Privacy Policy

1. Introduction & Scope

DIGISOLVNET ("we", "us", or "our") respects your privacy and is committed to protecting the personal and customer data processed through our WhatsApp CRM application ("WaCRM" or the "Platform"). This Privacy Policy explains what information is collected, how it is processed, and your data ownership rights.

2. Customer Data Sovereignty & Tenant Isolation

When you use WaCRM to communicate with your end customers, you act as the Data Controller of your customer data, and DIGISOLVNET operates solely as a Data Processor.

• Your customer contacts, phone numbers, conversation histories, tags, and internal notes are isolated in your dedicated tenant database governed by Postgres Row-Level Security (RLS).
• We never sell, rent, commercialize, or aggregate your customer data for third-party advertising or model training.
• Stored credentials such as Meta WhatsApp Access Tokens and AI API keys are encrypted at rest using industry-standard AES-256-GCM encryption.

3. Information We Collect

We collect only the information necessary to provide and maintain the software service:

• Account Profile Information: Business name, administrator email address, billing phone number, and password hash (managed via Supabase Auth).
• Meta WhatsApp API Metadata: Phone Number ID, WhatsApp Business Account ID (WABA ID), and webhook verification signatures required to route inbound messages.
• Billing Records: Subscription status, billing cycle, transaction references, and renewal dates. Payment card numbers are never collected or processed on our servers; payments are processed securely through certified payment gateways (e.g. Razorpay).

4. Webhooks & Inbound Media Mirroring

Inbound WhatsApp messages and media files sent by your end customers are delivered via official Meta Cloud API webhooks. To ensure media availability after Meta's temporary download URLs expire, media files (voice notes, images, PDFs) are stored securely in your private Supabase storage bucket accessible only by authorized members of your workspace.

5. Data Retention & Deletion Rights

You maintain the right to export or delete your customer contacts, conversation histories, or entire account workspace at any time directly through the CRM dashboard or by submitting a written request to support@digisolvnet.com.

6. Contact Information

For data privacy inquiries or Data Processing Addendum (DPA) requests, please contact our compliance desk at: support@digisolvnet.com.