Our Privacy Policy

Our Privacy Policy to learn how we collect, use, and protect data for WhatsApp Business API (Cloud API) integrations. Covers data collection, security, user rights, retention, and compliance with Meta, GDPR, and IT Rules.

Effective Date: October, 16, 2025

Last Updated on October, 16, 2025

Introduction

Welcome to Glooft Technologies Private Limited (“we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, and protect information when providing our WhatsApp Business API (Cloud API) integration and related technology services.

We act as a Technology Provider enabling businesses to communicate with their customers via WhatsApp in compliance with Meta’s Developer Policies and WhatsApp Business Platform Terms.

By using our services or interacting with our WhatsApp integrations, you agree to the terms of this Privacy Policy.

Information We Collect

a. Communication Data

WhatsApp user identifiers (phone number, message IDs, timestamps)
Message content (text, images, documents, etc.)
Delivery and read receipts

b. Business Data

Client business name, contact details, and verified WhatsApp Business Account information.
API usage logs and configuration data

c. Technical Data

IP address, browser type, and device information
Server logs and API request metadata

We do not collect or store data unrelated to the business communication initiated between users and our clients.

How We Use the Information

Enable businesses to send and receive WhatsApp messages via the Cloud API

Deliver transactional notifications (e.g., order confirmations, shipping updates, support messages)
Monitor message delivery status and system performance
Ensure compliance with Meta’s and WhatsApp’s business policies
Improve reliability, analytics, and customer experience

We never sell, rent, or use message content for marketing purposes.

Legal Basis for Processing

The user initiates or consents to WhatsApp communication with the business.
Processing is necessary to perform a service contract between Glooft Technologies and its client.
Compliance with legal or regulatory obligations.

Data Retention

We retain message data, API logs, and related metadata only as long as necessary for service operation, troubleshooting, or as required by law. After this period, data is securely deleted from our systems.

Data Security

HTTPS encryption for all data transmissions
Secure authentication and access control
Encrypted storage for sensitive data
Regular audits and monitoring to prevent unauthorized access

While we take all reasonable precautions, no system is entirely immune to risks. Please avoid sharing sensitive personal information via chat unless necessary.

Sharing of Information

Meta Platforms, Inc. — as required for message delivery through WhatsApp Cloud API
Our Clients — the verified businesses on whose behalf we send or receive messages
Service Providers — such as hosting and infrastructure partners (under confidentiality agreements)

We do not share personal data with advertisers or unrelated third parties.

User Rights

If you have interacted with a business using our WhatsApp integration, you may request to:

Access your personal data
Correct inaccurate information
Request deletion of your data
Withdraw consent for communication

You can submit a request by emailing us at: privacy@glooft.com. We will respond in accordance with applicable data protection laws.

Data Deletion Requests

To request deletion of your WhatsApp-related data, email privacy@glooft.com or visit https://glooft.com/data-deletion. We verify all requests before processing data deletion.

Compliance & Third-Party Links

Meta’s WhatsApp Business Platform Terms
Meta Developer Policies
Information Technology (Reasonable Security Practices and Procedures) Rules, 2011 (India)
GDPR (if applicable to EU data subjects)

Our website or APIs may link to third-party systems (e.g., Meta, Shopify). We are not responsible for their privacy practices — please review their respective privacy policies.

Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of our services after changes indicates your acceptance of the revised policy.