Privacy Policy
Version 1.0 · Last updated 2026-08-22
1. Who we are
SthirWA is operated by Aadinath Ventures (SthirApp). We provide a multi-tenant WhatsApp Business API platform at chat.sthirapp.com for inbox, templates, campaigns, bots, and REST API messaging.
For your organisation account (owners and staff), we are the Data Fiduciary. For end-customer contact and message data you upload or receive through your connected WhatsApp Business Account (WABA), your organisation is the Data Fiduciary and SthirWA acts as a Data Processor.
2. Account & platform data
We collect and process:
- Name, email, and organisation details - account identity, billing, and support
- Login and session metadata - security, fraud prevention, and audit
- Subscription plan and usage analytics - platform billing and service delivery
- API keys and webhook configuration - programmatic access and delivery callbacks
- WhatsApp Business Account identifiers and phone numbers - connect and route messages via Meta
- Support tickets and communications - resolve issues and improve the service
3. Messaging & contact data
When you use SthirWA, we process message content, delivery status, templates, conversation history, contact tags, campaign recipients, and bot flow data solely to operate the platform on your behalf.
Message traffic is transmitted to and from Meta's WhatsApp Cloud API. Meta processes data under its own terms and policies. You must have a lawful basis to message your contacts and comply with WhatsApp Commerce and Business policies.
4. How we use data
- Provide inbox, template sync/send, campaigns, bots, and API delivery
- Authenticate users and secure accounts
- Bill platform subscriptions and show usage analytics
- Send service notifications (e.g. connection issues, trial expiry)
- Improve reliability, debug errors, and prevent abuse
We do not sell your data. Product updates or marketing messages are sent only where permitted and you may opt out of non-essential communications.
5. Your rights (India DPDP)
Where applicable, you may:
- Access and correct your account personal data
- Request erasure of your organisation account (see account deletion page)
- Withdraw consent for optional processing
- Raise a grievance with us or complain to the Data Protection Board of India
6. Retention & security
We retain account and operational logs while your subscription is active and as required for legal, billing, and audit obligations. Message and contact data is retained per your organisation settings and applicable law. We use encryption in transit (TLS), access controls, and monitoring to protect data.
7. Grievance officer
Email: hello@sthirapp.com
Data Protection Board complaints: MeitY guidance