Privacy Policy

Effective date: [INSERT EFFECTIVE DATE] · Last updated: [INSERT DATE]

This Privacy Policy explains how Lagran Software Solutions Pvt Ltd ("ChatLoop", "we", "us", or "our") collects, uses, and shares information when you use our WhatsApp Business messaging platform (the "Service"), and the choices you have about that information.

This is a template. Replace the bracketed placeholders with your actual company details and have it reviewed by a qualified lawyer before publishing it or relying on it for Meta App Review — it is provided for drafting convenience only and is not legal advice.

1. Who we are

ChatLoop is operated by Lagran Software Solutions Pvt Ltd, [INSERT REGISTERED ADDRESS]. For any privacy questions or requests, contact us at [INSERT PRIVACY CONTACT EMAIL].

2. Information we collect

We collect information in the following ways:

  • Account information you provide when you sign up: name, email address, password (stored as a salted hash, never in plain text), and organisation details.
  • WhatsApp Business Account data you connect: your WhatsApp Business Account ID, phone number(s), and an access token issued by Meta, which we store encrypted at rest and use solely to send and receive messages through the WhatsApp Cloud API on your behalf.
  • Contact data you upload or receive: the phone numbers, names, and any other fields you import for messaging (e.g. via CSV/XLSX upload), and the content of messages sent and received through your connected WhatsApp number, including messages handled by an automated chatbot flow.
  • Usage data: log data, device/browser information, and product usage analytics generated as you use the Service.

3. How we use information

  • To provide the Service: sending campaigns, delivering and receiving messages, running chatbot flows, and displaying analytics.
  • To maintain and improve the Service, including troubleshooting and security monitoring.
  • To communicate with you about your account, including service notices and support.
  • To comply with legal obligations and enforce our Terms & Conditions.

4. Who we share information with

We share information only as needed to operate the Service:

  • Meta Platforms, Inc. — messages you send and receive, and your connected account details, necessarily pass through Meta's WhatsApp Business Platform (Cloud API) in order to be delivered. Meta's own Business Data Processing Terms govern its handling of that data.
  • AI providers — if you enable an AI-assisted chatbot flow, the relevant parts of the conversation are sent to our AI provider (currently Anthropic) to generate a reply. We do not send this data to an AI provider unless you configure a chatbot flow to use it.
  • Infrastructure providers — hosting, database, and error-monitoring providers that process data on our behalf under contract, solely to operate the Service.
  • We do not sell your personal information or your contacts' information.

5. Data retention

We retain account, contact, and message data for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described in Section 7.

6. Security

We use industry-standard safeguards to protect your information, including encryption of WhatsApp access tokens at rest, TLS in transit, and role-based access controls within your organisation. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [INSERT PRIVACY CONTACT EMAIL]. If you are a contact of one of our customers (i.e. you received a WhatsApp message through the Service), please contact that business directly, as they control the data collected about you.

8. Children's privacy

The Service is not directed to children and is not intended for use by anyone under the age of 18.

9. International data transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers as required by applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice as appropriate.

11. Contact us

Lagran Software Solutions Pvt Ltd
[INSERT REGISTERED ADDRESS]
[INSERT PRIVACY CONTACT EMAIL]