Privacy Policy

1. Who we are

Drop Chat ("we", "us", "our") provides a WhatsApp business automation platform at dropchat.in, helping businesses manage customer conversations, contacts, campaigns, and AI-assisted replies over WhatsApp.

Drop Chat is a product operated by Mark 42 Digital Solution. Website: https://dropchat.in. Registered business address: Level 5, Tower C, Green Boulevard, Block C, near Regus, Sector 62, Noida, Gautambuddha Nagar, Uttar Pradesh – 201301, India.

2. What we collect

• Account information: name, email, and password (stored as a secure hash, never in plain text).
• Organization information: your business/organization name and team member roles.
• WhatsApp data: with your explicit connection, message content, contact phone numbers, and delivery status for conversations you handle through Drop Chat.
• Contact/CRM data you add: names, phone numbers, emails, notes, and deal information for your leads and customers.
• Billing information: plan, subscription status, and payment references (full card details are handled directly by our payment processor, Razorpay — we never store your card number).
• Usage data: log data (timestamps, feature usage, error events) used to operate and improve the service.

3. How we use it

• To provide the service: sending/receiving WhatsApp messages on your behalf, running automations, and generating AI replies you configure.
• To operate your account: authentication, billing, and customer support.
• To improve the product and diagnose issues.
• To comply with legal obligations.

We never sell your data or your customers' data to third parties, and we never use your WhatsApp conversation content for advertising.

4. WhatsApp / Meta Platform data

When you connect a WhatsApp Business Account, Drop Chat processes WhatsApp Business Platform data only as needed to provide the features you use — messaging and inbox, contact/CRM management, automations, campaigns, and message templates (via Meta's WhatsApp Business Platform and, optionally, Meta's Embedded Signup flow) — never your personal Facebook data, and never any WhatsApp account beyond the one you explicitly connect. Your WhatsApp access credentials/tokens are encrypted at rest. We do not sell your WhatsApp or Meta Platform data.

If you disconnect your WhatsApp Business Account, Drop Chat immediately stops sending or receiving new messages through that number. Previously stored conversation history, contacts, and related WhatsApp data are not automatically deleted by disconnecting — that data remains subject to this Privacy Policy's retention and deletion terms (see Sections 6 and 7) until you request deletion.

5. Data sharing

We share data only with service providers who help us operate Drop Chat, under confidentiality obligations:

• Meta / WhatsApp Business Platform — to deliver your WhatsApp messages.
• Our AI providers (Anthropic and/or Groq, depending on your configuration) — to generate AI Agent replies, when enabled.
• Razorpay — to process subscription payments.
• Our hosting and database providers — to run the application.

6. Data retention

We retain different categories of data for different purposes:

• Account and organization data (your account, team, and business details) is retained for as long as your account is active.
• WhatsApp conversation and message data is retained for as long as your account is active — disconnecting a WhatsApp Business Account does not by itself delete this data (see Section 4).
• Operational and security logs may be retained independently of your account for security, fraud-prevention, and diagnostic purposes.
• Billing and tax-related records may be retained as required by applicable tax, accounting, and financial regulations, even after account deletion.
• Backup copies of data may persist for a limited period after deletion as part of our normal backup cycle before being purged.

Exact retention periods vary by category and are governed by applicable legal, security, billing, and operational requirements rather than a single fixed duration. You can request deletion of your account and associated data at any time — see Section 7.

7. Your rights

You may access, correct, export, or request deletion of your data, and withdraw WhatsApp messaging consent for any contact, at any time. Contact us using the details below.

To request deletion, email support@dropchat.in with your organization name and the email address on your account. We may ask you to verify your identity or your authority to act for the organization before processing the request. Upon a verified request, we delete your account, organization, and WhatsApp conversation data, except for any information we are required or permitted to retain for legal, security, billing, or other legitimate business obligations (see Section 6). See also our Data Deletion Instructions page.

8. Security

We use encryption in transit and at rest for sensitive data (including WhatsApp access tokens), role-based access control, and industry-standard security practices to protect your information.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact us

Questions about this policy or your data? Email us at support@dropchat.in.