Privacy Policy
This policy describes how Sohan Soft Tech WhatsApp Manager handles information when you use our website and business messaging services. Last updated: 31 October 2026.
Who this policy covers
Sohan Soft Tech operates this platform. It covers business account holders, their authorised team members, website visitors and people whose information a business manages through the platform. For messages sent by a client business, that business decides the purpose of processing and is your first contact for its use of your information.
Information we process
We process your OTP-verified mobile number, sign-in identity, company details, business contact information, workspace memberships and permissions; customer names, WhatsApp numbers, contact details, tags, consent records and opt-outs; conversation content and attachments metadata; template, campaign and delivery records; connected Meta business and phone identifiers; payment and invoice references; support requests, security events and audit records. Fast2SMS processes your mobile number to deliver and verify one-time passwords. We do not store plaintext OTPs. Session credentials are stored as hashes. Meta access credentials are stored encrypted on the server. We do not collect raw payment card numbers through our application.
How information is used
We use information to provide workspaces, connect authorised WhatsApp accounts, deliver and receive messages, manage team access, record consent, respond to support and deletion requests, calculate disclosed service usage and billing, and investigate failures and misuse. Information is not used to train a general-purpose AI model by this application.
WhatsApp and Meta information
When an authorised administrator uses Meta Embedded Signup, Meta controls its authentication and permission experience. The platform uses granted permissions to access the selected business assets, phone details, templates and messaging endpoints. Disconnecting in our platform removes local credential access; administrators should also revoke app permissions in Meta Business Settings. Meta processes information under its own terms and policies.
Service providers and disclosure
Operating the service may involve hosting and database providers, Meta for WhatsApp messaging, Fast2SMS for mobile verification, Razorpay for payments, and a configured email provider. We disclose information only as needed to provide the relevant service, follow a valid legal requirement, investigate abuse or protect users. We do not sell customer contact lists. Service-provider locations and contractual safeguards must be reviewed before activating a production tenant.
Business responsibilities and consent
Businesses must have an appropriate basis and permissions for uploading contacts and processing communications. Marketing requires recorded consent, and opt-outs must be respected. Do not upload unnecessary sensitive data, send unlawful content or use purchased lists for unsolicited messaging.
Retention and deletion
Operational records are retained while required to provide the service, resolve disputes, secure the platform and meet applicable recordkeeping obligations. A production retention schedule and backup deletion procedure must be configured before customer activation. Data deletion requests are verified and processed by the operator; a request receipt does not mean deletion is complete. Billing or security records may be retained where required, with access restricted.
Your choices and rights
You may review and edit business and contact information through authorised workspace controls, withdraw messaging consent by contacting the sending business or sending STOP, disconnect an integration, and request access, correction or deletion through the User Data Deletion page. Identity and authority may need to be verified before account information can be disclosed or deleted.
Security and international processing
Access controls, server-side tenant checks, encrypted Meta credentials and signed webhook validation are implemented to protect information. No system is risk-free. Providers may process information outside your location; the operator must assess applicable transfer requirements before production use.
Children and changes
The service is intended for authorised adult business users. Businesses remain responsible for handling information about minors lawfully. We may update this policy as the service changes and will publish the updated date here.
Contact and grievances
Use the Contact page or authenticated workspace Support to reach Sohan Soft Tech about privacy, security or a grievance. The verified legal entity address, privacy contact and grievance officer details must be supplied by the operator before commercial launch.