Privacy Policy

Last updated: 14 June 2026

This Privacy Policy explains how Effess ("Effess", "we", "us") collects, uses, shares and protects information when you use our website at effess.in and our business communication platform at v1.effess.in (together, the "Service"). Effess is a software platform built on Meta's official WhatsApp Business Platform (Cloud API) that lets businesses message and support their customers.

1. Who we are

Effess provides the Service to business customers ("Customers"). When a Customer uses Effess to communicate with their own end users ("End Users"), Effess generally acts as a data processor on the Customer's behalf, and the Customer is the data controller of their End Users' data. For account and website data, Effess acts as a data controller.

2. Information we collect

Account information

Name, email address, password (stored only as a salted hash), business name, phone number and billing details you provide when you register or contact us.

WhatsApp Business data

When you connect a WhatsApp number through Meta's official onboarding (Embedded Signup), we process the WhatsApp Business Account ID, phone number ID, display name, business profile and quality/limit metadata. To deliver messaging, we process message content and metadata (sender/recipient identifiers, timestamps, delivery status) that flow through the WhatsApp Cloud API.

Usage data

Log data such as IP address, browser type, pages viewed and actions taken, used to operate and secure the Service.

3. How we use information

  • To provide, maintain and improve the Service;
  • To route, send and receive WhatsApp messages on your instruction;
  • To authenticate you and keep your account secure;
  • To provide customer support and respond to your requests;
  • To process payments and prevent fraud or abuse;
  • To comply with legal obligations and Meta's platform policies.

We do not sell your personal information, and we do not use the content of your WhatsApp messages for advertising.

4. How we share information

  • Meta Platforms / WhatsApp. Messages and related data are transmitted through Meta's WhatsApp Business Platform, subject to Meta's own terms and privacy policy.
  • Service providers (sub-processors). Trusted vendors that host our infrastructure, send transactional email and process payments, only to the extent needed to run the Service and under confidentiality obligations.
  • Legal. Where required by law, regulation or valid legal process, after review of the request's legality.

5. Data retention

We retain account data for as long as your account is active and as needed to provide the Service. Message and conversation data is retained only as long as necessary for delivery, support and the Customer's configured retention, after which it is deleted or anonymised. You may request deletion at any time (see below).

6. Your rights & data deletion

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, or to delete your data, see our Data Deletion page or email us at [email protected].

7. Security

We protect data with industry-standard measures including encryption in transit, hashed passwords, access controls and least-privilege database isolation. No method of transmission or storage is 100% secure, but we work hard to safeguard your information.

8. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

11. Contact us

Questions about this policy or your data? Email [email protected].