1. Overview
SamparkSetu is a business communication platform that helps small businesses, sales professionals, and growth teams manage contact outreach. This Privacy Policy explains how we collect, use, store, and protect your data when you use SamparkSetu and its companion Chrome extension ("SamparkSetu Connector"), and Sampark Setu Contacts, our free companion Google Sheets tool.
This policy is compliant with India's Digital Personal Data Protection Act 2023 (DPDP Act) and, where applicable, the EU General Data Protection Regulation (GDPR).
1.1 Our relationship with WhatsApp and Meta
SamparkSetu is an independent product. It operates as an independent automation layer over the user's own WhatsApp Web session. We are not a partner, agent, reseller, or licensee of WhatsApp LLC or Meta Platforms Inc., and we are not affiliated with, endorsed by, or sponsored by them or any of their subsidiaries. We do not access WhatsApp's official Business API. Use of SamparkSetu is at the user's own discretion and subject to WhatsApp's own Terms of Service, which the user is responsible for reviewing and complying with. WhatsApp™ is a trademark of WhatsApp LLC.
2. Who We Are (Data Fiduciary)
Company: Enjay IT Solutions Ltd.
Address: Enjay House, Bhanu Sangam, Sanjan Rd, near Shreeji Hospital, Bhilad, Daheli, Gujarat 396105, India
Google Maps: Enjay House, Bhilad
Email: admin@samparksetu.app
Grievance Officer (DPDP Act):
Name: Limesh Parekh · Email: admin@samparksetu.app · Phone: +91 9558821650
Available: Monday to Friday, 10am–6pm IST
3. What Data We Collect and Why
3.1 Account Data
When you sign in with Google OAuth, we receive your name, email address, and Google profile picture. We use this solely to create and identify your SamparkSetu account. Legal basis: Contract.
3.2 Messaging Session Data
The SamparkSetu Connector extension connects to your active WhatsApp Web session in your browser. It reads your logged-in WhatsApp phone number (to verify the correct account is connected) and session state (connected / disconnected / QR pending). No private messages, chat history, or contact lists are ever read, stored, or transmitted. Legal basis: Contract.
3.3 Contact Data You Upload
When you upload phone numbers for verification, enrichment, or messaging, those numbers are processed through your own WhatsApp Web session. Results (whether a number is active, business profile details) are stored in your account for 90 days, after which they are automatically deleted. Legal basis: Contract / Legitimate interest.
3.4 Group Extraction Data
When you request group member extraction, member phone numbers from groups you administer are extracted and stored in your account for 90 days. Legal basis: Contract.
3.5 Usage and Analytics Data
We use Google Analytics and product analytics tools to understand how features are used. This data is aggregated and anonymised. No personally identifiable information is linked to analytics data. Legal basis: Legitimate interest.
3.6 Technical Data
We collect standard server logs including IP addresses, browser type, and timestamps for security and debugging purposes, retained for 30 days. Legal basis: Legitimate interest.
4. What We Do Not Collect
- We do not read, store, or transmit your private WhatsApp messages.
- We do not access contacts you have not explicitly submitted to SamparkSetu. This applies to the core SamparkSetu platform. If you use Sampark Setu Contacts, see §13, which accesses your full Google Contacts by design, with your explicit consent.
- We do not collect payment card details (we use third-party payment processors).
- We do not sell your data to any third party.
- We do not use your data for advertising or profiling.
5. Data Storage and Security
All data is stored on secure servers in India. We use:
- Encrypted connections (HTTPS/WSS) for all data transmission
- PostgreSQL database with access controls
- Cloudflare for network security and DDoS protection
We do not transfer your personal data outside India except where you explicitly use features that rely on third-party services listed in Section 6.
6. Third-Party Services (Data Processors)
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Login | Name, email |
| Anthropic Claude API | AI message enhancement (Pro+ only) | Message text you submit for AI spin |
| Cloudflare | Network security, tunneling | IP address, request metadata |
| Google Analytics | Product usage analytics | Anonymised usage events |
None of these processors receive your WhatsApp session data or the contact numbers you process.
Note: the Anthropic Claude API row above applies only to the main SamparkSetu outreach product. Sampark Setu Contacts (Section 13) sends no Google user data to any AI service.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account profile | Until account deletion |
| Verification / enrichment results | 90 days |
| Group extraction results | 90 days |
| Message send logs | 90 days |
| Sampark Setu Contacts verification results | 60 days |
| Server access logs | 30 days |
| Analytics data | As per Google Analytics policy (26 months, anonymised) |
8. Your Rights
Under the DPDP Act 2023 and GDPR (where applicable), you have the right to:
- Access — Request a copy of all personal data we hold about you
- Correction — Request correction of inaccurate data
- Erasure — Request deletion of your account and all associated data
- Withdrawal of consent — Disconnect your WhatsApp session or delete your account at any time
- Grievance redressal — Raise a complaint with our Grievance Officer (Section 2)
- Lodge a complaint — With the Data Protection Board of India (once operational) or your local supervisory authority (for EU users)
To exercise any right, email support@samparksetu.app with subject line "Data Request — SamparkSetu". We will respond within 72 hours.
9. Cookies
SamparkSetu uses session cookies (to keep you logged in), Google OAuth cookies (set by Google during login), and analytics cookies (set by Google Analytics, anonymised). You can disable cookies in your browser settings; disabling session cookies will prevent login from working.
10. Children's Privacy
SamparkSetu is a business tool intended for users aged 18 and above. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy as our product evolves or as regulations change. When we make material changes, we will notify you by email and display a notice in the SamparkSetu dashboard. The effective date at the top of this page will always reflect the latest version.
12. Contact Us
Email: admin@samparksetu.app
Grievance Officer: admin@samparksetu.app · +91 9558821650
Enjay IT Solutions Ltd., Enjay House, Bhanu Sangam, Sanjan Rd, near Shreeji Hospital, Bhilad, Daheli, Gujarat 396105, India
13. Sampark Setu Contacts (Google Contacts & Sheets access)
Sampark Setu Contacts is a free companion tool — a Google Sheet, not a separate app — that helps you clean up your Google Contacts and check which of your contacts' phone numbers are on WhatsApp. Because it accesses different Google data than the rest of SamparkSetu, that access is described separately here.
13.1 What Google user data it accesses, and why
Google Contacts (via the People API): full name, nickname, organization/company, job title, birthday, notes, group memberships, email addresses, phone numbers, physical addresses, and linked profile URLs. Accessed to display your contacts inside the tool's spreadsheet, let you find and fix duplicates, missing companies, and inconsistent data, and to identify which phone numbers need WhatsApp verification. Google Sheets: only the one spreadsheet this tool is attached to; no other file in your Google Drive is ever accessed. Only the Google Contacts and the one Google Sheet you've explicitly connected are accessed — never any other file in your Google Drive.
13.2 What gets written back to your Google Contacts
Only when you take an explicit action inside the tool: field edits you've approved, creating a new contact when you ask the tool to push one, and — for WhatsApp verification — a label on the phone number and, optionally, adding the contact to a Google Contacts group ("WhatsApp Business," "WhatsApp Personal," "Not on WhatsApp," or "Invalid Phone Number").
13.3 Sharing phone numbers for WhatsApp verification
To check WhatsApp status, phone numbers are sent to the SamparkSetu verification service described in Section 6 — the same company, same infrastructure, not a third party. Verification data is retained for 60 days, or deleted sooner on request.
13.4 What we do not do with this data
Not sold, not used for advertising or profiling, not used to train any AI/ML model, not shared with data brokers, not used for credit or lending decisions.
The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google Contacts and Google Sheets accessed by Sampark Setu Contacts is never used to develop, improve or train generalized or non-personalized AI/ML models, and is never sent to any AI service. The AI message-enhancement feature mentioned in Section 6 belongs to the separate Sampark Setu outreach product and does not receive Sampark Setu Contacts data.
13.5 Where your data lives
Your contacts and the tool's working data live in your own Google Sheet and Google Drive — not copied to our servers, except the phone numbers in §13.3.
13.6 Exercising your rights
The rights in Section 8 apply here too. To request deletion of verification records under §13.3 before the 60-day period, email support@samparksetu.app with subject line "Data Request — Sampark Setu Contacts."
13.7 Emails the tool sends you
Sampark Setu Contacts emails you — at your own Google address, through Google's own mail service — a run-completion alert when a batch finishes and a daily audit summary. The audit summary can list sample contact names with links back to those contacts. These emails go only to you; we do not send your data to anyone else.
13.8 Google API Services User Data Policy (Limited Use)
Sampark Setu Contacts' use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
