Privacy Policy

01 Overview & Relationship to Meta

This Privacy Policy governs the access and use of the Jaimru Text software-as-a-service (SaaS) platform, accessible at https://jaimrutext.com and https://app.jaimrutext.com, provided and operated by Jaimru Technology Pvt Ltd ("Jaimru Text", "we", "us", or "our"), a company incorporated under the laws of India.

Jaimru Text operates as an official WhatsApp Business Solution Provider (BSP) / Tech Solution Provider integrating directly with Meta Platforms, Inc. and Meta Platforms Ireland Ltd ("Meta") via the official WhatsApp Business Cloud API.

Under applicable privacy legislation, including the Digital Personal Data Protection Act (DPDP Act 2023, India), the General Data Protection Regulation (GDPR, EU), and the California Consumer Privacy Act (CCPA):

• Our Business Clients ("Customer"): Act as the Data Controller (or Data Fiduciary) with respect to the contact numbers, names, and communication content sent to their end-users.
• Jaimru Text: Acts as a Data Processor (or Data Processor / Fiduciary Associate) processing message payloads, managing template workflows, and routing webhooks solely on behalf of and under the instruction of the Customer.

02 Meta WhatsApp Policy Compliance

By registering an account with Jaimru Text or connecting a WhatsApp Business Account (WABA), Customers agree to unconditionally comply with all governing Meta policies, including:

• WhatsApp Business Terms of Service
• WhatsApp Business Messaging Policy
• WhatsApp Commerce Policy
• Meta Business Data Processing Terms

Any transmission of messages violating Meta's terms, including transmitting unsolicited bulk marketing, deceptive financial solicitations, harassment, adult materials, or prohibited pharmaceuticals, constitutes an immediate breach of this Policy and will result in instant account suspension and WABA revocation.

03 Mandatory User Opt-In / Consent Policy

In strict accordance with the WhatsApp Business Messaging Policy (Section 1.1), businesses utilizing Jaimru Text must obtain explicit, affirmative opt-in consent from end-users before initiating non-service business messages.

A legally compliant opt-in must meet the following mandatory criteria:

• Explicit Affirmative Action: Consent must be obtained via active participation (e.g. entering a phone number on a website form, sending an inbound WhatsApp message, checking an unchecked consent box, or signing a digital agreement). Pre-checked boxes are strictly prohibited.
• Clear Identification: The opt-in flow must explicitly state the business name and confirm that the user agrees to receive messages from the business over WhatsApp.
• Category Transparency: Users must be informed about the categories of messages they are consenting to receive (e.g., transactional receipts, order updates, appointment reminders, or promotional offers).

04 Opt-Out & User Suppression Mechanisms

Meta policies require all businesses to provide end-users with an immediate and frictionless mechanism to opt out of receiving future WhatsApp communications.

Jaimru Text automatically incorporates automated opt-out detection into every connected account:

• Universal Keyword Recognition: When an end-user sends standard opt-out keywords (including STOP, UNSUBSCRIBE, QUIT, CANCEL, OPTOUT), the platform marks the contact status as Suppressed/Opted-Out.
• Automated Suppression Lists: Suppressed contacts are excluded from future bulk broadcast campaigns, drip automation sequences, and chatbot triggers.
• Quick Reply Unsubscribe Buttons: We strongly encourage and support Quick Reply buttons in message templates labeled "Unsubscribe" or "Stop Promotions" to allow one-tap opt-outs.
• Audit Trail: Opt-out timestamps and request payloads are recorded to demonstrate regulatory compliance.

05 Information We Collect & Process

To deliver our services through the WhatsApp Business Cloud API, Jaimru Text collects and processes the following categories of data:

06 How We Use Business & Contact Data

Jaimru Text processes data exclusively for valid contractual and operational purposes, specifically:

• Routing and dispatching messages through Meta's Cloud API servers to WhatsApp recipients worldwide.
• Enabling shared multi-agent live chat, automated routing, agent collaboration, and canned quick responses.
• Automating 24/7 conversational chatbots and WhatsApp interactive forms (WhatsApp Flows).
• Synchronizing approved WhatsApp Message Templates directly with Meta's Business Manager.
• Providing real-time delivery status receipts, read receipts, and campaign conversion analytics.
• Monitoring phone number Quality Ratings and messaging tier limits to prevent spam and ban penalties.

07 Cloud Architecture & Encryption Boundaries

Understanding the security boundaries of the WhatsApp Business Cloud API is vital:

Our infrastructure safeguards include:

• In-Transit Encryption: All web traffic, REST API calls, and incoming webhook payloads utilize strict HTTPS TLS 1.3 protocols with HSTS enforcement.
• At-Rest Encryption: Database repositories, contact storage, and operational logs are encrypted at rest using AES-256 standards.
• Token & Secret Protection: Meta Access Tokens and Client API Keys are stored using salted cryptographic hashing and isolated within secure vault memory.

08 Message Templates & Content Policy

Outbound messages initiated by businesses outside the 24-hour service window must utilize Meta-Approved Message Templates categorized under:

• Marketing: Promotional offers, product announcements, cart recovery, and seasonal discounts.
• Utility: Order confirmations, shipment tracking, account alerts, appointment reminders, and billing receipts.
• Authentication: One-Time Passwords (OTPs) and multi-factor login verification.

Templates are submitted via Jaimru Text directly to Meta's automated template review systems. In compliance with the WhatsApp Commerce Policy, the following product categories are strictly barred from being promoted or transacted over our platform:

• Illegal products, services, prescription drugs, and unauthorized medical claims.
• Weapons, ammunition, explosives, fireworks, and hazardous chemicals.
• Tobacco products, e-cigarettes, vaping devices, and related paraphernalia.
• Gambling, casino betting, real-money gaming, or lotteries.
• Payday loans, high-risk micro-lending, cryptocurrency speculation schemes, and multi-level marketing (MLM).

09 Data Sharing & Third-Party Disclosure

We never sell, monetize, broker, or rent client contact lists or conversation records to advertisers, data aggregators, or external third parties.

Data disclosure is limited to:

• Meta Platforms Inc. / Meta Platforms Ireland Ltd: Necessary data transmission to operate the official WhatsApp Business Cloud API.
• Sub-processors & Hosting Infrastructure: Cloud hosting facilities (e.g., AWS, secure data center providers) operating under strict Data Processing Agreements (DPAs) with SOC2 and ISO/IEC 27001 certifications.
• Payment Gateways: PCI-DSS certified payment processors to facilitate subscription billing. Jaimru Text never stores credit card or debit card numbers.
• Legal & Regulatory Demands: When required by court orders, governmental warrants, or enforceable statutory law.

10 Retention, Deletion & Portability

We retain customer data only as long as necessary to fulfill the operational purposes set forth in this policy or as required by applicable legal, tax, and regulatory obligations:

• Message Content & Logs: Stored for operational analytics and reporting for up to 180 days (or as customized under Enterprise SLAs), after which message bodies are scheduled for archival and deletion.
• Contact Records: Maintained while your account remains active. Clients can export or delete contact groups at any time via the web portal or REST API.
• Account Termination: Upon account termination, all customer contact databases, custom templates, and credentials will be purged from our production databases within 30 days.

11 Information Security Safeguards

We employ comprehensive technical and organizational measures to ensure a level of security appropriate to the risk of processing:

• Granular RBAC: Role-Based Access Control allowing account owners to restrict agent visibility to assigned chats, preventing unauthorized internal access.
• Automated Rate Limiting: Intelligent throttling to protect API endpoints against DDoS attacks and brute-force attempts.
• Webhook HMAC Verification: Validating SHA-256 HMAC signatures on all inbound Meta webhook events to verify authentic origin.
• Continuous Vulnerability Audits: Periodic penetration testing, code dependency scanning, and security patch enforcement.

12 Data Subject Rights (DPDP & GDPR)

Depending on your jurisdiction, you and your end-users possess fundamental statutory privacy rights:

• Right of Access: The right to request copies of personal data processed by Jaimru Text.
• Right to Correction / Rectification: The right to correct inaccurate or incomplete contact data.
• Right to Erasure ("Right to be Forgotten"): The right to request the permanent deletion of personal information.
• Right to Withdraw Consent: The right to revoke consent at any moment via opt-out or by contacting our team.
• Right to Grievance Redressal: The right to file complaints with designated data protection authorities.

13 Grievance Redressal & Contact Officer

In accordance with the Information Technology Act, 2000 (India) and the Digital Personal Data Protection Act, 2023, Jaimru Technology Pvt Ltd has appointed a dedicated Grievance Officer and Data Protection Officer (DPO).

We strive to acknowledge all legitimate privacy inquiries within 48 hours and resolve verified grievances within 30 calendar days.