Privacy Policy

1. Introduction

Elixire Tech LLP ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WeComm service, a WhatsApp Business Platform integration.

This policy applies to all users of WeComm, including businesses that integrate our platform and their end customers who interact via WhatsApp messaging.

2. Information We Collect

We collect different types of information depending on how you interact with our service:

2.1 Business Account Information

When you create a WeComm account, we collect:

• Business Details: Company name, legal business name, business address, tax identification numbers
• Contact Information: Primary contact name, email address, phone number
• Account Credentials: Username, password (encrypted), security questions
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Verification Documents: Business registration certificates, tax documents, identity verification

2.2 WhatsApp Integration Data

To provide our service, we access and process:

• WhatsApp Business Account (WABA) ID: Your unique business account identifier
• Phone Numbers: Phone numbers associated with your WABA
• Facebook Business Manager Data: Business Manager ID, permissions, linked assets
• Message Templates: Templates you create, submit, and use for customer communication
• Webhook Configurations: Callback URLs, verification tokens, subscription settings

2.3 Customer Communication Data

When you communicate with your customers via WeComm:

• Message Content: Text messages, media files, documents sent/received
• Customer Phone Numbers: WhatsApp numbers of your customers
• Message Metadata: Timestamps, delivery status, read receipts, message IDs
• Conversation Context: Thread information, reply references

2.4 Order and Transaction Data

For e-commerce functionality:

• Order Details: Product names, quantities, prices, order totals
• Customer Information: Delivery addresses, customer preferences
• Transaction History: Order status, fulfillment tracking, payment status
• Inventory Data: Product catalogs, stock levels, SKU information

2.5 Usage and Analytics Data

We automatically collect technical and usage information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Statistics: Features used, time spent, click patterns, navigation paths
• Performance Data: API response times, error rates, system performance metrics
• Log Data: Access logs, error logs, security events

2.6 Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for account authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our service for improvements
• Performance Cookies: Monitor and optimize system performance

3. How We Use Your Information

Purpose	Data Used	Legal Basis
Service Delivery	All account and integration data	Contract performance
WhatsApp Messaging	WABA data, messages, customer info	Contract performance
Order Processing	Order data, customer details, inventory	Contract performance
Account Security	Authentication data, access logs	Legitimate interest
Customer Support	Contact info, usage data, support tickets	Contract performance
Service Improvement	Analytics, usage patterns, feedback	Legitimate interest
Billing & Payments	Payment info, transaction history	Contract performance
Legal Compliance	All data as required by law	Legal obligation
Fraud Prevention	Transaction data, usage patterns	Legitimate interest
Marketing (opt-in)	Contact info, preferences	Consent

4. How We Share Your Information

4.1 Third-Party Service Providers

We share data with trusted partners who help us operate our service:

• Meta Platforms (Facebook/WhatsApp): For WhatsApp Business API integration and message delivery
• Cloud Infrastructure Providers: For hosting and data storage (e.g., AWS, Google Cloud)
• Payment Processors: For handling subscription payments (data shared directly with processor)
• Analytics Providers: For usage analytics and service optimization
• Customer Support Tools: For providing technical support and assistance

4.2 Legal Requirements

We may disclose information when required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or other agreements
• Protect our rights, property, or safety, or that of our users
• Prevent fraud, security breaches, or illegal activities
• Respond to emergency situations involving danger of death or serious injury

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

4.4 With Your Consent

We may share information with other parties when you explicitly consent to such sharing.

5. Data Security

5.1 Security Measures

We implement industry-standard security practices:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication, principle of least privilege
• Network Security: Firewalls, intrusion detection, DDoS protection
• Security Monitoring: 24/7 threat monitoring, automated alerts, incident response
• Regular Audits: Security assessments, vulnerability scanning, penetration testing
• Data Isolation: Logical separation of customer data in multi-tenant environment

5.2 Data Breach Response

In the event of a data breach affecting your information, we will:

• Notify affected users within 72 hours of discovery
• Provide details about the nature and scope of the breach
• Outline steps we're taking to address the situation
• Advise on protective measures you should take
• Report to relevant authorities as required by law

5.3 Your Security Responsibilities

You are responsible for:

• Maintaining confidentiality of your account credentials
• Using strong, unique passwords
• Enabling multi-factor authentication when available
• Promptly notifying us of any unauthorized access
• Keeping your contact information current

6. Data Retention

6.1 Retention Periods

Data Type	Retention Period	Reason
Account Information	Duration of account + 30 days	Service delivery, reactivation grace period
Message Content	90 days (configurable)	Support, compliance, user preference
Order Records	7 years	Tax compliance, accounting requirements
Payment Information	7 years	Financial regulations, dispute resolution
Usage Analytics	2 years (anonymized after 6 months)	Service improvement, trend analysis
Security Logs	1 year	Security monitoring, incident investigation
Backup Data	90 days	Disaster recovery

6.2 Deletion After Retention Period

After the retention period expires, we securely delete or anonymize data so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical purposes.

7. Your Privacy Rights

Depending on your location, you have the following rights:

7.1 Right to Access

Request a copy of all personal data we hold about you, including data sources and processing purposes.

7.2 Right to Rectification

Correct inaccurate or incomplete personal data. You can update most information directly in your account settings.

7.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data, subject to legal retention requirements. See our Data Deletion Policy for details.

7.4 Right to Data Portability

Receive your data in a structured, machine-readable format (CSV, JSON) and transfer it to another service.

7.5 Right to Restriction of Processing

Request that we limit how we process your data in certain circumstances.

7.6 Right to Object

Object to processing based on legitimate interests, including for direct marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

7.8 Right to Lodge a Complaint

File a complaint with your local data protection authority if you believe we've mishandled your data.

8. International Data Transfers

WeComm is operated from India. If you are located outside India, please be aware that information we collect will be transferred to and processed in India.

8.1 Transfer Safeguards

When transferring data internationally, we ensure:

• Adequate protection through standard contractual clauses
• Compliance with applicable data transfer regulations
• Equivalent security measures regardless of location
• Transparency about where data is processed

8.2 Data Localization

For customers requiring data localization, we offer options to store data in specific geographic regions. Contact sales for custom deployment options.

9. Children's Privacy

WeComm is a business-to-business (B2B) service and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

If you believe we have inadvertently collected data from a minor, please contact us immediately at elixiretech@gmail.com, and we will promptly delete such information.

10. Third-Party Links and Services

WeComm may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services.

We recommend reviewing the privacy policies of any third-party services you access through our platform, including:

• Meta/Facebook/WhatsApp - Meta Privacy Policy
• Your chosen payment processor
• Any third-party integrations you enable

11. Marketing Communications

11.1 Opt-In Marketing

We will only send you marketing communications if you have opted in. This includes:

• Product updates and new features
• Educational content and best practices
• Promotional offers and discounts
• Industry news and insights

11.2 Opt-Out

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in account settings
• Contacting us at elixiretech@gmail.com

Note: You will still receive essential service communications (e.g., security alerts, billing notifications) even if you opt out of marketing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.1 Notification of Changes

We will notify you of material changes by:

• Email to your registered email address (at least 30 days in advance)
• Prominent notice on the WeComm dashboard
• Update to the "Last Updated" date at the top of this policy

12.2 Continued Use

Your continued use of WeComm after changes take effect constitutes acceptance of the updated Privacy Policy. If you disagree with changes, you may terminate your account.

13. Regulatory Compliance

We comply with applicable privacy and data protection regulations, including:

• GDPR (General Data Protection Regulation) - European Union
• CCPA (California Consumer Privacy Act) - California, USA
• IT Act 2000 and DPDP Act 2023 - India
• WhatsApp Business Policy - Meta Platforms requirements