This Privacy Policy explains how Kriiddaank ("we", "us", "our"), operator of the Kriiddaank WhatsApp Business Platform at whatsapp.toypulse.in ("the Service"), collects, uses, and protects information when you use the Service as a WhatsApp Business Platform Tech Provider client. We are a registered Meta Tech Provider, which means we help businesses connect their own WhatsApp Business Account (WABA) to send and receive messages and manage message templates through Meta's official WhatsApp Business Platform APIs.
Account information. When you register, we collect your name, email address, company name, and a securely hashed password.
Facebook / Meta Business data. When you connect your Facebook Business through Embedded Signup, Meta shares with us: your Meta Business ID, WhatsApp Business Account (WABA) ID(s), phone number ID(s) and their display numbers, and an access token that lets our Service act on your WABA's behalf (send messages, manage templates) via the Graph API. We do not receive your Facebook password or general Facebook account data beyond what is explicitly granted for WhatsApp Business Platform use.
Message content and metadata. When you send or receive WhatsApp messages through the Service, we store the message content, sender/recipient WhatsApp ID, timestamp, and delivery status, so your inbox and conversation history are available to you in the dashboard.
Webhook event data. Meta sends us delivery, read-receipt, and message events for your WABA via webhooks; we log these to support debugging and to keep message status accurate.
Technical data. IP address and session identifiers, collected for authentication and basic security (e.g. detecting suspicious login activity).
We do not use your message content or Meta Business data for advertising, and we do not sell your data to third parties.
We share data with Meta/WhatsApp only as required to provide the Service itself (i.e. the messages and API calls Meta's platform inherently processes to deliver your messages). We do not share your account information, message content, or connected business data with any other third party, except:
We retain account information and connected-business data for as long as your account is active. Message history is retained to keep your inbox usable; you may request deletion of your message history or full account data at any time (see Section 6). If you disconnect a WhatsApp Business Account, we stop making API calls on its behalf and delete the associated access token within 30 days.
Access tokens and passwords are never stored in plain text where avoidable, requests to Meta's Graph API use HTTPS/TLS, and dashboard access is restricted to authenticated, authorized users scoped strictly to their own connected businesses — one customer's data is never accessible to another customer of the Service.
You may request access to, correction of, or deletion of your personal data, or disconnection of a connected WhatsApp Business Account, at any time by emailing support@toypulse.in. We will respond and act on verified requests within a reasonable time, and no later than 30 days.
The Service is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.
For any privacy questions or requests, contact us at support@toypulse.in.