Privacy Policy
Privacy Policy
Effective Date: 23 April 2026
Effective Date: 23 April 2026
Effective Date: 23 April 2026
Effective Date: 23 April 2026
1. Who We Are
1. Who We Are
1. Who We Are
1. Who We Are
Tradais Digital ('we', 'us', 'our') provides a CRM platform that enables businesses to manage customer conversations, including via WhatsApp Business. We act as a Tech Provider under Meta's WhatsApp Business Solution Partner program.
Tradais Digital ('we', 'us', 'our') provides a CRM platform that enables businesses to manage customer conversations, including via WhatsApp Business. We act as a Tech Provider under Meta's WhatsApp Business Solution Partner program.
Tradais Digital ('we', 'us', 'our') provides a CRM platform that enables businesses to manage customer conversations, including via WhatsApp Business. We act as a Tech Provider under Meta's WhatsApp Business Solution Partner program.
Tradais Digital ('we', 'us', 'our') provides a CRM platform that enables businesses to manage customer conversations, including via WhatsApp Business. We act as a Tech Provider under Meta's WhatsApp Business Solution Partner program.
In this role:
•
Each of our customers ('Clients') connects their own WhatsApp Business Account (WABA) to our Service.
Each of our customers ('Clients') connects their own WhatsApp Business Account (WABA) to our Service.
Each of our customers ('Clients') connects their own WhatsApp Business Account (WABA) to our Service.
Each of our customers ('Clients') connects their own WhatsApp Business Account (WABA) to our Service.
•
Messages flow between the Client's customers ('End Users') and the Client via Meta's WhatsApp Business Platform APIs.
Messages flow between the Client's customers ('End Users') and the Client via Meta's WhatsApp Business Platform APIs.
Messages flow between the Client's customers ('End Users') and the Client via Meta's WhatsApp Business Platform APIs.
Messages flow between the Client's customers ('End Users') and the Client via Meta's WhatsApp Business Platform APIs.
•
We process this data on behalf of the Client as a data processor/service provider.
We process this data on behalf of the Client as a data processor/service provider.
We process this data on behalf of the Client as a data processor/service provider.
We process this data on behalf of the Client as a data processor/service provider.
2. Information We Collect
2. Information We Collect
2. Information We Collect
2. Information We Collect
2.1 Account Information (from Clients)
2.1 Account Information (from Clients)
2.1 Account Information (from Clients)
•
Full name, email address, phone number
Full name, email address, phone number
Full name, email address, phone number
Full name, email address, phone number
•
Business name, business address, website
Business name, business address, website
Business name, business address, website
Business name, business address, website
•
Authentication credentials (managed via Firebase Authentication)
Authentication credentials (managed via Firebase Authentication)
Authentication credentials (managed via Firebase Authentication)
Authentication credentials (managed via Firebase Authentication)
•
Billing information, where applicable
Billing information, where applicable
Billing information, where applicable
Billing information, where applicable
2.2 WhatsApp Business Data (processed on behalf of Clients)
2.2 WhatsApp Business Data (processed on behalf of Clients)
2.2 WhatsApp Business Data (processed on behalf of Clients)
When a Client connects their WABA, we process the following through Meta's WhatsApp Business Platform:
When a Client connects their WABA, we process the following through Meta's WhatsApp Business Platform:
When a Client connects their WABA, we process the following through Meta's WhatsApp Business Platform:
When a Client connects their WABA, we process the following through Meta's WhatsApp Business Platform:
•
WhatsApp Business Account ID (WABA ID) and Phone Number ID — to route messages to the correct business
WhatsApp Business Account ID (WABA ID) and Phone Number ID — to route messages to the correct business
WhatsApp Business Account ID (WABA ID) and Phone Number ID — to route messages to the correct business
WhatsApp Business Account ID (WABA ID) and Phone Number ID — to route messages to the correct business
•
Access tokens — OAuth credentials issued by Meta, stored securely and used only to call WhatsApp APIs on the Client's behalf
Access tokens — OAuth credentials issued by Meta, stored securely and used only to call WhatsApp APIs on the Client's behalf
Access tokens — OAuth credentials issued by Meta, stored securely and used only to call WhatsApp APIs on the Client's behalf
Access tokens — OAuth credentials issued by Meta, stored securely and used only to call WhatsApp APIs on the Client's behalf
•
Inbound messages — text, media (images, documents, voice notes), timestamps, and WhatsApp-assigned message IDs sent by End Users to the Client's number
Inbound messages — text, media (images, documents, voice notes), timestamps, and WhatsApp-assigned message IDs sent by End Users to the Client's number
Inbound messages — text, media (images, documents, voice notes), timestamps, and WhatsApp-assigned message IDs sent by End Users to the Client's number
Inbound messages — text, media (images, documents, voice notes), timestamps, and WhatsApp-assigned message IDs sent by End Users to the Client's number
•
Outbound messages — text and media sent from the Client (via our Service) to End Users
Outbound messages — text and media sent from the Client (via our Service) to End Users
Outbound messages — text and media sent from the Client (via our Service) to End Users
Outbound messages — text and media sent from the Client (via our Service) to End Users
•
Sender metadata — End User phone numbers, WhatsApp profile names (as provided by Meta), and delivery/read receipts
Sender metadata — End User phone numbers, WhatsApp profile names (as provided by Meta), and delivery/read receipts
Sender metadata — End User phone numbers, WhatsApp profile names (as provided by Meta), and delivery/read receipts
Sender metadata — End User phone numbers, WhatsApp profile names (as provided by Meta), and delivery/read receipts
•
Conversation state — threading, unread counts, assigned agent
Conversation state — threading, unread counts, assigned agent
Conversation state — threading, unread counts, assigned agent
Conversation state — threading, unread counts, assigned agent
2.3 Technical Data
2.3 Technical Data
2.3 Technical Data
•
Log data: IP address, browser type, operating system, pages visited, actions taken
Log data: IP address, browser type, operating system, pages visited, actions taken
Log data: IP address, browser type, operating system, pages visited, actions taken
Log data: IP address, browser type, operating system, pages visited, actions taken
•
Device identifiers, cookies, and similar tracking technologies
Device identifiers, cookies, and similar tracking technologies
Device identifiers, cookies, and similar tracking technologies
Device identifiers, cookies, and similar tracking technologies
•
Error reports and performance metrics
Error reports and performance metrics
Error reports and performance metrics
Error reports and performance metrics
2.4 Information We Do NOT Collect
2.4 Information We Do NOT Collect
2.4 Information We Do NOT Collect
•
We do not collect End Users' WhatsApp messages outside of conversations they have with a connected Client business.
We do not collect End Users' WhatsApp messages outside of conversations they have with a connected Client business.
We do not collect End Users' WhatsApp messages outside of conversations they have with a connected Client business.
We do not collect End Users' WhatsApp messages outside of conversations they have with a connected Client business.
•
We do not access End Users' contact lists, profile photos (beyond what Meta exposes via API), or any other WhatsApp data unrelated to a Client's conversations.
We do not access End Users' contact lists, profile photos (beyond what Meta exposes via API), or any other WhatsApp data unrelated to a Client's conversations.
We do not access End Users' contact lists, profile photos (beyond what Meta exposes via API), or any other WhatsApp data unrelated to a Client's conversations.
We do not access End Users' contact lists, profile photos (beyond what Meta exposes via API), or any other WhatsApp data unrelated to a Client's conversations.
3. How We Use Information
3. How We Use Information
3. How We Use Information
3. How We Use Information
We use the information described above to:
We use the information described above to:
We use the information described above to:
We use the information described above to:
•
Provide, maintain, and improve the Service
Provide, maintain, and improve the Service
Provide, maintain, and improve the Service
Provide, maintain, and improve the Service
•
Route WhatsApp messages between End Users and Clients
Route WhatsApp messages between End Users and Clients
Route WhatsApp messages between End Users and Clients
Route WhatsApp messages between End Users and Clients
•
Authenticate users and prevent fraud
Authenticate users and prevent fraud
Authenticate users and prevent fraud
Authenticate users and prevent fraud
•
Respond to support requests and communicate about the Service
Respond to support requests and communicate about the Service
Respond to support requests and communicate about the Service
Respond to support requests and communicate about the Service
•
Comply with legal obligations
Comply with legal obligations
Comply with legal obligations
Comply with legal obligations
•
Monitor and analyze usage to improve reliability, security, and user experience
Monitor and analyze usage to improve reliability, security, and user experience
Monitor and analyze usage to improve reliability, security, and user experience
Monitor and analyze usage to improve reliability, security, and user experience
We do NOT:
•
Sell personal data to third parties
Sell personal data to third parties
Sell personal data to third parties
Sell personal data to third parties
•
Use End User WhatsApp message content for advertising or to train AI models
Use End User WhatsApp message content for advertising or to train AI models
Use End User WhatsApp message content for advertising or to train AI models
Use End User WhatsApp message content for advertising or to train AI models
•
Access Client data for any purpose other than providing the Service, debugging, or as required by law
Access Client data for any purpose other than providing the Service, debugging, or as required by law
Access Client data for any purpose other than providing the Service, debugging, or as required by law
Access Client data for any purpose other than providing the Service, debugging, or as required by law
4. Legal Basis for Processing
4. Legal Basis for Processing
4. Legal Basis for Processing
4. Legal Basis for Processing
•
Performance of contract — to provide the Service to Clients
Performance of contract — to provide the Service to Clients
Performance of contract — to provide the Service to Clients
Performance of contract — to provide the Service to Clients
•
Legitimate interests — to secure the Service, prevent abuse, and improve features
Legitimate interests — to secure the Service, prevent abuse, and improve features
Legitimate interests — to secure the Service, prevent abuse, and improve features
Legitimate interests — to secure the Service, prevent abuse, and improve features
•
Consent — where explicitly required (e.g., marketing communications, cookies)
Consent — where explicitly required (e.g., marketing communications, cookies)
Consent — where explicitly required (e.g., marketing communications, cookies)
Consent — where explicitly required (e.g., marketing communications, cookies)
•
Legal obligation — to comply with applicable Indian and international laws
Legal obligation — to comply with applicable Indian and international laws
Legal obligation — to comply with applicable Indian and international laws
Legal obligation — to comply with applicable Indian and international laws
5. How We Share Information
5. How We Share Information
5. How We Share Information
5. How We Share Information
5.1 Meta Platforms
5.1 Meta Platforms
5.1 Meta Platforms
WhatsApp Business data necessarily transits through Meta's WhatsApp Business Platform. Meta's use of this data is governed by its own terms and privacy policy.
WhatsApp Business data necessarily transits through Meta's WhatsApp Business Platform. Meta's use of this data is governed by its own terms and privacy policy.
WhatsApp Business data necessarily transits through Meta's WhatsApp Business Platform. Meta's use of this data is governed by its own terms and privacy policy.
WhatsApp Business data necessarily transits through Meta's WhatsApp Business Platform. Meta's use of this data is governed by its own terms and privacy policy.
5.2 Service Providers (Processors)
5.2 Service Providers (Processors)
5.2 Service Providers (Processors)
We use trusted third-party service providers for cloud hosting and infrastructure, user authentication, database management, and workflow automation. These providers process data on our behalf under data-processing agreements and are bound by confidentiality and security obligations.
We use trusted third-party service providers for cloud hosting and infrastructure, user authentication, database management, and workflow automation. These providers process data on our behalf under data-processing agreements and are bound by confidentiality and security obligations.
We use trusted third-party service providers for cloud hosting and infrastructure, user authentication, database management, and workflow automation. These providers process data on our behalf under data-processing agreements and are bound by confidentiality and security obligations.
We use trusted third-party service providers for cloud hosting and infrastructure, user authentication, database management, and workflow automation. These providers process data on our behalf under data-processing agreements and are bound by confidentiality and security obligations.
5.3 Clients
5.3 Clients
5.3 Clients
Each Client has access to the data their own WABA sends and receives. We do not cross-share data between Clients.
Each Client has access to the data their own WABA sends and receives. We do not cross-share data between Clients.
Each Client has access to the data their own WABA sends and receives. We do not cross-share data between Clients.
Each Client has access to the data their own WABA sends and receives. We do not cross-share data between Clients.
5.4 Legal Disclosures
5.4 Legal Disclosures
5.4 Legal Disclosures
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Tradais Digital, our users, or the public.
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Tradais Digital, our users, or the public.
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Tradais Digital, our users, or the public.
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Tradais Digital, our users, or the public.
6. Data Retention
6. Data Retention
6. Data Retention
6. Data Retention
•
Client account data — retained while the account is active and for up to 90 days after deletion, then permanently erased (except where law requires longer retention, e.g., tax records for 7 years under Indian law)
Client account data — retained while the account is active and for up to 90 days after deletion, then permanently erased (except where law requires longer retention, e.g., tax records for 7 years under Indian law)
Client account data — retained while the account is active and for up to 90 days after deletion, then permanently erased (except where law requires longer retention, e.g., tax records for 7 years under Indian law)
Client account data — retained while the account is active and for up to 90 days after deletion, then permanently erased (except where law requires longer retention, e.g., tax records for 7 years under Indian law)
•
WhatsApp message data — retained for as long as the Client keeps it in their account, or up to 90 days after account deletion, whichever is shorter
WhatsApp message data — retained for as long as the Client keeps it in their account, or up to 90 days after account deletion, whichever is shorter
WhatsApp message data — retained for as long as the Client keeps it in their account, or up to 90 days after account deletion, whichever is shorter
WhatsApp message data — retained for as long as the Client keeps it in their account, or up to 90 days after account deletion, whichever is shorter
•
Logs and telemetry — retained for up to 180 days for debugging and security, then deleted
Logs and telemetry — retained for up to 180 days for debugging and security, then deleted
Logs and telemetry — retained for up to 180 days for debugging and security, then deleted
Logs and telemetry — retained for up to 180 days for debugging and security, then deleted
7. Data Security
7. Data Security
7. Data Security
7. Data Security
We implement industry-standard technical and organizational measures:
We implement industry-standard technical and organizational measures:
We implement industry-standard technical and organizational measures:
We implement industry-standard technical and organizational measures:
•
Transport encryption (TLS 1.2+) for all data in transit
Transport encryption (TLS 1.2+) for all data in transit
Transport encryption (TLS 1.2+) for all data in transit
Transport encryption (TLS 1.2+) for all data in transit
•
Encryption at rest for all stored data
Encryption at rest for all stored data
Encryption at rest for all stored data
Encryption at rest for all stored data
•
Secure credential management using industry-standard key management practices
Secure credential management using industry-standard key management practices
Secure credential management using industry-standard key management practices
Secure credential management using industry-standard key management practices
•
Role-based access control; production access limited to authorized personnel
Role-based access control; production access limited to authorized personnel
Role-based access control; production access limited to authorized personnel
Role-based access control; production access limited to authorized personnel
•
Audit logs for sensitive operations
Audit logs for sensitive operations
Audit logs for sensitive operations
Audit logs for sensitive operations
•
Regular security reviews and dependency patching
Regular security reviews and dependency patching
Regular security reviews and dependency patching
Regular security reviews and dependency patching
No system is completely secure. If we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
No system is completely secure. If we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
No system is completely secure. If we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
No system is completely secure. If we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
8. International Data Transfers
8. International Data Transfers
8. International Data Transfers
8. International Data Transfers
Our infrastructure is primarily located in India. Some service providers may process data in other regions. By using the Service, you understand that your data may be transferred across borders in accordance with appropriate safeguards, such as Standard Contractual Clauses where required.
Our infrastructure is primarily located in India. Some service providers may process data in other regions. By using the Service, you understand that your data may be transferred across borders in accordance with appropriate safeguards, such as Standard Contractual Clauses where required.
Our infrastructure is primarily located in India. Some service providers may process data in other regions. By using the Service, you understand that your data may be transferred across borders in accordance with appropriate safeguards, such as Standard Contractual Clauses where required.
Our infrastructure is primarily located in India. Some service providers may process data in other regions. By using the Service, you understand that your data may be transferred across borders in accordance with appropriate safeguards, such as Standard Contractual Clauses where required.
9. Children's Privacy
9. Children's Privacy
9. Children's Privacy
9. Children's Privacy
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.
10. Your Rights
10. Your Rights
10. Your Rights
10. Your Rights
Depending on your jurisdiction, you may have the right to:
Depending on your jurisdiction, you may have the right to:
Depending on your jurisdiction, you may have the right to:
Depending on your jurisdiction, you may have the right to:
•
Access the personal data we hold about you
Access the personal data we hold about you
Access the personal data we hold about you
Access the personal data we hold about you
•
Request correction of inaccurate data
Request correction of inaccurate data
Request correction of inaccurate data
Request correction of inaccurate data
•
Request deletion of your data (see our Data Deletion Instructions at tradaisdigital.com/data-deletion)
Request deletion of your data (see our Data Deletion Instructions at tradaisdigital.com/data-deletion)
Request deletion of your data (see our Data Deletion Instructions at tradaisdigital.com/data-deletion)
Request deletion of your data (see our Data Deletion Instructions at tradaisdigital.com/data-deletion)
•
Restrict or object to certain processing
Restrict or object to certain processing
Restrict or object to certain processing
Restrict or object to certain processing
•
Data portability — receive your data in a structured, machine-readable format
Data portability — receive your data in a structured, machine-readable format
Data portability — receive your data in a structured, machine-readable format
Data portability — receive your data in a structured, machine-readable format
•
Withdraw consent where processing is based on consent
Withdraw consent where processing is based on consent
Withdraw consent where processing is based on consent
Withdraw consent where processing is based on consent
•
Lodge a complaint with a data-protection authority
Lodge a complaint with a data-protection authority
Lodge a complaint with a data-protection authority
Lodge a complaint with a data-protection authority
To exercise any right, email connect@tradaisdigital.com from the address associated with your account. We will respond within 30 days.
To exercise any right, email connect@tradaisdigital.com from the address associated with your account. We will respond within 30 days.
To exercise any right, email connect@tradaisdigital.com from the address associated with your account. We will respond within 30 days.
To exercise any right, email connect@tradaisdigital.com from the address associated with your account. We will respond within 30 days.
11. End Users
11. End Users
11. End Users
11. End Users
If you are an End User (a WhatsApp customer messaging a business that uses our platform), the Client business is the controller of your data. Please review that business's own privacy policy. We process your messages only on their behalf. If you want your data deleted, contact the business directly or email us at connect@tradaisdigital.com, and we will forward your request.
If you are an End User (a WhatsApp customer messaging a business that uses our platform), the Client business is the controller of your data. Please review that business's own privacy policy. We process your messages only on their behalf. If you want your data deleted, contact the business directly or email us at connect@tradaisdigital.com, and we will forward your request.
If you are an End User (a WhatsApp customer messaging a business that uses our platform), the Client business is the controller of your data. Please review that business's own privacy policy. We process your messages only on their behalf. If you want your data deleted, contact the business directly or email us at connect@tradaisdigital.com, and we will forward your request.
If you are an End User (a WhatsApp customer messaging a business that uses our platform), the Client business is the controller of your data. Please review that business's own privacy policy. We process your messages only on their behalf. If you want your data deleted, contact the business directly or email us at connect@tradaisdigital.com, and we will forward your request.
12. Cookies
12. Cookies
12. Cookies
12. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, and measure Service usage. You can control cookies via your browser settings. Disabling cookies may affect functionality.
We use cookies and similar technologies to keep you signed in, remember preferences, and measure Service usage. You can control cookies via your browser settings. Disabling cookies may affect functionality.
We use cookies and similar technologies to keep you signed in, remember preferences, and measure Service usage. You can control cookies via your browser settings. Disabling cookies may affect functionality.
We use cookies and similar technologies to keep you signed in, remember preferences, and measure Service usage. You can control cookies via your browser settings. Disabling cookies may affect functionality.
13. Changes to This Policy
13. Changes to This Policy
13. Changes to This Policy
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-product notice at least 14 days before taking effect. The 'Last updated' date at the top reflects the most recent version.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-product notice at least 14 days before taking effect. The 'Last updated' date at the top reflects the most recent version.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-product notice at least 14 days before taking effect. The 'Last updated' date at the top reflects the most recent version.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-product notice at least 14 days before taking effect. The 'Last updated' date at the top reflects the most recent version.
If we make any changes to this policy, we will notify you directly via email at the address associated with your account. We encourage you to keep your contact details up to date so you do not miss any important updates.
If we make any changes to this policy, we will notify you directly via email at the address associated with your account. We encourage you to keep your contact details up to date so you do not miss any important updates.
If we make any changes to this policy, we will notify you directly via email at the address associated with your account. We encourage you to keep your contact details up to date so you do not miss any important updates.
If we make any changes to this policy, we will notify you directly via email at the address associated with your account. We encourage you to keep your contact details up to date so you do not miss any important updates.
14. Contact Us
14. Contact Us
14. Contact Us
14. Contact Us
For any privacy-related question or request:
For any privacy-related question or request:
For any privacy-related question or request:
For any privacy-related question or request:
Tradais Digital
Tradais Digital
Tradais Digital
Tradais Digital
Email:
Email:
Email:
Email:
Website :
Website :
Website :
Website :