Privacy Policy

1. Who we are and what this policy covers

Connektly is a WhatsApp Cloud API platform operated by Shivam Madaan, India ("we", "us", or "our"). This policy covers Connektly and its associated Meta app, as well as shivammadaan.com and our support communications.

For our own website, account administration, billing, and support, we determine why and how information is used. When a business uses Connektly to communicate with its customers, we process that messaging information on the business's instructions. That business is responsible for its customer privacy notice, permissions, and lawful use of the information. Its own privacy policy also applies.

Privacy contact: official@shivammadaan.com.

2. Information we process

The information depends on the features you use and the permissions you or a connected business authorize:

• Account and contact information: name, email address, phone number, business details, and information supplied during onboarding or support.
• Connected Meta and WhatsApp Business information: authorized business and WhatsApp Business Account identifiers, business phone numbers and phone number IDs, business profiles, message templates and their status, and credentials or access tokens needed to maintain an authorized connection.
• Messaging information: the sender's or recipient's WhatsApp number or identifier, profile name where provided, message text, media or attachments sent through the connected business, message IDs, timestamps, delivery and read statuses, and webhook events. Businesses may also provide contacts and records of messaging consent or opt-out.
• Technical information: IP address, browser and device information, pages or features used, timestamps, error reports, and security or access logs.
• Transactions and enquiries: order and payment identifiers, product selections, payment status, and correspondence. Website checkout uses Razorpay; full payment card details are handled by the payment provider rather than our website backend.

Information comes from you, the businesses you communicate with, authorized Meta/WhatsApp APIs and webhooks, payment providers, and your use of our services. Connecting a business account does not give Connektly general access to your personal WhatsApp conversations; this policy concerns information made available through the authorized business integration.

3. How and why we use information

We process information to connect authorized business accounts; send, receive, and manage business messages; display message status; manage templates and contacts where those features are used; respond to enquiries; verify payments; provide support; diagnose problems; prevent misuse; and meet legal obligations.

Meta/WhatsApp Platform Data is used to provide the authorized integration and related messaging functions, in accordance with applicable platform terms. We do not sell that Platform Data or use it for unrelated advertising. A business must obtain the permissions required for its messages and respect a recipient's decision to stop receiving them.

Where applicable law requires a legal basis, we rely on providing an agreed service, consent where required, compliance with legal duties, or legitimate interests such as security and responding to enquiries, subject to the rights and safeguards required by that law. For customer messages processed on behalf of a business, the business is responsible for establishing its legal basis and instructions.

4. Who receives information

• Meta and WhatsApp: to authorize the integration and route messages through the WhatsApp Business Platform.
• The participating business and intended recipients: messages and related information are available to the business involved in the conversation and its authorized users, and outgoing messages reach their intended recipients.
• Service providers: hosting, infrastructure, email, support, and payment providers that need information to perform the relevant service. The website uses GitHub Pages and Render for hosting, Razorpay for checkout, and WATI for its website WhatsApp chat widget. Website measurement providers are described below.
• Legal or safety recipients: where disclosure is necessary to comply with a lawful request, enforce our terms, investigate fraud or abuse, or protect people's rights and safety.

Providers may process information outside your country, including outside India. Applicable data protection requirements and any required transfer safeguards apply to these arrangements. Third-party services have their own privacy notices, including WhatsApp, Meta, Google, and Razorpay.

5. Website cookies, analytics, and third-party content

The main website uses Google Analytics, Google Tag Manager, and Meta Pixel to measure visits, understand website usage, and measure advertising activity. These tools can receive device and browser information, page visits, IP-related information, and cookie or similar identifiers under their providers' policies. Embedded music players, social content, checkout, and the WATI chat widget may also contact their providers when loaded or used.

You can manage cookies through your browser and use the privacy or advertising controls offered by Google and Meta. Blocking third-party content or storage may affect embedded features. The website checkout uses browser session storage to retain a pending payment verification so it can be retried in the same tab.

The Privacy Policy, Data Deletion, and Terms of Use pages do not load our shared analytics, advertising pixel, or chat integration script. Website analytics are separate from the WhatsApp message data processed by Connektly.

6. Retention and security

We retain personal information only for as long as needed for the stated purpose, an active service relationship, authorized business instructions, or a legal obligation. Relevant factors include whether a connection remains active, whether information is needed to resolve a support request, and requirements concerning accounting, security, or disputes. Platform Data is deleted when it is no longer needed, following a valid deletion request, or when required by applicable Meta terms.

Following deletion, limited records may be retained where required by law or necessary to document the request, prevent fraud, resolve a dispute, or respect an opt-out. Any retained information is limited to that purpose. Backup copies, where present, are removed through the applicable backup retention cycle and should not be returned to active use except for recovery with deletion reapplied.

We use reasonable technical and organizational safeguards appropriate to the information we handle, including restricting access to authorized purposes and protecting integration credentials. No internet service can guarantee absolute security. Do not send passwords, access tokens, payment card numbers, or unnecessary sensitive information in support requests or business chats.

7. Your choices, privacy rights, and deletion

You may contact us to request access, correction, a copy, or deletion of your personal information, or to raise a privacy concern. Depending on applicable law, you may also have rights to object to or restrict processing, withdraw consent, receive portable data, or complain to the relevant data protection authority. Withdrawing consent does not affect processing already lawfully carried out.

Send requests to official@shivammadaan.com. We accept requests regardless of where you live and may ask for proportionate verification to protect your information. We aim to respond to and complete verified deletion requests within 30 days, or sooner where applicable law requires. If extra time or a lawful retention exception applies, we will explain it.

For data controlled by a business using Connektly, contact that business as well. We will assist with the request under its instructions and applicable law. To stop promotional WhatsApp messages, tell the sending business that you wish to opt out or use WhatsApp's block/report controls. To stop future authorized access, revoke the integration through your Meta account's connected app or business integration settings. Revoking access does not itself remove information already processed; follow the Data Deletion instructions to request removal.

8. Children

Connektly's business platform is intended for adults acting on their own behalf or for a business. We do not knowingly collect children's information to create platform accounts. If you believe a child has provided information that should be removed, contact us. Businesses using Connektly are responsible for any age-related notices and permissions required for their services.

9. Updates and contact

We may update this policy when our services or data practices change. The updated version and date will appear on this page. Where required, we will provide additional notice or obtain consent.