Legal

Privacy Policy

Last updated: 6 October 2026

1. Who we are

RichAutomate, a product of RichPOS Software ("RichAutomate", "we", "us", "our"), operates the WhatsApp Business automation platform at richautomate.in. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website and platform. For questions, email info@richautomate.in.

2. Information we collect

We collect information in three categories:

  • Account information. Name, email, company name, phone number, billing address, and authentication credentials supplied at signup or during account configuration.
  • Platform usage data. WhatsApp Business Account identifiers, phone number IDs, message metadata, template approvals, campaign records, contact lists you upload, conversation logs, webhook payloads from Meta, and API usage logs.
  • Technical data. IP address, browser type, device information, pages visited, referrers, cookies, and analytics events.

3. How we use your information

  • Operate, maintain, and improve the platform.
  • Authenticate users and provide access to their tenant data.
  • Process billing and payments through Razorpay.
  • Deliver and route messages through Meta Cloud API on your behalf.
  • Send service announcements, security alerts, and support communications.
  • Comply with legal, tax, and regulatory obligations under Indian and international law.
  • Detect, prevent, and respond to fraud, abuse, or policy violations.

4. Cookies and tracking

We use first-party and third-party cookies to keep you signed in, measure usage, and provide aggregate analytics. Third-party cookies may be set by Google Analytics and Meta Pixel where enabled. You can control cookies through your browser settings or via the cookie banner if presented. Disabling cookies may affect platform functionality.

On our own website we also set a first-party analytics cookie (ra_vid, a random ID kept for 12 months) to count visits and form sign-ups; it is never shared with third parties, IP addresses are stored only as a one-way hash, and it is switched off when your browser sends Do Not Track or Global Privacy Control.

5. Advertising and third-party vendors

Some pages on richautomate.in (such as our blog and resource articles) may display advertising served by third-party vendors, including Google.

We are in the process of enabling Google AdSense on richautomate.in. Once enabled, Google and its third-party vendor partners will use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this website or other websites. Third-party vendors, including Google, may use these cookies to serve personalised advertising; you may opt out of personalised advertising at any time via Google Ads Settings or aboutads.info.

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices.
  • For more information on how Google uses data when you use our partners' sites or apps, see Google's Privacy & Terms.

We do not control the cookies or data practices of these third-party vendors; their use of information is governed by their own privacy policies.

6. How we share information

We do not sell personal data. We share information only with:

  • Meta Platforms — to deliver WhatsApp Business API messages on your behalf.
  • Razorpay — to process payments and refunds.
  • Cloudflare — for edge caching, security, and DDoS protection.
  • Infrastructure providers — for hosting and email delivery, bound by data processing agreements.
  • Amazon Web Services (Amazon Bedrock) — runs the AI model behind RichAutomate AI features, only when you use them (see "AI features" below).
  • AI providers you connect yourself (OpenAI, Anthropic, Google, OpenRouter, Sarvam) — only if you add your own API key and choose that provider for an AI feature.
  • Legal authorities — when required by law, court order, or to protect the rights, property, or safety of our users or the public.

AI features

RichAutomate AI features are optional and only run when you use them. When they run, we send the following to the AI model, which is hosted by Amazon Web Services (Amazon Bedrock), or to an AI provider you connected with your own key:

  • Template assistant ("Write with AI", Improve, Shorten, Translate, Check for Meta): the template text you type (header, body, footer, button labels, sample values), the chosen language and tone, and your business name. No contacts, phone numbers or chat messages are sent.
  • AI agent auto-replies (only if you switch them on): the customer's incoming WhatsApp message, recent messages of that conversation, and matching passages from your knowledge base, so the model can write a reply.
  • Knowledge base and system-prompt tools: the documents and text you upload to them.

This data is used to produce the AI response. Amazon Bedrock does not use it to train models and does not share it with model providers; it is processed under AWS's data processing terms, which give protection equal to this policy. In the RichAutomate mobile app we ask for your permission before an AI feature sends any data, and you can withdraw it at any time in the app's settings.

Improving RichAutomate AI

As set out in section 7 of our Terms of Service, we may use the content you create in RichAutomate (templates, flows, knowledge base material, AI instructions and prompts, AI responses and your edits, ratings and feedback on them) and usage data about AI features to develop and improve RichAutomate AI. We remove or mask personal details first and work with de-identified or aggregated data wherever possible. We do not use the WhatsApp conversations between you and your customers, or your contact lists, for this, we do not sell this data, and we do not give it to third parties to train their own models. You can opt out at any time by emailing info@richautomate.in.

7. Data retention

We retain account and platform usage data for the duration of your account plus a reasonable period for legal, tax, and audit requirements (typically up to 7 years for financial records under Indian tax law). On account deletion, we remove personally identifiable data within 30 days, retaining only anonymized aggregate metrics and records required by law.

8. Your rights

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data. Indian users have rights under the Digital Personal Data Protection Act, 2023. EU and UK users have rights under the GDPR and UK GDPR. To exercise any of these rights, email info@richautomate.in with verification of your identity. We respond within 30 days.

9. Security

We use HTTPS with HSTS, encrypted password storage, application-layer multi-tenant isolation, regular security patching, and audit logs. No system is perfectly secure; we encourage strong passwords and prompt reporting of suspected security issues to info@richautomate.in.

10. Children

RichAutomate is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If we become aware of such collection, we will delete the data promptly.

11. International transfers

Personal data may be processed in countries other than the one in which you reside. We rely on adequate data transfer mechanisms including Standard Contractual Clauses where required.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email to active customers and posted on this page with a revised "last updated" date. Continued use of the platform after changes constitutes acceptance.

13. Contact

Questions, concerns, or data requests: info@richautomate.in.

14. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for RichAutomate is:

Grievances are acknowledged within 24 hours of receipt and resolved within 15 days, as required under the said Rules. Please include your registered email or WhatsApp number so we can locate your account.