WhatsApp Business Privacy Policy

1. Legal Entity & Data Controller Identification

The legal entity responsible for the collection, governance, and processing of your personal data under this policy is:

2. What Information We Process via WhatsApp

When you initiate or receive communication through our official WhatsApp Business account, we process only the data necessary to provide and manage our services:

• Phone Number: Your unique WhatsApp telephone number utilized for messaging delivery and identification.
• Profile Name: The public display name you have configured in your personal WhatsApp account settings.
• Message Content: Inbound text queries, button selection responses, interactive list menu choices, and customer support queries you provide.
• Transactional Details: Associated order identifiers, tracking numbers, or appointment times required to answer utility requests.
• Technical & Delivery Metadata: Timestamps of message transmission, delivery status (sent, delivered, read), and error response codes returned by the Meta Cloud API.

* Note: We do not request or store sensitive banking PINs, card CVVs, or biometric information over WhatsApp.

3. Purpose of Processing & Message Categories

In strict accordance with Meta's WhatsApp messaging categories, your data is processed exclusively for the following authorized purposes:

4. User Consent & Strict Opt-Out (STOP) Mechanism

We honor your control over your inbox. In accordance with Meta's opt-in mandates:

• Explicit Opt-in: Marketing broadcasts are only dispatched to users who have affirmatively opted in (e.g., via website checkout, web forms, or explicit chat agreement).
• Instant Opt-Out (Unsubscribe): You can revoke your consent at any time. Simply reply with the keyword “STOP”, “UNSUBSCRIBE”, or click the native “Opt-out” button provided in our message templates.
• Effect of Opt-Out: Upon receiving your opt-out command, our automated webhook immediately suppresses your phone number from promotional broadcasts. You will continue to receive critical utility messages (such as security OTPs or active shipment alerts) only if related to an active order.

5. Third-Party Disclosures & Infrastructure

We do not sell, rent, lease, or monetize your personal data. Your information is shared only with trusted infrastructure providers required to operate the service:

• Meta Platforms, Inc. / WhatsApp LLC: Messages are securely transmitted via Meta's official WhatsApp Cloud API servers. Meta processes message metadata according to their global Data Policy.
• Hosting & Cloud Infrastructure: Backend webhooks and database logs are hosted on secure, high-availability cloud servers with strict firewall controls.
• Legal Disclosures: We may disclose information only if required by valid court order, applicable law, or regulatory request from recognized law enforcement authorities.

6. Data Retention & Deletion

We retain communication records only for as long as necessary to fulfill customer support and order fulfillment obligations:

• Temporary conversation webhook event logs are automatically pruned after 30 to 90 days.
• Customer contact profiles are preserved during active account engagement or until a deletion request is lodged.
• Right to Deletion (Right to Be Forgotten): You have the right to request full erasure of your WhatsApp communication records and contact profile from our systems at any time by emailing us at hello@scalemap.in with the subject line “WhatsApp Data Deletion Request”. We will process your request within 30 days.

7. Security Standards & Transport Encryption

Your security is paramount. All communication between our servers and Meta's WhatsApp Business Cloud API is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3) with SHA-256 signatures. Inbound webhook payloads are verified using cryptographic SHA-256 HMAC signatures to prevent unauthorized spoofing.

8. Contact Information & Data Protection Officer

If you have questions, feedback, or data privacy requests regarding our WhatsApp Business messaging practices, please reach out directly: