Privacy Policy

Last Updated: November 8, 2026 | Effective Date: November 8, 2026

Summary for Business Owners: DhandhaDesk provides WhatsApp customer communication management software for retailers, merchants, and businesses. We do not sell your personal data or your customers' communication to third parties. All WhatsApp interactions are transmitted in compliance with Meta's Official WhatsApp Business Platform Policies.

1. Entity & Scope

This Privacy Policy governs the collection, processing, and storage of data by [OWNER LEGAL NAME] ("DhandhaDesk", "we", "us", or "our") when you access our marketing website, application portal (/login), and integrated WhatsApp Business messaging services.

If you have questions about this policy or our data practices, contact us at support@dhandhadesk.com (or our designated support desk: [SUPPORT EMAIL]).

2. Data We Collect

2.1 Account and Business Information

Identity & Contact: Name, business phone number, business email address, shop/business name, shop category, and business address.
Authentication Credentials: Passwords stored strictly as salted BCrypt hashes, one-time passwords (OTP) for phone authentication, and rotating session tokens.
Team Hierarchy & Roles: Roles assigned to store personnel (Owner, Manager, Staff), designated reporting managers, and staff specialty designations.

2.2 WhatsApp Messaging Data

Business Account Identifiers: Meta WhatsApp Business Account ID (WABA ID), Phone Number ID, and encrypted access tokens.
Customer Message Content: Inbound and outbound customer messages (text, order inquiries, transaction updates, and media metadata) transmitted via the official Meta WhatsApp Cloud API webhooks.
Conversation Timestamps: Message send, delivery, and read timestamps for customer support attribution and analytics.

2.3 Technical and Audit Information

IP addresses, browser type, device information, access logs, and timestamped audit logs for security, abuse detection, and rate limiting.

3. How We Use Your Data

Service Delivery: To route WhatsApp customer conversations to your staff inbox, send automated replies, and display business analytics.
AI and Smart Assistance: To generate contextual response suggestions for your staff. Your private customer messages are never used to train public machine learning models.
Security & Verification: To authenticate your team members, prevent unauthorized access, and enforce multi-tenant database isolation.
Compliance: To meet mandatory requirements under Meta Platform Policies and Indian Digital Personal Data Protection (DPDP) Act, 2023.

4. Data Sharing & Third Parties

We strictly limit third-party data sharing to essential platform infrastructure providers:

Meta Platforms, Inc. (WhatsApp Cloud API): Message payloads are transmitted through Meta's official APIs to deliver messages between your shop and your customers.
Cloud Hosting & Infrastructure: Encrypted hosting providers and managed database infrastructure with strict access controls.
Legal Authorities: Only when strictly mandated by valid legal process, court orders, or applicable statutory laws.

5. Data Retention & Security

Encryption: Data in transit is encrypted using TLS 1.3. Sensitive tokens and credentials in our database are encrypted at rest.
Multi-Tenant Isolation: Every merchant's database records are segregated with strict Role-Based Access Controls (RBAC) preventing cross-tenant access.
Retention Period: Active message logs and conversations are retained for the duration of your active account or until a data deletion request is fulfilled.

6. Your Rights & Data Deletion

You and your end customers possess the right to access, rectify, or request deletion of personal information stored on DhandhaDesk. To initiate a data deletion request, please refer to our Data Deletion Policy or contact support@dhandhadesk.com.

7. Contact Us

For any privacy-related grievances or inquiries:

[OWNER LEGAL NAME]
Attention: Grievance Officer & Privacy Team
Email: support@dhandhadesk.com / [SUPPORT EMAIL]