SETUKRIT CODE CRAFTER Pvt. Ltd. ("SETUKRIT", "we", "us" or "our") operates SETUKRIT SANDESH, a business messaging and workflow platform (the "Service"). This Policy explains how information is handled when a business creates an account, connects services or uses the Service. It should be read together with our Terms of ServiceUser Data Deletion.
1. Information we may collect
- Account and identity information: name, email address, username, login credentials in protected form, role and account preferences.
- Business and workspace information: business name, profile details, workspace identifiers, team members and configuration settings.
- WhatsApp and messaging information: connected WhatsApp Business Account and phone-number identifiers, message templates, message content and metadata, delivery/read/failure events, conversation records and webhook events made available through connected Meta services.
- Contacts and campaign information: contact names and phone numbers, labels, consent or opt-out records, audience segments, campaign content, campaign status and related activity.
- Automation and AI information: workflow rules, chatbot or AI-agent configuration, prompts, inputs, outputs and interaction logs where those features are used.
- Integration information: identifiers, event data and configuration details from services you choose to connect, such as Shopify, Razorpay, WebEngage, LeadSquared, Integrately and webhook-based systems.
- Payment and billing information: plan, invoice, transaction reference, payment status and limited billing details. Payments may be handled by third-party payment providers. We do not intend to store full card numbers, card security codes, UPI PINs or banking passwords.
- Technical and usage information: IP address, browser/device details, timestamps, diagnostic logs, security events and feature usage needed to operate and protect the Service.
2. How we use information
We use information to create and administer workspaces; authenticate users; provide inbox, contact, template, campaign and automation functions; connect WhatsApp Business assets; process and display message events; operate AI and integration features requested by the customer; provide support; monitor performance; prevent fraud, abuse and unauthorised access; maintain records; and meet applicable legal obligations.
3. WhatsApp, Meta and other third-party services
When a customer connects WhatsApp Business Platform or another third-party service, information may be exchanged with that provider according to the customer's configuration and the provider's terms and privacy policies. WhatsApp messaging, account eligibility, template approval, delivery and platform access are controlled in part by Meta. We do not control Meta's systems or independent processing. Customers must comply with applicable Meta terms, WhatsApp Business policies and messaging requirements.
4. WhatsApp and Meta platform data: collection, use, storage and protection
Data received from Meta: When a business connects the WhatsApp Business Platform, SETUKRIT SANDESH may receive and process the WhatsApp Business Account (WABA) ID, phone-number ID, business display/profile details made available by Meta, approved message-template information, inbound message content, sender and recipient phone numbers, message identifiers, timestamps, conversation metadata, and message status or error webhooks such as sent, delivered, read and failed events. The exact fields depend on the permissions granted, Meta APIs used and the features enabled by the customer.
How we use it: This information is used only as needed to provide the requested messaging functions, display conversations and message history, route messages to authorised workspace users, run customer-configured campaigns and automations, process webhook events, provide delivery reporting, troubleshoot errors, maintain security and comply with legal obligations. We do not use WhatsApp message content or contact lists to sell advertising profiles or to build an unrelated contact database.
How it is stored: Data processed by the Service may be stored in the application's hosting environment and associated database, including workspace records, contact records, message/conversation records, campaign records, template information and webhook/status logs. Connected Meta identifiers and integration configuration may also be stored to maintain the connection. Access tokens and other credentials are sensitive; the application is designed to store credentials in protected form rather than display them as ordinary user-facing data. We do not publish customer tokens or credentials. Customers should not send passwords, access tokens, verification codes or secret keys to support by ordinary email.
Transmission and Meta processing: API requests and webhook events are exchanged with Meta/WhatsApp systems over the connection methods provided by those services. Meta independently processes information under its own terms and privacy documentation. Messages sent through WhatsApp are delivered and handled by Meta and WhatsApp according to their platform architecture, policies and applicable product settings. SETUKRIT cannot control Meta's internal retention, security operations, infrastructure locations or independent processing. The business customer should review Meta's current terms and privacy documentation for those matters.
Who can access it: Access within a customer's workspace should be limited to authorised users according to the roles and permissions configured by that customer. SETUKRIT personnel or contracted service providers may access limited data when reasonably necessary for hosting, maintenance, support, security, troubleshooting or legal compliance, subject to appropriate confidentiality and access controls. Customers are responsible for removing former staff and reviewing user permissions.
Protection measures: We use reasonable technical and organisational safeguards appropriate to the nature of the information, which may include role-based access controls, protected credential storage, secure HTTPS/TLS transmission where supported, authentication controls, logging, backups and security monitoring. No online system is completely risk-free. Customers must protect their login credentials, devices, connected Meta Business accounts and administrator permissions. Suspected compromise should be reported promptly.
Retention and deletion: WhatsApp-related data is retained for as long as reasonably necessary to provide the configured Service, maintain conversation and campaign history, support delivery troubleshooting, maintain security records, resolve disputes and meet legal requirements. Retention may vary by record type and customer settings. On account closure or a valid deletion request, eligible data will be deleted or de-identified within a reasonable operational period, subject to legal retention duties, unresolved disputes, fraud prevention and limited backup cycles. Deleting data in SETUKRIT SANDESH does not necessarily delete information held independently by Meta, WhatsApp, recipients or other integrations; customers may need to submit separate requests to those providers.
Customer responsibility: The business customer determines which contacts to message and must ensure it has a lawful basis and any required opt-in, provide privacy notices, honour opt-outs and follow WhatsApp Business Messaging Policy and Meta Platform Terms. Customers must not use the Service to send unsolicited, deceptive, unlawful or prohibited content.
5. AI features
If AI assistants, agents or chatbots are enabled, information submitted to those features may be processed to generate responses, classify requests or perform configured tasks. Customers should avoid submitting unnecessary sensitive personal information and should review AI-generated output before relying on it or sending it to a recipient. The specific AI provider and settings may affect how submitted data is processed; customers should review any applicable in-product disclosures before enabling an AI integration.
6. Sharing and disclosure
We may disclose information to service providers that help us host, secure, maintain or operate the Service; to Meta and integrations selected by the customer; to payment providers for billing transactions; to professional advisers; and to authorities where disclosure is required by law or necessary to protect rights, users or the Service. We do not sell customer contact lists or message content as a data-broker product.
7. Customer responsibilities and contact data
The business using the Service decides which contacts to upload, what messages to send, which integrations to enable and how long to retain its business records. The business must have a lawful basis and any required consent or permission for collection and messaging, provide required privacy notices, honour opt-outs, restrict access to authorised staff and respond to requests from its contacts. Do not upload data you are not authorised to use.
8. Retention and deletion
We retain information for as long as reasonably necessary to provide the Service, maintain business records, resolve disputes, enforce agreements, meet legal requirements and protect security. Retention periods may vary by data type and customer configuration. When a workspace is closed, information may be deleted or de-identified after a reasonable operational period, except where retention is required or permitted by law, or where copies remain in secure backups for a limited period.
9. Security
We use reasonable technical and organisational safeguards designed to protect information, which may include access controls, encrypted credential storage, secure transmission, logging and monitoring. No internet service or storage system can be guaranteed completely secure. Customers are responsible for protecting passwords, access tokens, devices and team permissions, and must notify us promptly if they suspect unauthorised access.
10. Your choices and rights
Depending on applicable law, individuals may have rights to request access, correction, erasure, restriction or other action regarding their personal information. Requests concerning information controlled by a business customer should normally be directed to that business first. Workspace users may update certain profile or account settings within the Service. We will consider and respond to requests addressed to us as required by applicable law.
11. Children
The Service is designed for business use and is not intended to be used by children as a consumer service. Business customers must not upload children's personal data unless they are legally authorised to do so and have met all applicable safeguards and consent requirements.
12. International processing
Depending on hosting, support and integration providers, information may be processed in locations outside the place where the customer or its contacts are located. Where required, appropriate safeguards will be applied in accordance with applicable law.
13. Changes to this Policy
We may update this Policy as the Service, its features or applicable requirements change. The revised version will be posted on this page with an updated date. Material changes may also be communicated through the Service or by email where appropriate.
14. Contact
For privacy questions, data requests or support relating to SETUKRIT SANDESH, contact us and include "Privacy Request" in the subject:
- Email: contact@setukrit.in
- Email: setukrticcpl@gmail.com
- Mobile: +91 82736 40522, +91 98084 44522, +91 99976 54039
If your request concerns data uploaded by a business using the platform, please also contact that business directly. For data held independently by Meta/WhatsApp or another integration provider, you may also need to contact that provider.