Privacy Policy

Effective Date: 26 October 2026

Last Updated: 26 October 2026


1. Introduction

Druvino Systems Pvt Ltd (“Druvino”, “we”, “us” or “our”) is committed to protecting the privacy and security of personal information.

Druvino Campaigns is a web-based business communication platform that enables businesses to manage customer contact lists, messaging consent, marketing campaigns, WhatsApp conversations, customer replies, opt-out preferences and related messaging operations through the WhatsApp Business Platform.

This Privacy Policy explains what information we collect, how we use and protect it, when we share it, how long we retain it and how individuals can contact us regarding their personal information.

By accessing or using our services, you acknowledge that you have read this Privacy Policy.

2. Information We Collect

The information we process depends on how you interact with Druvino Campaigns and the services provided to your business.

2.1 Business and account information

We may collect business names, contact names, email addresses, telephone numbers, account identifiers and other information required to create, configure, administer and secure business accounts.

2.2 Customer contact information

Businesses using Druvino Campaigns may upload or manage customer contact information, including telephone numbers and associated contact details, to facilitate authorised business communications.

Businesses are responsible for ensuring that they have the necessary permissions and lawful basis to provide this information to Druvino and communicate with their customers.

2.3 WhatsApp Business information

When a business connects its WhatsApp Business account, we may process relevant WhatsApp Business Account identifiers, phone number identifiers, account configuration information, message-template information and other data necessary to provide the requested integration.

2.4 Inbound WhatsApp messages and conversation history

Druvino Campaigns receives and stores inbound WhatsApp messages sent by customers to businesses using our platform.

Depending on the message and supported functionality, the information we process may include message content, sender telephone numbers, message identifiers, timestamps and associated conversation information.

Authorised users of the relevant business account can view inbound messages in Druvino Campaigns and send replies through the application.

We process these messages to enable businesses to manage customer conversations, respond to enquiries, provide customer support and maintain relevant conversation history.

2.5 Campaign and messaging information

We may process campaign names, campaign settings, recipient references, message-template identifiers, message identifiers, consent records, opt-out preferences, delivery statuses, failure information and related timestamps required to operate and troubleshoot the service.

2.6 Technical and security information

We may process technical information such as IP addresses, browser information, session information, security logs, diagnostic information and timestamps where necessary to operate the website, maintain security and investigate technical issues.

Cookies or similar technologies may also be used for authentication, session management and website functionality.

3. How We Use Information

We use personal information and related business data for the following purposes:

  • • Creating, administering and securing business accounts.
  • • Supporting authorised WhatsApp Business onboarding and account configuration.
  • • Importing and managing customer contact lists.
  • • Recording and respecting messaging consent and opt-out preferences.
  • • Receiving and displaying inbound WhatsApp messages.
  • • Enabling authorised business users to view customer conversations and send replies.
  • • Maintaining conversation history and supporting customer service.
  • • Sending authorised WhatsApp messages and managing campaign operations.
  • • Processing delivery statuses and troubleshooting messaging failures.
  • • Managing supported WhatsApp Business assets and message-template workflows.
  • • Providing customer support and maintaining service reliability.
  • • Preventing misuse, protecting security and meeting applicable legal obligations.

We process information for appropriate purposes connected with providing, securing and supporting our services, subject to applicable law and contractual requirements.

4. WhatsApp Business Platform and Meta

Druvino Campaigns integrates with the WhatsApp Business Platform and services provided by Meta Platforms to support authorised business messaging and account-management operations.

When a business connects its WhatsApp Business account, relevant account information and messaging data may be exchanged with Meta to fulfil the operations requested by that business.

When customers send WhatsApp messages to a connected business, those messages may be delivered through the WhatsApp Business Platform to Druvino Campaigns for processing and storage. Authorised users of the relevant business account can then view the messages and respond through our application.

Replies initiated through Druvino Campaigns are transmitted through the relevant WhatsApp Business Platform integration.

Meta and WhatsApp may independently process information under the terms, policies and privacy practices applicable to their services. Their processing and retention practices may differ from Druvino's.

Druvino does not control processing independently carried out by Meta or other third-party services.

5. Consent and Opt-Out Preferences

Businesses using Druvino Campaigns are responsible for ensuring that their communications comply with applicable privacy laws and WhatsApp Business policies.

Businesses must obtain any required consent before sending marketing messages and must respect customer communication preferences and applicable opt-out requirements.

Where supported by the application, opt-out requests are recorded and the affected telephone numbers are added to applicable suppression lists to prevent further campaign messaging.

Consent and opt-out records may be retained as necessary to respect customer preferences, operate the service, resolve disputes and demonstrate compliance.

Businesses must not use Druvino Campaigns to bypass opt-out preferences or send communications unlawfully.

6. How We Share Information

We may share information when necessary to provide and operate our services with the following categories of recipients:

  • • Meta and WhatsApp: To support authorised WhatsApp Business messaging and account-management operations.
  • • Hosting and infrastructure providers: To host, store, maintain and secure the application and its data.
  • • Technology and support providers: To maintain functionality, diagnose errors and resolve technical issues.
  • • Business customers and authorised users: To provide access to information relating to their own accounts, customer conversations, campaigns and authorised operations.
  • • Legal and regulatory authorities: Where disclosure is required by applicable law or valid legal process.

We take appropriate steps to protect information shared with service providers and limit its use to authorised purposes.

We do not sell personal information.

7. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, subject to applicable legal obligations and legitimate operational requirements.

Our retention practices include the following:

7.1 Inbound WhatsApp messages

Inbound WhatsApp message bodies and associated conversation information are retained to enable authorised business users to view conversation history, respond to customer enquiries and provide customer support.

We retain these records for the period necessary to provide these functions and meet applicable operational and legal requirements. The retention period should reflect the actual retention settings and practices applicable to the service.

When message information is no longer required, we take appropriate steps to delete or anonymise it, subject to applicable legal obligations and necessary backup-retention periods.

7.2 WhatsApp delivery and status-event records

WhatsApp delivery and status-event records are encrypted and retained for up to 90 days to support campaign reporting, delivery troubleshooting, customer support and security investigations.

At the end of the retention period, these records are deleted or anonymised, unless continued retention is required by applicable law.

7.3 Raw webhook payloads

Raw webhook payload storage is disabled by default where this reflects the application's actual configuration. Relevant extracted event information may be retained separately as described in this section.

7.4 Account, campaign, consent and opt-out records

Business account information, campaign records, consent records and opt-out preferences may be retained for as long as necessary to provide the service, maintain communication preferences, resolve disputes, meet legal obligations and protect the service from misuse.

When information is no longer required, we take appropriate steps to delete or anonymise it in accordance with our retention practices, subject to applicable legal requirements and necessary backup-retention periods.

Individuals may contact us to request access to, correction of or deletion of their personal information. Requests are assessed in accordance with applicable law and our obligations under relevant platform terms.

8. Information Security

We implement appropriate technical and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration, loss or destruction.

Depending on the information and service involved, these measures may include access controls, authentication, encryption, tenant-specific data isolation, secure configuration and security monitoring.

Access to business information and customer conversations is intended to be restricted to authorised users and personnel who require access to provide, operate, secure or support the service.

No method of electronic transmission or storage can be guaranteed to be completely secure. We work to maintain appropriate safeguards for the information we process.

9. International Data Processing

Druvino and its third-party service providers may process information in locations outside the country in which a business or individual is located.

Where applicable, international processing and transfers are subject to relevant legal requirements and appropriate safeguards.

10. Privacy Rights and Requests

Depending on applicable law, individuals may have rights to request access to, correction of or deletion of their personal information, withdraw consent where processing relies on consent, or raise concerns about how their information is processed.

If your information was provided to Druvino by a business using our platform, please contact that business first regarding information it controls, including customer contact information, conversation history and marketing preferences.

You may also contact Druvino using the details provided below. We will assess requests and respond in accordance with applicable law.

11. Cookies and Similar Technologies

Our website and applications may use cookies or similar technologies for authentication, session management, security and essential functionality.

Where additional cookies or similar technologies are used, relevant information and choices will be provided where required by applicable law.

Disabling essential cookies through your browser may affect the availability or functionality of certain services.

12. Children's Privacy

Druvino Campaigns is intended for business use and is not designed for children to create business accounts or manage marketing campaigns.

Businesses using our services must comply with applicable requirements concerning communications with children and the processing of children's personal information.

13. Third-Party Websites and Services

Our website or services may contain links to third-party websites or services. These third parties maintain their own privacy policies and practices.

We encourage users to review those policies when accessing third-party services. Druvino is not responsible for the independent privacy practices of services it does not operate.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, data-handling practices or legal obligations change.

Updates will be published on this page with a revised effective or last-updated date. Where required by applicable law, we will provide additional notice or obtain consent for material changes.

15. Contact Us

For privacy questions, data-related requests or concerns, please contact:

Druvino Systems Pvt Ltd

Website: https://druvino.com

Email: info@druvino.com

Location: Kochi, Kerala, India

Please do not include passwords, access tokens or other sensitive authentication credentials in your correspondence.