Privacy policy

We hold two kinds of information: what a business tells us about itself, and the conversations that business has with its own customers. The second kind belongs to the business, not to us. We do not sell it, we do not use it to advertise, and we do not use it to train anything.

• The name of the business, the name and email address of whoever signs up, and the people they invite.
• What they have set up: opening hours, services, prices, the words their bot uses, the questions it asks.
• A payment record — which plan, when it renews, whether the last payment succeeded. Card and UPI details go straight to Razorpay and never reach our servers.

When somebody messages a business through WhatsApp, Instagram, Facebook, Telegram or email, that message arrives here so the business can read and answer it. That means we hold the message, the phone number or handle it came from, anything the customer attached, and any booking they made.

This is the business’s data. We process it so they can run their business, and for nothing else. If a customer of theirs wants their information removed, the business can delete it and we act on that.

On servers in Mumbai, India. The database sits on the same machines. Backups are taken nightly and are kept in the same country.

Secrets a business gives us — access tokens, API keys — are encrypted before they are written down, so somebody reading the database does not read those.

Only these, only for the job named, and none of them are sent anything they do not need:

• Meta Platforms (WhatsApp, Instagram, Facebook)

  Carries the messages between a business and its customers.

  Processes data in: Meta's own infrastructure, outside India

• Razorpay

  Takes subscription payments. Card and UPI details go to them and never reach us.

  Processes data in: India

• Hostinger

  Runs the servers and the database.

  Processes data in: Mumbai, India

• Anthropic

  Answers questions on a business's behalf when the auto-reply bot is switched on. Only the message being answered is sent.

  Processes data in: Outside India

Messages travel through Meta’s systems because that is how WhatsApp works, and Meta’s own terms apply to that leg. Nothing is passed to anyone else — no data brokers, no advertising networks, no analytics product that watches customers.

A business can switch on a bot that answers questions for them. When it is on, the customer’s message and the answers that business has written are sent to Anthropic to compose a reply. Nothing else goes — not the contact list, not the booking history, not other conversations.

When it is off, nothing is sent anywhere.

• While the account is open: conversations, contacts and bookings stay until the business deletes them.
• After an account is closed: the data is removed within 30 days. Backups age out within a further 30.
• Records we are required to keep — invoices and payment records — are kept for as long as Indian tax law requires, and nothing else is kept with them.

• A copy of everything held for them — there is an export in the console, and we will produce it by hand if that is easier.
• Correction of anything wrong.
• Deletion of their account and its data.
• An explanation of anything on this page, in plain words.

Write to us and we will answer within one working day. We do not charge for any of this.

This is a tool for businesses. It is not intended for anyone under 18, and we do not knowingly collect anything from them.

The date at the top changes with it. If a change affects what we do with existing data, we tell account owners by email before it takes effect rather than quietly editing the page.

Sigma Tech India