Privacy Policy

1. Introduction

StoreTalk ("we", "our", or "us") is a product of CityMapia, a technology company registered in Kochi, Kerala, India. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the StoreTalk platform ("the Service") — a WhatsApp Business automation SaaS platform for businesses.

By using StoreTalk, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Business Account Information

When you register as a business on StoreTalk, we collect:

• Business name, owner name, and email address
• WhatsApp Business Account (WABA) ID and Phone Number ID
• Facebook Business Manager ID
• Subscription and billing information (processed by Razorpay)
• API access tokens (encrypted at rest)

2.2 WhatsApp Platform Data

Through the Meta WhatsApp Business API, we access and process on your behalf:

• Customer phone numbers that interact with your WhatsApp Business number
• Inbound and outbound message content (text messages)
• Message delivery and read status
• WhatsApp message template submission and approval status

Important: WhatsApp message data is processed exclusively to deliver the automation services you have configured. We do not use customer message content for advertising, profiling, or any purpose beyond operating the Service on your behalf.

2.3 Usage Data

We automatically collect platform usage data including:

• Login activity and session information
• Feature usage patterns (templates created, flows built, messages sent)
• IP address and browser/device information

3. How We Use Platform Data

We use the data we collect solely for the following purposes:

• Service delivery: Sending and receiving WhatsApp messages on behalf of your business
• Automation execution: Running chatbot flows and message triggers you have configured
• Template management: Submitting and tracking message templates with Meta on your behalf
• Account management: Managing your WhatsApp Business Account settings via the Meta API
• Analytics: Providing you with delivery, read rate, and flow performance metrics
• Billing: Calculating conversation usage for subscription invoicing
• Support: Diagnosing technical issues when you raise a support request

We do not sell, share, rent, or trade Platform Data with third parties for their own marketing purposes.

4. Data Sharing and Third Parties

We share data only with the following service providers, strictly to operate the platform:

5. Data Retention

• Conversation logs: Retained for 90 days (Starter), 1 year (Growth/Pro), as configured for Enterprise
• Account data: Retained for the duration of your subscription plus 30 days after cancellation
• Billing records: Retained for 7 years as required under Indian tax law
• After retention periods, data is permanently deleted from our systems

6. WhatsApp Opt-Out

Your business customers (the end recipients of WhatsApp messages) can opt out of receiving messages from your business at any time by replying STOP to any message. StoreTalk automatically processes and respects opt-out requests in compliance with Meta's messaging policies.

Businesses using StoreTalk are responsible for maintaining opt-out records and not re-contacting customers who have opted out.

7. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Erasure: Request deletion of your data (subject to legal retention obligations)
• Grievance redressal: Raise a complaint with our Data Protection Officer

To exercise these rights, email us at hello@storetalk.app. We will respond within 30 days.

8. Data Security

We protect your data with the following measures:

• API tokens and sensitive credentials are encrypted at rest using AES-256
• All data in transit is encrypted using TLS 1.2+
• Access to production systems is restricted to authorised personnel only
• Regular security reviews and dependency audits

9. Cookies

StoreTalk uses only essential cookies required to maintain your login session and platform functionality. We do not use advertising cookies or cross-site tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of this page and notify registered users by email for material changes.

11. Contact Us

For any privacy-related questions, data requests, or complaints: