Privacy Policy

1. Who we are

RichAutomate ("RichAutomate", "we", "us", "our") operates the WhatsApp Business automation platform at richautomate.in. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website and platform. For questions, email [email protected].

2. Information we collect

We collect information in three categories:

• Account information. Name, email, company name, phone number, billing address, and authentication credentials supplied at signup or during account configuration.
• Platform usage data. WhatsApp Business Account identifiers, phone number IDs, message metadata, template approvals, campaign records, contact lists you upload, conversation logs, webhook payloads from Meta, and API usage logs.
• Technical data. IP address, browser type, device information, pages visited, referrers, cookies, and analytics events.

3. How we use your information

• Operate, maintain, and improve the platform.
• Authenticate users and provide access to their tenant data.
• Process billing and payments through Razorpay.
• Deliver and route messages through Meta Cloud API on your behalf.
• Send service announcements, security alerts, and support communications.
• Comply with legal, tax, and regulatory obligations under Indian and international law.
• Detect, prevent, and respond to fraud, abuse, or policy violations.

4. Cookies and tracking

We use first-party and third-party cookies to keep you signed in, measure usage, and provide aggregate analytics. Third-party cookies may be set by Google Analytics, Google AdSense, and Meta Pixel where enabled. You can control cookies through your browser settings or via the cookie banner if presented. Disabling cookies may affect platform functionality.

5. How we share information

We do not sell personal data. We share information only with:

• Meta Platforms — to deliver WhatsApp Business API messages on your behalf.
• Razorpay — to process payments and refunds.
• Cloudflare — for edge caching, security, and DDoS protection.
• Infrastructure providers — for hosting and email delivery, bound by data processing agreements.
• Legal authorities — when required by law, court order, or to protect the rights, property, or safety of our users or the public.

6. Data retention

We retain account and platform usage data for the duration of your account plus a reasonable period for legal, tax, and audit requirements (typically up to 7 years for financial records under Indian tax law). On account deletion, we remove personally identifiable data within 30 days, retaining only anonymized aggregate metrics and records required by law.

7. Your rights

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data. Indian users have rights under the Digital Personal Data Protection Act, 2023. EU and UK users have rights under the GDPR and UK GDPR. To exercise any of these rights, email [email protected] with verification of your identity. We respond within 30 days.

8. Security

We use HTTPS with HSTS, encrypted password storage, application-layer multi-tenant isolation, regular security patching, and audit logs. No system is perfectly secure; we encourage strong passwords and prompt reporting of suspected security issues to [email protected].

9. Children

RichAutomate is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If we become aware of such collection, we will delete the data promptly.

10. International transfers

Personal data may be processed in countries other than the one in which you reside. We rely on adequate data transfer mechanisms including Standard Contractual Clauses where required.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email to active customers and posted on this page with a revised "last updated" date. Continued use of the platform after changes constitutes acceptance.

12. Contact

Questions, concerns, or data requests: [email protected].