1. Overview
SamparkSetu is a business communication platform that helps small businesses, sales professionals, and growth teams manage contact outreach. This Privacy Policy explains how we collect, use, store, and protect your data when you use SamparkSetu and its companion Chrome extension ("SamparkSetu Connector").
This policy is compliant with India's Digital Personal Data Protection Act 2023 (DPDP Act) and, where applicable, the EU General Data Protection Regulation (GDPR).
1.1 Our relationship with WhatsApp and Meta
SamparkSetu is an independent product. It operates as an independent automation layer over the user's own WhatsApp Web session. We are not a partner, agent, reseller, or licensee of WhatsApp LLC or Meta Platforms Inc., and we are not affiliated with, endorsed by, or sponsored by them or any of their subsidiaries. We do not access WhatsApp's official Business API. Use of SamparkSetu is at the user's own discretion and subject to WhatsApp's own Terms of Service, which the user is responsible for reviewing and complying with. WhatsApp™ is a trademark of WhatsApp LLC.
2. Who We Are (Data Fiduciary)
Company: Enjay IT Solutions Ltd.
Address: Enjay House, Bhanu Sangam, Sanjan Rd, near Shreeji Hospital, Bhilad, Daheli, Gujarat 396105, India
Email: support@samparksetu.app
Grievance Officer (DPDP Act):
Name: Limesh Parekh · Email: support@samparksetu.app · Phone: +91 9558821650
Available: Monday to Friday, 10am–6pm IST
3. What Data We Collect and Why
3.1 Account Data
When you sign in with Google OAuth, we receive your name, email address, and Google profile picture. We use this solely to create and identify your SamparkSetu account. Legal basis: Contract.
3.2 Messaging Session Data
The SamparkSetu Connector connects to your active WhatsApp Web session in your browser. It reads your logged-in WhatsApp phone number (to verify the correct account is connected) and session state (connected / disconnected / QR pending). No private messages, chat history, or contact lists are ever read, stored, or transmitted. Legal basis: Contract.
3.3 Contact Data You Upload
When you upload phone numbers for verification, enrichment, or messaging, those numbers are processed through your own WhatsApp Web session. Results are stored in your account for 90 days, after which they are automatically deleted. Legal basis: Contract / Legitimate interest.
3.4 Group Extraction Data
When you request group member extraction, member phone numbers from groups you administer are extracted and stored in your account for 90 days. Legal basis: Contract.
3.5 Usage and Analytics Data
We use Google Analytics and product analytics tools to understand how features are used. This data is aggregated and anonymised. Legal basis: Legitimate interest.
3.6 Technical Data
We collect standard server logs including IP addresses, browser type, and timestamps for security and debugging purposes. Retained for 30 days. Legal basis: Legitimate interest.
4. What We Do Not Collect
- We do not read, store, or transmit your private WhatsApp messages.
- We do not access contacts you have not explicitly submitted to SamparkSetu.
- We do not collect payment card details (we use third-party payment processors).
- We do not sell your data to any third party.
- We do not use your data for advertising or profiling.
5. Data Storage and Security
All data is stored on secure servers in India. We use:
- Encrypted connections (HTTPS/WSS) for all data transmission
- PostgreSQL database with access controls
- Cloudflare for network security and DDoS protection
We do not transfer your personal data outside India except where you explicitly use features that rely on third-party services listed in Section 6.
6. Third-Party Services (Data Processors)
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Login | Name, email |
| Anthropic Claude API | AI message enhancement (Pro+ only) | Message text you submit for AI spin |
| Cloudflare | Network security, tunneling | IP address, request metadata |
| Google Analytics | Product usage analytics | Anonymised usage events |
None of these processors receive your WhatsApp session data or the contact numbers you process.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account profile | Until account deletion |
| Verification / enrichment results | 90 days |
| Group extraction results | 90 days |
| Message send logs | 90 days |
| Server access logs | 30 days |
| Analytics data | As per Google Analytics policy (26 months, anonymised) |
8. Your Rights
Under the DPDP Act 2023 and GDPR (where applicable), you have the right to:
- Access — Request a copy of all personal data we hold about you
- Correction — Request correction of inaccurate data
- Erasure — Request deletion of your account and all associated data
- Withdrawal of consent — Disconnect your WhatsApp session or delete your account at any time
- Grievance redressal — Raise a complaint with our Grievance Officer
- Lodge a complaint — With the Data Protection Board of India or your local supervisory authority
To exercise any right, email support@samparksetu.app with subject "Data Request — SamparkSetu". We will respond within 72 hours.
9. Cookies
SamparkSetu uses session cookies (to keep you logged in), Google OAuth cookies (set by Google during login), and analytics cookies (set by Google Analytics, anonymised). You can disable cookies in your browser settings. Disabling session cookies will prevent login.
10. Children's Privacy
SamparkSetu is a business tool intended for users aged 18 and above. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy as our product evolves or as regulations change. When we make material changes, we will notify you by email and display a notice in the SamparkSetu dashboard.
12. Contact Us
For any privacy-related questions or requests: support@samparksetu.app
Grievance Officer: support@samparksetu.app · +91 9558821650
Enjay IT Solutions Ltd. · Enjay House, Bhanu Sangam, Sanjan Rd, near Shreeji Hospital, Bhilad, Daheli, Gujarat 396105, India
