KayChatTerms of Service

Privacy Policy

Effective date: 1 October 2026. Replaces the version effective 1 April 2026.

This Privacy Policy describes how Khatri Automations ("we", "us", or "our") collects, uses, and protects the information you provide when using KayChat — a WhatsApp automation platform operated by Khatri Automations, India. By using our platform, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you register, we collect your email address and password (stored as a salted hash). We do not store your plaintext password.

Workspace and Business Data

We store your business name, workspace configuration, and the WhatsApp Business API credentials (Phone Number ID and Access Token) that you provide. Access tokens are encrypted at rest using AES-256 encryption.

Message Data

WhatsApp messages sent and received through your connected number are stored in our database to power the inbox, chatbot, and broadcast features. They are kept for as long as your account is active and deleted as described in section 5.

Contact Data

Phone numbers and associated contact information of your WhatsApp contacts are stored to enable conversations, broadcasts, and chatbot flows.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited for security and performance monitoring.

2. How We Use Your Information

We do not sell your data to third parties. We do not use your business data for advertising.

3. Data Sharing

We share data only with the following service providers:

3a. End-User Data (WhatsApp Contacts)

KayChat is a B2B platform — our direct customers are businesses, and those businesses communicate with their own customers ("end users") via WhatsApp. End-user data we handle on behalf of our business customers includes: phone number, name (when shared via WhatsApp profile), and the content of messages exchanged with the business.

We act as a data processorfor this end-user data and the business is the data controller, called the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. We process end-user data solely to deliver the WhatsApp messaging service the business has subscribed to. We do not use end-user data for any independent purpose, do not share it with third parties for advertising, and do not sell it.

End-user data deletion requests: if you are an end user (a WhatsApp contact of one of our business customers) and want your data deleted, you can either (a) request the business directly, or (b) email us at contact@khatriautomations.com with the phone number you used and the business name; we will locate your records and delete them within 30 days. We will also notify the relevant business customer of your request.

3b. International Data Transfers

Some of our infrastructure providers (Vercel, Meta) operate data centers outside India. By using KayChat you consent to your data being transferred to and processed in those jurisdictions. We require all sub-processors to provide protections equivalent to those described in this policy. Our primary database (Supabase) is hosted in India.

4. Data Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption for sensitive credentials, and Row Level Security (RLS) in our database to ensure each workspace can only access its own data.

Despite these measures, no internet transmission is 100% secure. You are responsible for keeping your account credentials confidential.

5. Data Retention & Deletion

We retain your data for as long as your account is active. When your subscription ends or your workspace is deleted, we permanently delete your workspace data 90 days later, so an accidental cancellation can still be undone, except where we are required to retain it for legal compliance (e.g. tax records, fraud prevention). You can export your data at any time before then.

How to request account & data deletion: at any time, email contact@khatriautomations.comfrom your registered email address with the subject "Delete my account". We will confirm receipt within 2 business days, irreversibly delete your workspace data (including all messages, contacts, templates, broadcasts, chatbot flows, and credentials) within 30 days, and send you a written confirmation when the deletion is complete.

6. Your Rights

Under applicable Indian law and where applicable, GDPR, you have the right to:

To exercise any of these rights, email us at contact@khatriautomations.com.

7. Cookies

We use cookies solely for authentication (session management). We do not use tracking or advertising cookies. You can disable cookies in your browser, but this will prevent you from logging in.

8. Third-Party Links

Our platform may contain links to third-party websites (e.g. Meta, Razorpay). We are not responsible for the privacy practices of those websites.

9. Children's Privacy

KayChat is a business platform and is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email or via a banner in the platform when material changes occur. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, contact:
Khatri Automations
Email: contact@khatriautomations.com