Privacy policy
How Dizitallink collects, uses and protects personal data, and the choices you have.
Last updated:
This privacy policy explains how Dizitallink ("we", "us") collects, uses, shares and protects personal data when you visit our website, create an account, or use the Dizitallink platform to send and receive WhatsApp messages.
Who we are
Dizitallink is a WhatsApp marketing and customer-messaging platform operated by Dizitallink, India.
- Email: [email protected]
- Phone: +91 78020 57858
Our role
We handle two kinds of personal data, in two different roles:
| Data | Whose data | Our role |
|---|---|---|
| Account, billing and website data | Our business customers and their staff, and website visitors | Data Fiduciary (India) / controller (UK and EU) |
| Contacts and WhatsApp messages | People who message, or receive messages from, a business that uses Dizitallink | Data Processor, acting on the business's instructions |
For contact and message data, the business using Dizitallink decides why and how it is used and is responsible for having consent. If you received a WhatsApp message from a business, please contact that business first; we will help them respond to you.
Information we collect
Information you give us
- Account details: name, email address, phone number and password (stored only as a secure hash by our authentication provider).
- Business details: business name, country, industry, website and address.
- Contacts you upload: phone numbers, names, tags, custom fields and the source and date of each customer's opt-in.
- Messages and templates: the campaigns, templates and replies you write.
- Business information for AI replies: the descriptions, FAQs, prices and policies you add so the AI can answer customers.
- Support messages: what you send us by email, WhatsApp or our contact form.
Information we receive from Meta
When you connect a WhatsApp Business number through Meta's Embedded Signup, and you grant our app the permissions whatsapp_business_management and whatsapp_business_messaging, we receive:
- Your WhatsApp Business Account ID, phone number ID, display phone number, verified business name and Meta business portfolio ID
- A business access token that lets Dizitallink send and receive messages for that number
- Message content, media, and delivery and read statuses for messages sent and received on that number
- Template status and quality-rating updates for that number
Information collected automatically
- Technical data: IP address, browser and device type, pages visited and timestamps, kept in server logs for security and troubleshooting.
- Cookies: only the cookies needed to keep you signed in and remember your light or dark theme. We do not use advertising or cross-site tracking cookies.
Payment information
Payments are handled by our payment providers (Razorpay and Stripe). We receive the payment status, amount, and the last four digits and brand of the card or the payment method type. We never receive or store full card numbers, CVV or bank passwords.
How we use information
| Purpose | Data used | Legal basis (UK/EU) |
|---|---|---|
| Create and secure your account | Account and technical data | Contract |
| Connect your WhatsApp number and send and receive messages for you | Meta data, contacts, messages | Contract |
| Answer customer messages with AI, when you turn it on | Business information, incoming messages | Contract |
| Charge for coins and keep invoices | Billing data | Contract, legal obligation |
| Provide support and service emails | Account and support data | Contract |
| Prevent fraud, spam and abuse, and enforce our acceptable use policy | Account, technical and message metadata | Legitimate interests, legal obligation |
| Improve the product using aggregated usage statistics | Technical and usage data | Legitimate interests |
| Comply with law and respond to lawful requests | As required | Legal obligation |
In India, we process personal data on the basis of consent or for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023.
We do not sell personal data, and we do not use data received from Meta, or your customers' messages, for advertising.
Meta Platform Data
Data we receive through Meta's WhatsApp Business Platform is used only to provide Dizitallink to the business that connected the number: sending and receiving its messages, showing them in its inbox, managing its templates, and reporting delivery. We do not use it for any other purpose, combine it with other businesses' data, or transfer it except to the service providers listed below. We follow Meta's Platform Terms and Developer Policies.
AI features
When a business turns on AI replies, incoming customer messages and the business information it provided are sent to our AI model provider to draft a reply. Replies are labelled as AI-generated in the inbox, and the business can take over any conversation. The AI does not make decisions that have legal or similarly significant effects on anyone. We do not use customers' messages to train AI models, and we use AI providers that do not train their models on data we send them.
Who we share data with
We share personal data only with service providers that help us run Dizitallink, under contracts that require them to protect it and use it only on our instructions:
| Provider | Purpose |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving WhatsApp messages |
| Supabase | Database, authentication and file storage |
| Cloud hosting provider | Running our website, servers and background jobs |
| AI model provider | Drafting AI replies, when turned on |
| Razorpay and Stripe | Processing payments |
| Email delivery provider | Sign-up codes and service emails |
We may also disclose data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy continues to apply.
International transfers
Our service providers may store or process data outside the country where you live, including in the United States and the European Union. WhatsApp messages are processed on Meta's infrastructure. Where UK or EU data is transferred to a country without an adequacy decision, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. Transfers from India follow the Digital Personal Data Protection Act, 2023 and any restrictions notified under it.
How long we keep data
| Data | How long |
|---|---|
| Account and business details | While the account is open, then deleted within 90 days of closure |
| Contacts, messages and templates | While the account is open, or until the business deletes them; deleted within 90 days of account closure |
| WhatsApp access tokens | Until the number is disconnected or the account is closed, then deleted immediately |
| Invoices and payment records | 8 years, as required by Indian tax and company law |
| Server and security logs | Up to 90 days |
| Contact form and support messages | Up to 2 years |
How we protect data
- Encryption in transit (HTTPS/TLS) and at rest
- WhatsApp access tokens stored in an encrypted secrets vault, never shown in the app
- Row-level access controls, so each business sees only its own data
- Role-based access for staff, with access limited to what support requires
- Verification of every webhook from Meta using a signed secret
No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
Your rights
Depending on where you live, you can ask us to:
- Give you access to, or a copy of, your personal data
- Correct inaccurate or incomplete data
- Delete your data
- Restrict or object to certain processing
- Move your data to another service (data portability)
- Withdraw consent at any time, without affecting earlier processing
- Nominate someone to exercise your rights if you die or become incapacitated (India)
To make a request, email [email protected]. We will confirm your identity and reply within 30 days. If we hold your data only as a processor for a business, we will pass your request to that business and help it respond.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India or, in the UK, to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
Deleting your data
You can ask us to delete your account and data at any time. See how to delete your data for the steps, including how to remove Dizitallink from your Facebook account.
Children
Dizitallink is a service for businesses and is not intended for anyone under 18. We do not knowingly collect children's data.
Changes to this policy
We will post any changes on this page and update the date at the top. If the changes are significant, we will email account owners at least 14 days before they take effect.
Contact us
For any question or complaint about privacy, contact us:
- Email: [email protected]
- Phone: +91 78020 57858
- Company: Dizitallink
We reply within 2 business days and resolve complaints within 30 days.