# Privacy Policy – eDigiTech
**Last Updated: 27 October 2026**
EDIGITECH (“eDigiTech,” “we,” “our,” or “us”) is committed to protecting the privacy and security of the personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access or use our WhatsApp Business API Platform, website, and related services.
By using our services, you acknowledge this Privacy Policy, subject to your rights and applicable law.
## 1. Information We Collect
We may collect the following categories of information, depending on how you use our services:
**1.1 Personal Information**
- Name, email address, and phone number.
- Login credentials and account-related information.
- Communication and support request details.
**1.2 Business Information**
- Company or business name and registered address.
- GSTIN and other business registration details, where applicable.
- Billing information and subscription details.
**1.3 Platform Usage Information**
- Login activity, feature usage, campaign statistics, API requests, and error logs.
- Device, browser, IP address, and technical diagnostic information.
- Information required to maintain platform security and prevent misuse.
**1.4 Contact Lists and Messaging Data**
When you use our WhatsApp Business API services, we may process contact names, phone numbers, message content, templates, delivery reports, campaign details, and related metadata as necessary to provide the services.
You are responsible for ensuring that you have the appropriate rights, permissions, and consent required to upload and process contact information.
**1.5 Payment and Transaction Information**
We may collect payment status, transaction references, invoice details, and billing records. Payment card or banking information may be processed directly by the relevant payment service provider, depending on the payment method used.
## 2. How We Use Your Information
We use collected information for legitimate business and operational purposes, including:
- Providing, operating, and maintaining our WhatsApp Business API Platform.
- Managing accounts, contacts, campaigns, broadcasts, team inboxes, and automated replies.
- Processing subscriptions, payments, invoices, and billing inquiries.
- Sending service notifications, security alerts, and account-related communications.
- Providing technical support and responding to customer requests.
- Monitoring performance, troubleshooting errors, and improving platform functionality.
- Preventing fraud, unauthorized access, spam, and other prohibited activities.
- Meeting applicable legal, tax, regulatory, and recordkeeping obligations.
- Sending promotional communications where permitted by law and subject to applicable preferences.
## 3. Legal Basis and Consent
We process personal information as permitted by applicable law, including where necessary to provide contracted services, comply with legal obligations, protect legitimate business interests, or act on valid consent where required.
Where consent is required, you may withdraw it subject to applicable law. Withdrawal may affect our ability to provide certain features or services.
If you upload or submit personal information belonging to your customers, employees, or other contacts, you are responsible for ensuring that such information is collected and shared lawfully and that appropriate notices and consents have been provided wherever required.
## 4. Data Security
We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse.
Depending on the service and infrastructure involved, these measures may include:
- HTTPS and SSL/TLS encryption for data in transit.
- Access restrictions and authentication controls.
- Security monitoring and technical logging.
- Data protection procedures and system maintenance.
- Security assessments and improvements where appropriate.
Payment processing security depends partly on the payment provider used. PCI-DSS compliance applies only where relevant and should not be interpreted as a claim that every eDigiTech system is independently PCI-DSS certified.
Although we take reasonable precautions, no online platform or electronic transmission can be guaranteed to be completely secure.
## 5. Data Sharing and Disclosure
**eDigiTech does not sell personal information to third parties.**
We may share or disclose information in the following circumstances:
**5.1 WhatsApp and Meta**
Information necessary for WhatsApp Business API functionality may be transmitted to or processed by WhatsApp, Meta, and their relevant service providers, subject to their applicable terms and privacy policies.
**5.2 Service Providers**
We may share relevant information with authorized providers supporting hosting, infrastructure, analytics, customer support, payment processing, security, and other operational functions.
**5.3 Legal and Regulatory Requirements**
We may disclose information when required by applicable law, a valid legal process, a competent authority, or when reasonably necessary to protect rights, safety, security, or prevent fraud.
**5.4 Business Transfers**
Information may be transferred as part of a merger, restructuring, acquisition, or transfer of business assets, subject to applicable legal requirements and appropriate safeguards.
Service providers are expected to handle information in accordance with applicable contractual, security, and privacy obligations.
## 6. Data Retention and Deletion
We retain personal information only for as long as reasonably necessary to provide services, fulfill the purposes described in this policy, resolve disputes, maintain security, and meet legal or regulatory obligations.
- Account information may be retained while your account remains active.
- Following an account deletion request, eligible personal information will generally be deleted or anonymized within 90 days, unless a longer retention period is required or permitted by law.
- Tax records, invoices, transaction records, and other legally required documents may be retained for the applicable statutory period.
- Backups, security logs, and information held by third-party providers may remain for limited periods in accordance with relevant retention procedures and legal obligations.
Deletion of information from eDigiTech systems does not necessarily result in immediate deletion from WhatsApp/Meta systems or other independent third-party services. Requests concerning such information may need to be directed to the relevant provider.
## 7. Your Privacy Rights
Subject to applicable law, you may have the right to:
- Request access to personal information relating to you.
- Request correction of inaccurate or incomplete information.
- Request deletion of eligible personal information.
- Withdraw consent where processing is based on consent.
- Opt out of promotional communications.
- Raise concerns or submit privacy-related complaints.
You can manage certain account information through the platform dashboard, where available. For other requests, contact us using the details provided below.
We may need to verify your identity before processing a request. Some information may be retained where required by law or where a lawful exception applies.
If you are a business customer uploading contact lists, you are responsible for addressing requests from those contacts where the applicable law places that responsibility on you.
## 8. Cookies and Similar Technologies
Our website and platform may use cookies or similar technologies to:
- Maintain login sessions and authentication.
- Support essential website and platform functionality.
- Remember user preferences.
- Understand website usage and improve performance through analytics, where enabled.
Essential cookies may be required for the service to function properly. Non-essential analytics or marketing cookies will be used subject to applicable consent requirements.
You can manage cookies through your browser settings and, where available, our cookie preference controls. Disabling certain cookies may affect platform functionality.
## 9. Third-Party Services and External Links
Our services may integrate with or link to third-party platforms, including WhatsApp/Meta, payment gateways, hosting providers, and analytics services.
These third parties may process information under their own privacy policies and terms. eDigiTech does not control the independent privacy practices of third parties, and we encourage you to review their policies before using their services.
## 10. Children's Privacy
Our business services are intended for individuals aged 18 and above acting for themselves or an authorized business. We do not knowingly collect personal information directly from children in violation of applicable law.
If you believe that information has been collected unlawfully from a child, please contact us so that we can review the matter and take appropriate action.
## 11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, data processing practices, technology, or legal obligations.
The revised policy will be published on our website or platform with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent.
## 12. Contact and Privacy Requests
For privacy questions, data access or deletion requests, corrections, or complaints, contact:
**EDIGITECH**
**Address:** 411, Crossroads, Bhumkar Chowk, Wakad, Pune – 411057, Maharashtra, India
**Email:** sales@edigitech.in
**Phone:** +91 92266 00099
Please include sufficient information to help us identify your account and understand your request. Do not send passwords, API secrets, or other sensitive authentication credentials by email.
We will review privacy requests and respond in accordance with applicable law.
---
This Privacy Policy should be read alongside the eDigiTech Terms and Conditions and Refund and Cancellation Policy. Where applicable law provides stronger privacy protections or mandatory rights, those legal requirements will prevail.