Privacy Policy

1. Information We Collect

Business91 Consultants Private Limited operates 2Ticks WA Hub. We collect only information necessary to deliver and bill your WhatsApp messaging gateway services:

• Account Credentials: Name, business email, mobile phone number, company name, and GSTIN (for tax invoice compliance).
• Authentication Data: Cryptographically hashed passwords, API secret tokens, and OAuth user profiles (via Google 1-Click login).
• Channel Connection Data: Baileys cryptographic session keys (stored encrypted on local server memory) and Meta Cloud Phone Number IDs / System User tokens.
• Message Metadata: Destination phone numbers, timestamps, delivery status (`sent`, `delivered`, `read`), and message IDs for audit logs and billing quota tracking.

---

2. How We Use Your Information

• Routing messages between your applications and WhatsApp endpoints (Node socket or Meta Graph API).
• Processing monthly subscription billing and generating 18% GST tax invoices via Razorpay.
• Monitoring quota usage to prevent API overages and service interruption.
• Ensuring account security and preventing unauthorized access or multi-device spoofing.

---

3. Data Security & Encryption

We employ industry-standard security measures:

• All data transmitted between your browser/app and our servers is secured with 256-bit TLS (HTTPS) encryption.
• API access is protected with Bearer token authentication and SHA-256 HMAC verification.
• We never store credit card, debit card, or UPI PIN details. All payment processing is offloaded to PCI-DSS certified partners (Razorpay).

---

4. Third-Party Disclosures

We do not sell, rent, or trade your personal or business data. Data is shared exclusively with necessary infrastructure providers:

• Meta Platforms, Inc.: For dispatching official WABA messages via Graph API v19.0.
• Razorpay Software Private Limited: For payment gateway processing, recurring billing, and GST invoicing.
• Law Enforcement: If required by Indian law or subpoena issued by a court of competent jurisdiction.

---

5. Data Retention & Erasure

Message logs are maintained in your account for 90 days for audit and delivery verification. You may request complete account deletion and cryptographic token revocation at any time by emailing support@2ticks.in.

---

6. Grievance Redressal