Privacy Policy

Effective date: 23 April 2026 · Last updated: 23 April 2026 · Operated by: Nrootz Digi, Kochi, Kerala, India

1. Who We Are

Connekto is a WhatsApp Business API SaaS platform operated by Nrootz Digi, a company registered in Kochi, Kerala, India. We provide shared inbox, automation, broadcast messaging, and customer engagement tools via the official Meta WhatsApp Business API.

For any privacy-related enquiries, please contact us at [email protected].

2. Data We Collect

When you connect your WhatsApp Business Account to Connekto via Meta's Embedded Signup, we collect and process the following data:

WhatsApp & Facebook Data Collected via Meta Embedded Signup:
We collect your WhatsApp Business Account ID, Phone Number ID, business name, phone number, message content and metadata, and Facebook Login data (business portfolio ID, user name, email) when you connect your WhatsApp account via Meta's Embedded Signup.

Account Data: WhatsApp Business Account (WABA) ID, Phone Number ID, display name, and business phone number
Facebook / Meta Data: Facebook Business Portfolio ID, Facebook user name, and email address (collected via Meta OAuth during Embedded Signup)
Message Data: Message content, media, timestamps, sender/recipient identifiers, and message delivery metadata (sent, delivered, read receipts)
Contact Data: Phone numbers and names of end-user contacts who message your business through Connekto
Usage Data: Log data, IP addresses, browser type, pages visited, and feature usage within the Connekto platform
Billing Data: Payment information processed securely via our payment processor (we do not store full card numbers)

3. Why We Collect This Data

We collect and use this data for the following purposes:

To provide shared inbox, automation, and messaging services via the WhatsApp Business API
To authenticate and maintain your connection to Meta's WhatsApp platform
To route, display, and store customer messages within your team's inbox
To send broadcast campaigns and automated messages on your behalf
To generate analytics and performance reports for your account
To ensure platform security, prevent fraud, and comply with legal obligations

4. How We Share Your Data

Third-party sharing: We share data with Meta Platforms Inc. as part of providing WhatsApp Business API services. We do not sell your data.

We may share data with the following third parties:

Meta Platforms Inc.: All WhatsApp messages are routed through Meta's infrastructure as required by the WhatsApp Business API. Meta's own Privacy Policy applies to data processed on their platform.
Cloud Infrastructure Providers: We use reputable cloud services (e.g., AWS, Google Cloud) to host your data securely within compliant data centres
Payment Processors: Billing is handled by PCI-DSS compliant third-party processors
Legal Authorities: We may disclose data when required by law, court order, or government regulation

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Data Retention

We retain your data for as long as your account remains active. Specifically:

Message data is retained for 12 months by default (configurable in account settings)
Account and configuration data is retained until account deletion
Billing records are retained for 7 years as required by Indian tax law
Upon a data deletion request, we delete all WhatsApp messages, contacts, and account data within 30 days

6. Your Rights (GDPR & Applicable Law)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data — see our Data Deletion page
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to certain processing activities
Right to Restrict Processing: Request that we limit how we use your data

To exercise any of these rights, contact us at [email protected].

7. Security

We implement industry-standard security measures including TLS encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls, and regular security audits. However, no system is completely immune to risk.

8. Cookies

We use strictly necessary session cookies to keep you logged in and functional analytics cookies to improve the platform. We do not use advertising or tracking cookies.

9. WhatsApp Business Policy Compliance

By using Connekto, you agree to comply with WhatsApp's Business Policy and Meta's Business Tools Terms. Connekto is built exclusively on Meta's official WhatsApp Business API.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of Connekto after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy questions, data requests, or concerns:

Email: [email protected]
Company: Nrootz Digi, Kochi, Kerala, India