Privacy Policy for Rabishtra
Rabishtra ("the Company", "We", "Us", or "Our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, disclose, store, and safeguard your information when you visit our website (https://rabishtra.in/), interact with our services, or communicate with us through automated communication platforms, including the WhatsApp Business API (powered by Meta Platforms, Inc.) and our Microsoft Azure cloud infrastructure.
Statutory Compliance Notice:
This policy is drafted to comply with applicable data protection legislation, including India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, Meta's WhatsApp Business Terms & Developer Policies, and global data protection standards.
1 Data Controller & Business Identity
2 Scope & Applicability
This Privacy Policy applies to personal data collected through:
- Website Interactivity: Usage, web forms, account registrations, and online inquiries on https://rabishtra.in/.
- WhatsApp Business API & Bot Operations: Messages, media files, interactive responses, button taps, and automated workflows processed via Meta’s WhatsApp Cloud API.
- Cloud & Server Infrastructure: Processing activities conducted on Microsoft Azure Cloud Services (including Azure Functions, Web Apps, and backend databases).
3 Information We Collect
We collect information directly from you, automatically through your interaction with our services, and via third-party service APIs.
A. Directly Provided Information
- Contact & Profile Data: Full name, email address, mobile phone number, and physical mailing address submitted via web forms, account registration, or service requests.
- Account Credentials: Username, password hashes, authentication tokens, and account preferences.
- Communication & Support Data: Content of customer support inquiries, emails, feedback, and support tickets.
B. Meta / WhatsApp Service Data
When you initiate or receive communications through our official WhatsApp Business number or API bot service, we collect:
- WhatsApp Phone Number: Your registered mobile phone number on WhatsApp.
- Meta Profile Information: Public display name, bio description, or profile picture URL as provided by Meta via the WhatsApp Cloud API.
- Message Payload: Text messages, quick-reply choices, button selections, interactive form responses within WhatsApp, audio notes, and shared media files.
-
Interaction Metadata:
Unique message IDs (
wamid), delivery statuses, read receipts, and exact timestamps.
C. Automatically Collected Technical & Log Data
- Device Details: Internet Protocol (IP) address, browser type and version, operating system, unique device identifiers, device language, and network status.
- Usage & Analytics: Visited web pages, time spent on pages, clickstream data, referring URLs, and error logs.
- Cookies & Tracking: Session cookies, persistent functional cookies, and security tokens to manage website security and user state.
4 Legal Basis for Processing Data
We process your Personal Data under the following legal bases:
Where you have given explicit consent to receive communications (e.g., opting in to WhatsApp/SMS notifications or accepting cookie preferences).
To perform services, fulfill queries, or complete transactions requested by you.
To prevent fraud, maintain cybersecurity, optimize user experience, and improve automated AI/bot workflows.
To comply with legal mandates, court orders, tax regulations, or lawful requests from government authorities.
5 How We Use Your Information
We utilize collected information strictly for specified operational and service delivery purposes:
- Service Delivery & Messaging: To process incoming WhatsApp messages, execute automated conversational responses, deliver requested information, and maintain chat continuity.
- Authentication & Security: To issue One-Time Passwords (OTPs), verify login credentials, detect unauthorized access, and protect against multi-factor authentication fraud.
- Customer Support: To log, track, and resolve user support tickets, platform issues, and user requests.
- System Security & Abuse Prevention: To analyze request patterns, protect against Distributed Denial of Service (DDoS) attacks, unauthorized API access, and spam.
- System Optimization & AI Training: To evaluate conversation flows and operational logs to improve bot accuracy, response relevance, and overall platform functionality.
- Transactional Notifications: To send essential account status changes, operational updates, and mandatory security notices.
6 Third-Party Infrastructure & Sub-Processors
To deliver reliable web and messaging services, Rabishtra relies on sub-processors and cloud service providers bound by strict confidentiality obligations:
- Meta Platforms, Inc. (WhatsApp Cloud API): Facilitates the transmission and routing of messaging data between your device and our backend servers. Processing is governed by Meta’s Data Policy and WhatsApp Business Terms.
- Microsoft Azure Cloud Infrastructure: Hosts our application logic (Azure Functions), application web services, and encrypted database instances. Azure complies with rigorous international security certifications (ISO/IEC 27001, SOC 1/2/3, GDPR).
- Analytics & Security Providers: Essential third-party security monitoring, DNS management, and web performance services required to maintain operational stability.
7 Data Sharing, Mobile Opt-In Non-Disclosure & Transfers
We respect your privacy and never sell, rent, or trade your personal information.
A. Strict Mobile Data Non-Disclosure Clause (Carriers & Meta Compliance)
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates under any circumstances.
B. Permitted Disclosures
We disclose personal data strictly under the following limited conditions:
- Service Providers: Shared with cloud infrastructure providers (Meta, Microsoft Azure) solely to deliver services under contractual confidentiality constraints.
- Business Transfers: In the event of a merger, acquisition, asset sale, or corporate reorganization, user data may be transferred with prior notification to affected users.
- Legal Requirements & Protection: Disclosure may occur if required by law enforcement, subpoena, court order, or regulatory body, or when necessary to protect the legal rights, safety, or property of Rabishtra or our users.
8 Data Retention & Erasure Schedule
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, satisfy legal obligations, or resolve disputes.
| Data Category | Retention Period | Primary Purpose | Disposal Action |
|---|---|---|---|
| Account Profile Data | Duration of active account + up to 24 months | Account administration & post-termination support | Permanent Deletion |
| WhatsApp Messages & Logs | Up to 12 - 24 months | Quality assurance, bot optimization, & support | Automated Purge |
| Support Tickets & Records | Up to 24 months | Customer support audit trails & service quality | Secure Overwrite |
| Security & Server Logs | Up to 24 months | Threat monitoring, fraud prevention, & system logs | Log Erasure |
Upon expiration of the retention window, data is permanently erased, overwritten, or converted into non-identifiable aggregated statistics.
9 Data Security & Technical Safeguards
We implement technical and organizational measures to safeguard your Personal Data against loss, unauthorized access, or disclosure:
- Encryption in transit using HTTPS / TLS 1.3 protocols across all endpoints and web forms.
- Encryption at rest for data stored within Microsoft Azure database solutions.
- Role-based access controls (RBAC), API key management, and strict administrative access monitoring.
While we employ industry-standard safeguards, please note that no internet transmission or electronic database can be guaranteed 100% secure.
10 User Rights & Data Deletion Instructions
Depending on your jurisdiction, you hold statutory rights regarding your Personal Data, including rights to access, update, correct, restrict processing, or request erasure of your data.
Step-by-Step Instructions to Request Data Deletion
Response Time: ≤ 30 DaysIf you wish to delete your account, remove stored WhatsApp conversation logs, or request full erasure of your personal data:
- Send an email to support@rabishtra.in
- Set the email subject line to: Data Deletion Request - Rabishtra
-
Include the following required details in your message:
- Your Full Name
- The WhatsApp Phone Number (including international country code, e.g., +91...) associated with your interactions.
- Your Email Address (if registered on our website).
Our team will verify your request and execute data erasure within 30 business days, issuing a formal confirmation email once completed.
Send Email Request11 WhatsApp & SMS Opt-Out Instructions
Receiving communications from Rabishtra via WhatsApp or SMS is entirely optional.
-
To Opt Out (Stop Receiving Messages):
Reply
STOPorUNSUBSCRIBEto any SMS or WhatsApp message sent by Rabishtra. -
For Assistance: Reply
HELPor contact us at support@rabishtra.in.
Standard message and data rates may apply depending on your mobile carrier plan.
12 Children's Privacy
Our services are intended for general audiences and are not directed to individuals under the age of 16 (or 18 in relevant jurisdictions). We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information without parental consent, please contact us immediately so we can remove the data.
13 Grievance Redressal & Contact Information
In compliance with applicable legal requirements (including Indian IT Intermediary Guidelines and the DPDP Act), you may submit questions, concerns, or grievances regarding our data practices to our designated point of contact:
14 Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect shifts in regulatory mandates, technical infrastructure, or Meta API updates. Any revisions will be published on this page with an updated "Last Updated" date. For material updates, we will notify users via email or a prominent banner on https://rabishtra.in/.