Privacy Policy
Summary: Contexta is a WhatsApp AI assistant platform for Indian SMBs. We collect business and conversation data to provide our service. We do not sell your data. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable international standards.
1. Who We Are
Contexta is a product of ROOT Platform, operated by Srikrishna Ananthakrishnan, based in Bangalore, India.
Contact:
Email: privacy@contexta.in
WhatsApp: +91 96637 41174
Address: Bangalore, Karnataka, India — 560001
2. Data We Collect
2.1 Business Account Data
When you onboard your business to Contexta, we collect:
- Business name, trade type, and city
- Owner's WhatsApp phone number (used as your account identifier)
- Business configuration: products, pricing, bot rules, and assets you provide
- WhatsApp Business Account credentials (phone number ID and access tokens)
2.2 WhatsApp Conversation Data
Contexta processes WhatsApp messages on behalf of your business. This includes:
- Messages sent by your customers to your WhatsApp Business number
- AI-generated responses sent from your number to your customers
- Customer phone numbers and names (as shared in conversations)
- Conversation timestamps and message metadata
- Images and documents customers share (used for quote generation, not retained permanently)
We are a data processor on behalf of your business (the data controller) for customer conversations. You remain responsible for complying with applicable laws when messaging your customers.
2.3 Quote and Business Operations Data
- Quotations generated through the platform (customer names, items, pricing)
- Lead and project records you manage in the portal
- Product catalog, pricing, and business rules you configure
2.4 Usage and Technical Data
- Portal login and usage activity
- API call logs (for billing, rate limiting, and debugging)
- Error logs (anonymised where possible)
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing the Contexta service | All data above | Contract performance |
| AI response generation | Messages, product knowledge | Contract performance |
| Quote PDF generation | Customer name, items, pricing | Contract performance |
| Platform security and fraud prevention | Usage logs, IP addresses | Legitimate interest |
| Service improvement | Anonymised usage patterns | Legitimate interest |
| Billing and account management | Business account data | Contract performance |
| Support and troubleshooting | Conversation logs (with consent) | Contract performance |
We do not use your customer conversation data to train AI models that are shared with other businesses. Your product knowledge and business rules are used solely to power your own bot.
4. WhatsApp and Meta Data
Contexta integrates with the WhatsApp Business Platform operated by Meta Platforms, Inc. When you use Contexta:
- Messages are transmitted via Meta's infrastructure. Meta's own privacy policies apply to that transmission.
- Your WhatsApp Business Account and associated phone number are registered with Meta, not with Contexta.
- We access your WhatsApp Business Account through authorised API credentials. We do not share these credentials with third parties.
- Customer phone numbers are used only to deliver the WhatsApp messages your bot generates — we do not use them for marketing without explicit consent.
For Meta's data practices, see: whatsapp.com/legal/privacy-policy
5. Data Sharing
We share data only in these circumstances:
- Anthropic (AI provider): Customer messages are processed by Claude AI (Anthropic, USA) to generate responses. Anthropic does not retain conversation data for training. See Anthropic's privacy policy.
- Supabase (database): All data is stored in Supabase (hosted in AWS ap-southeast-1). See Supabase privacy policy.
- DigitalOcean (infrastructure): Processing servers are hosted on DigitalOcean (Bangalore, India). See DigitalOcean privacy policy.
- Legal obligations: We may disclose data if required by Indian law, court order, or regulatory authority.
We do not sell, rent, or trade personal data to third parties for commercial purposes.
6. Data Retention
- WhatsApp messages: Retained for 90 days for service continuity, then deleted.
- Quotes and business records: Retained for the duration of your subscription plus 3 years (for accounting/legal compliance).
- Account data: Retained until account deletion, then within 30 days.
- Backup snapshots: Daily backups retained for 30 days.
7. Your Rights (DPDP Act 2023)
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Access the personal data we hold about you
- Correction of inaccurate or incomplete data
- Erasure of your personal data (subject to legal retention requirements)
- Grievance redressal — you may raise a complaint with our Data Protection Officer
- Nomination — you may nominate a person to exercise rights on your behalf
To exercise any right, email privacy@contexta.in with your request. We respond within 30 days.
You may also lodge a complaint with India's Data Protection Board at dpboard.gov.in once established.
8. Customer Data (Your Responsibility)
When your customers message your WhatsApp Business number powered by Contexta:
- You are the data fiduciary (controller) under the DPDP Act for your customers' data.
- You are responsible for obtaining any consents required to message customers via WhatsApp.
- You are responsible for maintaining your own privacy notice that covers your customers' data.
- Contexta processes this data as your data processor under your instructions.
9. Security
We implement appropriate technical and organisational measures including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Row-level security on all database tables (multi-tenant isolation)
- API authentication for all service access
- Automated daily backups with 30-day retention
- Access controls limiting data access to authorised personnel only
10. Children's Privacy
Contexta is a business tool intended for adults. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has provided data through our platform, contact us at privacy@contexta.in.
11. International Data Transfers
Your data is primarily stored and processed in India (AWS ap-southeast-1) and on our Bangalore servers. Some processing occurs in the USA (Anthropic AI inference). We ensure adequate protections are in place for any cross-border transfers as required by applicable law.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via email to registered account owners at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision. Continued use of Contexta after changes constitutes acceptance.
13. Contact Us
For any privacy-related questions, data requests, or complaints:
- Email: privacy@contexta.in
- WhatsApp: +91 96637 41174
- Response time: Within 30 days of receiving your request