Privacy Policy

This Privacy Policy explains what personal data VartaAPI collects, why, and what choices you have. VartaAPI is operated by Kavin International.

1. Information we collect

• Account information — name, email address and organisation details you give us when you sign up, and the team members you invite.
• WhatsApp connection data — your WhatsApp Business Account ID, phone number ID, display number and the access token Meta issues, so we can send and receive on your behalf.
• Contacts and messages — the contacts you upload and the content of messages that pass through the Service, including inbound replies and media, so we can deliver them and show delivery, read and reply status.
• Billing data — subscription records and wallet ledger entries. Card details are handled by our payment gateway; we never see or store your full card number.
• Usage data — technical logs such as timestamps, IP address and error information, used to operate and secure the Service.

2. How we use it

• To provide, maintain and improve the Service.
• To send the WhatsApp messages and campaigns that you initiate.
• To show analytics such as sent, delivered, read and reply counts.
• To meter usage and charge your subscription correctly.
• To secure accounts, prevent abuse and comply with Meta’s policies and applicable law.

3. Legal basis

We process personal data to perform our contract with you, to meet legal obligations, and for our legitimate interest in running and securing the Service. Where the Digital Personal Data Protection Act, 2023 applies, we process personal data for the lawful purposes above and act as a Data Processor for the customer data you upload.

4. Who we share it with

We do not sell your personal information. We share data only with:

5. International transfers

Some providers process data outside India. Where that happens we rely on the provider’s contractual protections and only use providers we consider adequate.

6. Retention

We keep your information for as long as your account is active, and afterwards only as long as needed to provide the Service, resolve disputes, and meet tax and accounting obligations. Financial records are retained for the period Indian law requires. See our data deletion instructions.

Inbound media is fetched from Meta on demand rather than stored; Meta keeps its copy for about 30 days, after which older attachments stop opening.

7. Your rights

You may access, correct, export or delete your personal information by contacting us. You can disconnect your WhatsApp Business account at any time, which stops us sending on your behalf.

8. Security

We use industry-standard measures to protect data in transit and at rest. Access tokens and API keys are stored hashed or encrypted, and API keys are shown in plaintext only once. No method of transmission or storage is completely secure, but we work to protect your information and keep improving.

9. Cookies

Our website uses cookies that are necessary for it to function, and may use analytics cookies to understand how the site is used. The application uses a session token to keep you signed in.

10. Children

The Service is for businesses and is not directed at children. We do not knowingly collect personal data from children.

11. Changes

We may update this policy. We will change the “last updated” date and, for material changes, give notice in the app or by email.

Contact

See also: Terms · Privacy · Refunds · Data deletion