Privacy Policy
Last updated: 19 July 2026
This Privacy Policy explains how Vasishtha Digital Solutions (“Vasishtha Digital Solutions”, “we”, “us”, or “our”) collects, uses, shares, and protects information in connection with our WhatsApp Business communication platform available at https://app.vasishtha.co(the “Service”). By using the Service, you agree to the practices described here.
1. Who this policy applies to
The Service is a business-to-business platform used by organizations (“Workspaces”) to manage WhatsApp conversations with their own customers and contacts. This policy covers:
- Workspace users — the team members who sign in and operate the Service.
- End contacts— the customers a Workspace communicates with over WhatsApp, whose data we process on the Workspace’s behalf.
For end contacts, the Workspace is the data controller and Vasishtha Digital Solutions acts as a processor. If you are an end contact, please direct privacy requests to the business you are messaging.
2. Information we collect
- Account information — name, email address, password (stored hashed), role, and Workspace details you provide when registering or accepting an invitation.
- WhatsApp content — messages, media, templates, contact phone numbers, and related metadata that flow through your connected WhatsApp Business number, processed via the WhatsApp Business Platform (Meta).
- Onboarding & connection data— when you connect a WhatsApp Business Account, including through Facebook Login (Embedded Signup), we receive from Meta’s APIs your WhatsApp Business Account and business phone number details, and an identifier for the Facebook user who authorizes the connection. We use this solely to set up and operate your WhatsApp connection.
- Contact & lead data — names, phone numbers, and attributes you import, collect through lead forms, or capture during conversations.
- Billing information — subscription, plan, and payment records. Card/UPI details are handled directly by our payment processor; we do not store full payment credentials.
- Usage & technical data — log data, device/browser information, IP address, and actions taken in the Service, used for security and to operate the product.
3. How we use information
- To provide, operate, secure, and improve the Service.
- To send and receive WhatsApp messages on your Workspace’s behalf.
- To authenticate users and protect against fraud, abuse, and unauthorized access.
- To process subscriptions, payments, and send transactional emails (e.g. invitations, password resets, receipts).
- To provide support and respond to your requests.
- To comply with legal obligations and enforce our Terms.
We do not sell your personal information, and we do not use the content of WhatsApp messages for advertising.
4. WhatsApp Business Platform & Meta
The Service is built on the WhatsApp Business Platform provided by Meta Platforms, Inc. When you connect a WhatsApp Business number, message content and related data are transmitted through Meta’s systems and are subject to Meta’s own terms and privacy policy. Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. We access this data solely to deliver the Service’s messaging features to the relevant Workspace.
5. How we share information
We share information only as needed to run the Service, with:
- Meta / WhatsApp — to send and receive messages through the WhatsApp Business Platform.
- Payment processor (Razorpay) — to process subscriptions and payments.
- Infrastructure & storage providers — cloud hosting, database, and object storage used to operate the Service.
- Email provider — to deliver transactional emails.
- Legal & safety — where required by law, or to protect the rights, safety, and security of users and the public.
Each Workspace’s data is logically isolated from other Workspaces. We do not share one Workspace’s data with another.
6. Data retention
We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When a Workspace is deleted, associated data is removed or anonymized within a reasonable period, subject to backups and legal retention requirements.
7. Security
We use industry-standard safeguards including encryption in transit, encryption of sensitive credentials at rest, access controls, and tenant isolation. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues.
8. Your rights
Subject to applicable law, you may request to access, correct, export, or delete your personal information. Workspace users can manage much of their data within the Service; for other requests, contact us at info@vasishtha.co. End contacts should contact the business they are messaging.
If you connected to the Service using Facebook Login, you can request deletion of the data associated with your Facebook account at any time — see our Data Deletion page. Removing our app from your Facebook account’s Business Integrations settings will also trigger deletion.
9. International transfers
The Service and its providers may process data in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.
10. Cookies
We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use third-party advertising cookies.
11. Children
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.
13. Contact us
For privacy questions or requests, contact Vasishtha Digital Solutions at info@vasishtha.co. This policy is governed by the laws of India.

