as required by Indian law.

Security

WhatsApp access tokens are encrypted at rest using AES-256-GCM.
Passwords are stored as one-way bcrypt hashes and are never recoverable.
All traffic is served over HTTPS.
Each business's data is isolated so that one business cannot access another's contacts or messages.

No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data we hold.

Your rights

Business users can access, correct, export or delete their data from within the platform, or by contacting us. If you are a message recipient and want your data removed, contact the business that messaged you — they control that contact list. You may also contact us and we will assist that business in actioning the request.

Recipients can stop receiving messages at any time by replying to ask the business to stop, or by blocking the sender in WhatsApp.

Children

The platform is intended for businesses and is not directed at children under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to account holders by email or through the platform.

Contact

Questions about this policy or your data: udaysteyn@gmail.com
PranaviSoft, Tamil Nadu, India