Privacy Policy

This Privacy Policy is issued by Rayabhari Technologies Private Limited (trading as Rayabhari Tech), a company registered in India with its registered office at No 1538, 14th Main, Kumaraswamy Layout, 1st Stage Extension, Bengaluru (Bangalore Urban), Karnataka 560078, India. In this policy, “we”, “us” and “our” refer to Rayabhari Technologies Private Limited.

We build and operate software for businesses. This includes our website at https://www.rayabharitech.com, the products and services described on it, and a messaging platform that lets businesses connect their own WhatsApp number and send and receive messages through the WhatsApp Business Platform (the “Service”).

This policy applies to visitors of our website, to the businesses that use our Service (our “Customers”) and their staff, and to the people who exchange WhatsApp messages with those businesses through our Service (“End Users”).

We collect the following categories of information.

Business account details

• The name of the business, its address, GST or other registration details where provided, and billing information.
• Names, work email addresses, phone numbers and login credentials of the people who administer or use the account.
• The WhatsApp Business Account identifiers, phone numbers and message templates that the Customer connects to our Service.

WhatsApp data processed on behalf of our Customers

When a Customer uses our Service to message people on WhatsApp, we process the data needed to send and receive those messages. This includes:

• The phone numbers of the people the Customer messages and of the people who message the Customer.
• The WhatsApp profile name shown for those phone numbers.
• The content of messages, including text, media files (images, documents, audio, video), templates and interactive elements.
• Timestamps, delivery status and read status of each message, and any error information returned by WhatsApp.

Technical data

• IP address, browser type and version, device and operating system information, and the pages you visit on our website or in the Service.
• Server logs, audit logs and diagnostic information generated when the Service is used.
• Cookies and similar technologies. Analytics cookies are only set if you accept them through the cookie banner on our website.

Information you send us directly

• Details you enter in forms on our website, including the contact page, demo requests and job applications, such as your name, email address, phone number and message.
• Information in emails, support requests and other communication you send to us.

We use the information described above for these purposes:

• To provide the Service, including sending and receiving WhatsApp messages for the Customer that owns the account, displaying conversations to that Customer, and keeping message history available to them.
• To set up, secure and administer accounts, authenticate users, prevent abuse and detect fraud or security incidents.
• To support our Customers and respond to enquiries, support requests and contact form submissions.
• To bill our Customers for the software and to keep the financial records that Indian law requires.
• To monitor, maintain and improve the reliability and performance of the Service and our website.
• To comply with applicable law, respond to lawful requests from authorities, and enforce our Terms of Service.

We do not sell personal data. We do not use the data of one Customer, or of the End Users who message that Customer, to provide services to a different Customer, to build marketing profiles, or to train models that are offered to other businesses.

Our Customers decide which messages are sent, to whom, and when. They are responsible for obtaining any consent or opt-in required before messaging a person, for the content of their messages, and for honouring requests from people who no longer wish to be contacted.

For the WhatsApp data described in section 2, we act on behalf of, and on the instructions of, the Customer that owns the WhatsApp Business Account. Under India’s Digital Personal Data Protection Act, 2023, the Customer is the Data Fiduciary for that data and we act as a Data Processor. We process it only to provide the Service to that Customer.

For the information that we collect for our own purposes, such as account details of our Customers, website form submissions and technical data about our website, we act as the Data Fiduciary.

If you are an End User and have a question about how a specific business uses your data, please contact that business directly. You may also contact us at info@rayabharitech.com and we will pass your request on to the Customer concerned.

We share personal data only with the parties listed here, and only to the extent needed.

Meta Platforms and WhatsApp

Messages sent and received through our Service are delivered through the WhatsApp Business Platform operated by Meta Platforms, Inc. and its affiliates. Phone numbers, message content, media and message status information are therefore also processed by WhatsApp. That processing is governed by WhatsApp’s own terms and policies, including the WhatsApp Privacy Policy and the WhatsApp Business Terms of Service. We recommend that Customers and End Users read them.

Hosting and infrastructure providers

We use cloud hosting, storage, email delivery and monitoring providers to run our website and the Service. These providers process data on our behalf under contracts that restrict them to providing their services to us, and they are not permitted to use the data for their own purposes.

Other disclosures

We may disclose information where the law requires it, to respond to a valid request from a court, regulator or law enforcement agency, to protect the rights, safety or property of our Customers, End Users or ourselves, or in connection with a merger, acquisition or sale of our business, in which case this policy will continue to apply to the data transferred.

Our infrastructure providers may store data in data centres outside India. Where that happens we take steps to ensure the data remains protected in line with this policy and applicable law.

We keep account details and WhatsApp data for as long as the Customer’s account is active, so that the Customer can see its message history and we can provide the Service.

When an account is closed, or when a Customer asks us to delete data, we delete or anonymise the data within 90 days, unless applicable law requires us to keep it for longer. Invoices and related financial records are kept for the period required by Indian tax and company law. Backups are overwritten on a rolling schedule and data in backups is removed when those backups expire.

Contact form submissions and other direct enquiries are kept for as long as needed to respond to you and for a reasonable period afterwards, after which they are deleted.

We use reasonable technical and organisational measures to protect personal data, including encryption of data in transit, encrypted storage of credentials, role-based access controls so that only authorised staff can access Customer data, logging of administrative access, and regular software updates. Messages between WhatsApp and our platform are transmitted over encrypted connections provided by the WhatsApp Business Platform.

No method of transmission or storage is completely secure. If we become aware of a personal data breach affecting you, we will notify the affected Customer and, where required, the Data Protection Board of India and the affected individuals, without undue delay.

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you have the right to:

• Access: ask for a summary of the personal data we hold about you and how it is being processed.
• Correction: ask us to correct or update inaccurate or incomplete personal data.
• Erasure: ask us to delete your personal data where we no longer need it for the purpose it was collected or where the law requires deletion.
• Withdrawal of consent: withdraw any consent you have given us at any time. This does not affect processing carried out before you withdrew it.
• Grievance redressal: raise a complaint about how your personal data has been handled and receive a response within the time required by law.
• Nomination: nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email info@rayabharitech.com from the email address associated with your account, or write to us at the registered address below. We may ask you to verify your identity before acting on a request. If you are an End User, we may need to refer your request to the Customer that holds your data, and we will tell you when we do so.

Grievances can be sent to info@rayabharitech.com with the subject line “Grievance”. If you are not satisfied with our response, you may approach the Data Protection Board of India.

You can ask us to delete your account data, or the data held about you as an End User, at any time. The steps, what gets deleted and the timeframe are explained on our Data Deletion page.

Our website and Service are intended for businesses and for adults acting on behalf of businesses. They are not directed at children, and we do not knowingly collect personal data from anyone under 18 years of age for our own purposes. If you believe a child has provided us with personal data, contact us at info@rayabharitech.com and we will delete it.

We may update this policy from time to time to reflect changes in our Service, in the law or in the requirements of the WhatsApp Business Platform. When we do, we will change the “Last updated” date at the top of this page and, for material changes, notify our Customers by email or through the Service. Continued use of the Service after a change takes effect means you accept the updated policy.

If you have any question about this policy or about how we handle personal data, contact us using the details below. We aim to respond to all privacy enquiries promptly.