Privacy Policy

WA TARANG ("we", "our", "us") is a WhatsApp Business management platform operated by WA TARANG Technologies, Hyderabad, India. This Privacy Policy explains how we collect, use, and protect information when you use our platform at watarang.in.

We collect the following types of information: Account information: your name, email address, business name, and password (stored as a hashed value — we never store your plain-text password). Business information: WhatsApp phone number, business type, address, logo, and settings you provide. Customer data: contact names, phone numbers, and conversation history that you import or collect through the Platform. This data belongs to you. Payment information: billing details processed securely by Razorpay. We do not store your full card number on our servers. Usage data: pages visited, features used, timestamps, and error logs — used to improve the product.

We use your information to: • Operate and deliver the Platform (sending/receiving WhatsApp messages on your behalf) • Process subscription payments and wallet top-ups • Send transactional emails (OTP codes, invoices, alerts) • Provide customer support • Improve product features and fix bugs • Comply with legal obligations We do not use your data for advertising and we do not sell it to third parties.

Your data is stored on Neon PostgreSQL (hosted on AWS, Singapore region). We use industry-standard security measures including: • HTTPS encryption for all data in transit • AES-256 encryption for sensitive credentials (WhatsApp API tokens) • Bcrypt hashing for all passwords • Role-based access controls within the platform No system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at security@watarang.in.

WA TARANG integrates with the following third-party services. Their privacy policies apply to data processed by them: • Meta (WhatsApp Cloud API) — for sending/receiving WhatsApp messages • Razorpay — for payment processing • Vercel — for hosting and serverless functions • Neon — for database hosting • Anthropic (Claude) — for AI reply suggestions (message context sent for suggestions only) We choose partners who maintain strong data protection practices.

You are responsible for ensuring that you have the right to collect and use your customers' phone numbers and messages under applicable law. WA TARANG acts as a data processor on your behalf for this data. Your customers can request deletion of their data by contacting you directly. You can delete contacts from the platform at any time.

We retain your account data for as long as your account is active. After account deletion: • Business and contact data is deleted within 30 days • Payment records are retained for 7 years as required by Indian tax law • Activity logs are automatically deleted after 6 months You can request immediate deletion of your account by contacting support@watarang.in.

We use only essential session cookies (via NextAuth) to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required for essential cookies under Indian law.

Under India's Digital Personal Data Protection Act (DPDPA) 2023, you have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data • Withdraw consent for data processing To exercise these rights, email us at privacy@watarang.in. We will respond within 30 days.

WA TARANG is not intended for use by persons under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app banner at least 14 days before the changes take effect. Continued use after the effective date constitutes acceptance.

For privacy questions or data requests: Email: privacy@watarang.in Address: WA TARANG Technologies, Hyderabad, Telangana, India