Privacy Policy

We collect the following categories of information:

• Account information — name, email address, phone number, and password (or Firebase-authenticated identity) provided when you register.
• Business information — business name, WhatsApp Business Account details, phone numbers connected via the Meta Embedded Signup flow, and quality/rating data returned by Meta.
• Customer/contact data you upload or sync — names, phone numbers, custom attributes, and message history for the contacts you manage through the Service, which you control as the data controller for your own customers.
• Campaign and messaging data — message templates, campaign configuration, delivery/read receipts, and inbound replies received via the WhatsApp Business Platform.
• Billing information — plan/subscription details, invoices, and GSTIN (if supplied); payment card and bank details are handled directly by Razorpay and are never stored on our servers.
• Usage and log data — IP address, browser/device type, pages visited, and actions taken within the dashboard, collected automatically for security and analytics purposes.
• Communications — information you provide when contacting support or using the "Talk to us" contact form, including preferred callback time and reason for contact.

We use the information we collect to:

• Provide, operate, and maintain the Service, including sending WhatsApp messages on your behalf via the Meta WhatsApp Business Platform.
• Process payments, manage subscriptions and add-ons, and issue invoices via Razorpay.
• Monitor phone number quality, delivery performance, and campaign compliance to keep your WhatsApp Business Accounts in good standing.
• Send transactional and account-related emails (e.g. billing receipts, delivery reports, support responses) via Brevo.
• Detect, prevent, and investigate fraud, abuse, or violations of our Terms of Service or Meta's platform policies.
• Respond to support requests and callback bookings submitted through the contact widget.
• Improve, secure, and develop new features for the Service.
• Comply with applicable legal, tax, and regulatory obligations.

When you upload or import contact lists (via CSV or otherwise) for use in your campaigns, you are acting as the data controller for that data, and ZROTON AUTOMATIONS Pvt Ltd processes it solely as a service provider on your behalf and in accordance with your instructions.

You are responsible for ensuring you have a lawful basis and, where required, prior opt-in consent to message each contact you upload, and for honoring opt-out requests. We provide tools (contact-level cooldowns, opt-out handling from inbound webhook signals, and status tracking) to help you manage this, but the underlying compliance obligation is yours as the sender.

We share information only as necessary to operate the Service, with:

• Meta Platforms, Inc. — to send/receive WhatsApp messages, manage WhatsApp Business Accounts, and retrieve phone number quality and template status via the Meta Graph API.
• Razorpay — to process subscription payments, addon purchases, and generate invoices.
• Brevo — to deliver transactional emails on our behalf.
• Firebase (Google) — for authentication and identity verification.
• Other infrastructure and analytics providers who process data under contract, solely to support the Service.
• Law enforcement, regulators, or courts, where required by law or to protect our rights, users, or the public.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

We do not sell personal information to third parties.

We retain account, billing, and campaign data for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Customer/contact data you upload is retained until you delete it or close your account, after which it is purged within a reasonable period.

We use industry-standard safeguards — including encrypted connections (TLS), access controls, and HMAC-verified webhooks — to protect information against unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may request access to, correction of, or deletion of your personal information, or withdraw consent for its processing, by contacting us at the details below. You can update most account and business details directly from your dashboard.

Recipients of WhatsApp messages sent through the Service can opt out at any time by replying "STOP" or through the opt-out mechanisms supported by the WhatsApp Business Platform; opt-outs are honored automatically going forward.

We use essential cookies and local storage to maintain your session, remember preferences (such as theme), and cache onboarding state for faster redirects. We do not use third-party advertising cookies.

The Service is intended for business use by adults and is not directed at individuals under 18. We do not knowingly collect personal information from children.

Our service providers (including Meta, Razorpay, Brevo, and Firebase) may process data on servers located outside your country. Where this occurs, we rely on those providers' contractual and security safeguards to protect your information.

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

For questions about this Privacy Policy, or to exercise your data rights, contact us at admin@zroton.com.

In accordance with the Information Technology Act, 2000 and rules made thereunder, grievances regarding this Policy or the Service may be addressed to the Grievance Officer, ZROTON AUTOMATIONS Pvt Ltd, at admin@zroton.com.