Privacy Policy

1. Who is responsible

For your PrasarOS account (your name, email, team and billing details) Tamkis is the data fiduciary/controller. For the contacts and messages you manage through PrasarOS (your customers’ data), you are the data fiduciary/controller and Tamkis processes that data only on your instructions, as your data processor.

2. Data we collect

• Account data: name, email address, password (stored only as a secure hash), language, role.
• Business data: business name, industry, website, country, time zone, team members.
• WhatsApp Business data: when you connect through Meta’s Embedded Signup we receive your WhatsApp Business Account ID, phone number ID, display name, quality rating and an access token issued by Meta. The token is encrypted with a dedicated key-management service and never shown back to anyone.
• Customer data you upload or receive: contact names, phone numbers, WhatsApp user identifiers, attributes, opt-in records, and message content and delivery statuses.
• Billing data: plan, invoices and GST details. Card and UPI details are handled by our payment providers, not stored by us.
• Technical data: IP address, device and browser type, and security and audit logs.

3. How we use it

• To provide the service: send and receive WhatsApp messages, broadcasts, inbox and automations you configure.
• To secure accounts: verification codes, fraud and abuse prevention, audit logs.
• To bill you and meet tax and legal obligations.
• To support you and send service emails (e.g. verification codes, invitations, important changes).
• To improve PrasarOS using aggregated, de-identified usage information.

We do not sell personal data, and we do not use your customers’ data for our own marketing or advertising.

4. Meta and WhatsApp

PrasarOS uses the WhatsApp Business Platform (Cloud API) provided by Meta. Messages you send or receive are transmitted through Meta and are also subject to Meta’s terms and policies, including the WhatsApp Business Messaging Policy. We access your WhatsApp Business Account only with the permissions you grant during Embedded Signup and only to provide the features you use.

5. Sharing and sub-processors

We share data only with service providers that help us run PrasarOS, under contracts that protect it:

• WhatsApp messaging: Meta Platforms (WhatsApp Business Platform) — message delivery.
• Cloud hosting in India — hosting, database, file storage and encryption key management.
• Network security and content delivery — secure connections (TLS) and attack protection.
• Email delivery — service emails such as verification codes, invitations and receipts.
• Payments: Razorpay — billing, when you buy a paid plan.

A list of our sub-processors is available on request at contact@tamkis.com.

We may also disclose data where required by law or to protect the rights, safety and security of users.

6. Where data is stored and how it is protected

Data is stored in India with a secure cloud provider. It is encrypted at rest and in transit (TLS). The key that connects your WhatsApp number (the access token issued by Meta) is additionally encrypted with a dedicated key-management service. Each business’s data is isolated at the database level with row-level security, and access by our staff is limited, logged and audited.

7. Retention

We keep account and customer data while your account is active. Raw webhook events are kept for up to 30 days for troubleshooting. When you close your account or ask us to delete data, we delete or anonymise it within 30 days, except records we must keep by law (such as invoices).

8. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate another person to exercise your rights. Account owners can export or delete their data from the dashboard; see our data deletion instructions. Your customers who want their data removed should contact the business that messaged them; we will help that business act on the request.

9. Children

PrasarOS is a business service and is not directed at children under 18.

10. Changes and contact

We will post changes here and, for material changes, notify account owners by email. Questions, requests and grievances: contact@tamkis.com. We aim to respond within 7 days.