Privacy Policy

Krizam Technologies ("Krizam", "we", "our", or "us") operates bsp.krizam.com — a WhatsApp Business Solution Platform that enables businesses to send and receive messages via the WhatsApp Business Platform API, manage message templates, and engage with their customers through automated and manual messaging workflows.

This Privacy Policy describes how we collect, use, store, share, and protect information when you use our platform, including through our integration with Meta's WhatsApp Business API and Facebook Login for Business. By using Krizam's services, you agree to the practices described in this policy.

---

1. Who This Policy Applies To

This policy applies to:

• Platform Users (Clients): Businesses and developers who create accounts on Krizam BSP to manage their WhatsApp Business Accounts (WABAs).
• End Users: Customers of our clients who receive or send WhatsApp messages through our platform.
• Visitors: Anyone who visits our website at krizam.com or bsp.krizam.com.

---

2. Information We Collect

We collect information in the following ways:

a) Information You Provide Directly

• Name, email address, phone number, and business details when you register.
• WhatsApp Business Account (WABA) details, phone number IDs, and business portfolio information.
• Message templates you create through our platform.
• Payment and billing information (processed securely via third-party providers).

b) Information from Meta / Facebook Login for Business

• When you connect your WhatsApp Business Account via our Embedded Signup flow, we receive OAuth tokens, WABA IDs, and phone number IDs from Meta.
• We only request the minimum permissions required: whatsapp_business_messaging and whatsapp_business_management.
• We do not access your personal Facebook profile or any data beyond what is required to operate the WhatsApp Business Platform on your behalf.
• Data shared via Facebook Login for Business is governed by Meta's Platform Terms and our agreements with Meta.

c) WhatsApp Messaging Data

• Message content, sender/recipient phone numbers, timestamps, and delivery statuses received via WhatsApp webhooks.
• This data is processed to display conversations in your inbox and is stored securely in our database.
• We process this data strictly on behalf of our clients (data processors) and do not use end-user message data for our own marketing or analytics.

d) Automatically Collected Data

• IP address, browser type, device type, and operating system.
• Pages visited, features used, and actions taken on our platform.
• Cookies and session identifiers (see Section 8).

---

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Krizam BSP platform and all its features.
• Connect your business to the WhatsApp Business API via Meta's Cloud API.
• Send and receive WhatsApp messages on behalf of our clients.
• Display message conversations, delivery statuses, and analytics in your dashboard.
• Create, submit, and manage WhatsApp message templates on your behalf.
• Process billing and payments for platform usage.
• Provide customer support and respond to queries.
• Improve platform performance, fix bugs, and add new features.
• Comply with legal obligations and Meta's platform policies.
• Detect and prevent fraud, abuse, and security incidents.

---

4. Meta Platform Data & WhatsApp Business API

Krizam is a WhatsApp Business Solution Provider (Tech Provider) operating under Meta's WhatsApp Business Platform. By using our platform:

• You authorize Krizam to act as a Technology Provider to access and manage your WABA on your behalf.
• We access your WhatsApp Business Account data strictly to provide the services you have requested.
• We do not use Meta platform data for advertising, profiling, or any purpose beyond delivering our platform services.
• Access tokens obtained via Facebook Login for Business are stored securely and are used only to make authorized API calls to Meta's Graph API on your behalf.
• Webhook data (incoming messages, status updates) is received, processed, and stored solely for the purpose of showing your message history and enabling replies.
• We comply fully with Meta's Platform Terms, WhatsApp Business Policy, and Meta's Developer Policies.

---

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

• Meta/WhatsApp: To facilitate API access, template submissions, and message delivery via the WhatsApp Business Platform.
• Service Providers: Trusted third-party vendors who assist with hosting, payment processing, and infrastructure — all bound by strict confidentiality agreements.
• Legal Requirements: When required by applicable law, court order, or government authority.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, with prior notice to users.
• With Your Consent: Any sharing beyond the above will only occur with your explicit consent.

---

6. Data Retention

• Account data is retained for the duration of your account and for up to 90 days after account deletion, unless a longer period is required by law.
• WhatsApp message data (conversation history) is retained for as long as your account is active or as required to provide the service.
• You may request deletion of your data at any time by contacting us (see Section 12).
• Access tokens from Meta are revoked and deleted upon account disconnection or on your request.

---

7. Data Security

We implement industry-standard technical and organizational security measures including:

• Encrypted data transmission using HTTPS/TLS.
• Secure storage of API tokens and credentials using environment-level secrets management.
• Role-based access controls limiting data access to authorized personnel only.
• Regular security reviews and monitoring of our infrastructure.

While we take every reasonable measure to protect your data, no system is 100% secure. We encourage you to use strong passwords and notify us immediately of any suspected unauthorized access.

---

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication: Keeping you logged in to your Krizam BSP account.
• Session Management: Maintaining your preferences and session state.
• Analytics: Understanding how the platform is used to improve our services.

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

---

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

---

10. India — DPDPA Compliance

Krizam is committed to complying with India's Digital Personal Data Protection Act (DPDPA), 2023. As a data fiduciary for our platform clients and a data processor for end-user message data:

• We collect and process personal data only for lawful purposes with a valid consent basis.
• We provide mechanisms for data principals to access, correct, and erase their data.
• We implement appropriate security safeguards as required under the DPDPA.
• We do not transfer personal data outside India except in compliance with applicable regulations.

---

11. Children's Privacy

Krizam's platform is intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

---

12. Third-Party Links

Our platform may contain links to third-party websites or services, including Meta's Facebook and WhatsApp platforms. We are not responsible for the privacy practices of those third parties and encourage you to review their respective privacy policies.

---

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes by:

• Updating the "Last updated" date at the top of this page.
• Sending an email notification to registered account holders for significant changes.

Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

---

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Company: Krizam Technologies
• Platform: bsp.krizam.com
• Email: [email protected]
• Website: krizam.com