Privacy Policy

EnaTalk is a WhatsApp Business messaging automation platform operated by Enatalk, registered at Ramkrishna Upanibesh Jadavpur, Kolkata, West Bengal 700092, India. Our platform is accessible at app.enatalk.com.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have.

2.1 Account & Business Data

• ►Full name and email address
• ►Business name, type, and address
• ►Phone number registered with WhatsApp Business API
• ►Password (hashed — never stored in plain text)

2.2 Contact & Messaging Data

• ►Customer contact lists you upload or import
• ►Message content and delivery status from campaigns you run
• ►Opt-in / opt-out records for your contacts
• ►Conversation history via WhatsApp Business Cloud API

2.3 Usage & Technical Data

• ►Log data: IP address, browser type, pages visited, timestamps
• ►Campaign performance metrics (sent, delivered, read, replied)
• ►Device and operating system information
• ►Cookies and session tokens for authentication

2.4 Payment Data

Payment details are processed exclusively by our third-party payment provider (Razorpay / Stripe). We do not store full card numbers or bank details on our servers.

• ►To create and manage your EnaTalk account
• ►To enable WhatsApp campaign creation, scheduling, and delivery
• ►To send you transactional emails (OTP, billing receipts, platform alerts)
• ►To improve platform features and develop new functionality
• ►To generate anonymised, aggregated analytics about platform usage
• ►To comply with applicable Indian laws and Meta/WhatsApp platform requirements
• ►To detect and prevent fraud, abuse, or policy violations

EnaTalk is built on the WhatsApp Business Cloud API provided by Meta Platforms, Inc. By using EnaTalk, you agree to Meta's WhatsApp Business Terms of Service, WhatsApp Business Policy, and WhatsApp Commerce Policy.

You are solely responsible for obtaining valid, documented opt-in consent from every contact before sending them messages through our platform. EnaTalk cannot verify the legitimacy of consent on your behalf.

We do not sell, rent, or trade your personal data or your customers' contact data to any third party for marketing purposes — ever.

We may share limited data with cloud infrastructure providers, payment processors, email delivery services, and analytics tools — strictly to operate the platform. All are bound by confidentiality agreements prohibiting any other use.

We may disclose data when required by Indian law, court order, or government authority.

• ►Account data: retained while active and for 90 days after deletion
• ►Message & campaign data: retained for 12 months by default
• ►Contact lists: deleted within 30 days of account closure on request
• ►Payment records: retained for 7 years as required by Indian GST law
• ►Log data: retained for 90 days for security and debugging

We use essential cookies only — to keep you logged in and secure your session. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect platform functionality.

• ►All data in transit is encrypted using TLS 1.2 or higher
• ►Passwords are hashed using bcrypt — never stored in plain text
• ►Access to production systems is restricted to authorised personnel only
• ►Regular security reviews and vulnerability assessments are conducted

In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovery.

• ►Access: request a copy of all personal data we hold about you
• ►Correction: request correction of inaccurate or incomplete data
• ►Deletion: request deletion of your account and associated data
• ►Portability: request your data in a structured, machine-readable format
• ►Withdrawal: withdraw consent at any time

To exercise any of these rights, email support@enatalk.com. We will respond within 30 days.

EnaTalk is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us immediately at support@enatalk.com.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this page. Continued use of EnaTalk after changes constitutes acceptance.