Privacy Policy

1. Who this applies to

We process information about workspace users (people who sign in to this application) and contacts (people whose phone numbers and WhatsApp interactions are stored so we can send service or marketing template messages, record replies, and show delivery status).

2. Information we collect

• Account data: such as name, email address, and authentication details needed to run the product.
• WhatsApp and messaging data: including phone numbers in international format, template names, outbound send metadata, inbound message text or button choices when Meta delivers them to our webhook, marketing opt-in / opt-out flags, and timestamps needed for inbox and campaign features.
• Technical data: such as server logs, IP addresses, and cookies or similar technologies used to keep you signed in and secure the service.

3. How we use information

We use the above data to:

• Provide, operate, and secure the application;
• Send WhatsApp messages only where permitted (for example after marketing consent where required);
• Show delivery and read status returned by WhatsApp;
• Comply with law, respond to abuse, and enforce our terms.

4. Meta / WhatsApp

WhatsApp messages are delivered through Meta’s WhatsApp Business Platform. Meta processes data under its own terms and policies. We do not control Meta’s infrastructure; we send and receive messages using the phone number and credentials you configure for your business.

5. Sharing and sub-processors

We do not sell personal information. We share it only with the following sub-processors, each bound by a Data Processing Agreement, and only to the extent needed to deliver Vardhaka Interiors:

• Hostinger International Ltd. — Application hosting (Next.js), MariaDB database, scheduled cron runners.
  Data processed: WhatsApp access tokens (encrypted at rest), WABA IDs, phone number IDs, display phone numbers, inbound and outbound message content, delivery telemetry, tenant user emails.
  Locations: Lithuania (primary); Netherlands, United Kingdom, United States, Singapore, Brazil, India (data centers / support).
  Data Processing Agreement
• Google LLC (Firebase Cloud Messaging) — Push notifications to Sanka's web and Android clients when a customer replies on WhatsApp or a lead goes stale.
  Data processed: Notification payload only — sender phone number, first ~120 characters of the message body, and a conversation id. Access tokens, WABA IDs, and full conversation history are NOT sent to FCM.
  Locations: United States, Ireland (primary Google Cloud regions).
  Data Processing Agreement
• Stripe, Inc. — Payment processing for tenant subscriptions.
  Data processed: Tenant owner email, organization name, billing address. Does NOT receive WhatsApp access tokens, WABA IDs, message content, or Meta-issued identifiers.
  Locations: United States (primary), Ireland (EU processing), India (INR settlement).
  Data Processing Agreement

We may also disclose information if required by law or to protect rights and safety, subject to the safeguards described in section 12 below.

6. Retention

We keep data for as long as your workspace needs the service and as required for legal, tax, or dispute purposes. You can ask your administrator about deletion where applicable.

7. Your choices

Marketing messages should only be sent with appropriate consent. Contacts may opt out using the mechanisms you advertise (for example replying with a standard opt-out phrase where your workflow supports it). Workspace users may sign out and contact their administrator to access or correct account data, subject to your organisation’s process.

8. Security

We use industry-standard measures appropriate to the service. No method of transmission over the internet is completely secure.

9. International transfers

Data may be processed in countries where we or our providers operate. Where required, appropriate safeguards should be documented by your organisation.

10. Children

The service is not directed at children and should not be used to message minors for marketing.

11. Changes

We may update this page from time to time. The "Last updated" date at the top will change when we do.

12. Government and law-enforcement requests

Vardhaka Interiors Pvt. Ltd. discloses user data to public authorities only when compelled by a valid legal process under Indian law (e.g. the Code of Criminal Procedure, the Information Technology Act, and the Digital Personal Data Protection Act, 2023) or a foreign order recognized through a Mutual Legal Assistance Treaty. Every request is:

• Reviewed for legality by our designated Legal Contact before any disclosure — the request must be in writing, cite its statutory basis, and identify the requesting authority.
• Challenged where overbroad or unlawful — we formally object in writing and, where appropriate, engage external counsel to file a motion to quash or narrow the order.
• Limited to the minimum data necessary — we disclose only the specific records identified in the order; no bulk exports, no related metadata unless separately compelled.
• Documented — we maintain an internal register of every request, its legal basis, our decision, the records disclosed, and the personnel involved.
• Where legally permitted, we notify affected users before disclosure.

13. Data controller and contact

The data controller for personal information processed through Vardhaka Interiors is:

• Entity: Vardhaka Interiors Pvt. Ltd.
• Jurisdiction: India
• Data protection contact: privacy@vardhakainterior.com
• Support phone: +91 94822 83259
• Support email: sanka@metasanka.com