Privacy Policy & Meta Platform Data Policy

1. Corporate Identity & Platform Scope

This Privacy Policy describes how Gyanovate Corp Private Limited ("Company", "we", "us", or "our") collects, uses, processes, and protects your information when you use Sampad (accessible via getsampad.com and related domains), a comprehensive business management and CRM SaaS platform.

Gyanovate Corp Private Limited acts as a Data Processor for businesses ("Clients") that utilize Sampad to manage invoices, inventory, sales CRM, and integrated customer communication channels including the Meta WhatsApp Business API.

2. WhatsApp Business API & Meta Platform Data Usage

A. Meta Platform Data We Access and Collect

When a Client connects their WhatsApp Business Account to Sampad via Meta Embedded Signup or Meta Graph API, we access and process the following platform data strictly on behalf of the Client:

• Account Identifier Credentials: WhatsApp Business Account ID (WABA ID), Phone Number IDs, and encrypted Meta OAuth tokens.
• CRM Lead & Contact Information: Recipient phone numbers associated with Client leads and customers stored within the Sampad CRM module.
• Message Templates: Names, languages, content structures, variables, and approval statuses of Client-submitted message templates.
• Outbound Notification & Outreach Logs: Recipient phone numbers, template parameters (e.g., invoice numbers, delivery amounts, lead follow-up notes), timestamps, and message dispatch/delivery statuses.
• Incoming Customer Replies: Message content, timestamps, media attachments, and customer contact phone numbers sent by end-users in response to outbound communications.

B. How We Use Meta Platform Data

Platform Data retrieved through the WhatsApp Business API is used solely for the following explicit operational purposes:

• 1-Click CRM Lead Outreach: Enabling Client sales representatives to initiate direct 1-on-1 WhatsApp communication or send approved template follow-ups directly from lead cards inside Sampad CRM.
• Automated Transactional Notifications: Dispatching automated billing receipts, GST invoices, order status updates, payment reminders, and appointment notifications to Client customers who have provided opt-in consent.
• Centralized CRM Support Inbox: Displaying real-time customer replies inside Sampad’s multi-agent team inbox, enabling Client support agents to respond promptly to end-user queries.
• Template Management & Synchronization: Allowing Clients to browse, create, and verify approved Meta WhatsApp templates directly from the Sampad dashboard.

C. Strict Non-Disclosure & Anti-Monetization Guarantee

3. Security Infrastructure & Compliance

We enforce rigorous bank-grade security protocols to protect all data stored and transmitted through Sampad:

• Encryption in Transit: All communications with Meta APIs and client browsers are encrypted using TLS 1.3 protocol.
• Encryption at Rest: Database records and access tokens are secured using AES-256 bit encryption standards.
• Access Controls: Role-based access control (RBAC) ensures only authorized Client staff members can view message logs within their account sandbox.
• ISO 27001 Standard Practices: Continuous vulnerability monitoring, access auditing, and strict isolation of multi-tenant environments.

4. Data Retention & User Data Deletion Instructions

Clients retain complete ownership and control over their data at all times.

Account Disconnection & Revocation

Clients can disconnect their WhatsApp Business Account from Sampad at any time by navigating to Settings > WhatsApp Integration > Disconnect Account inside the Sampad dashboard, or by revoking access directly in Meta Business Manager.

Data Deletion Request Callback & Process

To request permanent deletion of Meta Platform Data, WhatsApp log history, or account data:

• Submit a formal data wiping request by emailing business@gyanovate.com with the subject line "Meta Data Deletion Request".
• Alternatively, trigger an automated data deletion webhook by removing the Sampad Meta App from your Facebook Business Manager settings.
• Upon receipt of a deletion request, all associated Meta tokens, message logs, and cached template data will be permanently wiped from our primary and backup databases within 30 calendar days.

5. Contact & Privacy Governance

For questions, privacy inquiries, or regulatory compliance requests regarding this Privacy Policy or our Meta WhatsApp Business integration, please contact our data governance team: