Privacy policy

1. Who we are

Nevorai Connect ("Connect", "we", "us") is a business messaging dashboard at connect.nevorai.com. It is operated by Nevorai Technologies, a sole proprietorship of Adarsh Chaturvedi, registered in Chhatarpur, Madhya Pradesh, India (GSTIN 23CBCPC3986J1ZN). Contact: teamnevorai@gmail.com.

Connect is built on Meta's WhatsApp Business Platform (Cloud API). It lets a business ("Client") connect its own WhatsApp Business number, receive and reply to customer messages, and manage message templates.

2. Our role

• For Client account data (logins, business details, billing), we decide how the data is used. Under India's Digital Personal Data Protection Act, 2023 we act as the data fiduciary.
• For the messages and contact details of a Client's customers, the Client decides why and how they are processed. We process them only to provide Connect to that Client, acting as the Client's processor.

3. What we collect

From Clients and their team members

• Name, email address, password (stored only as a secure hash by our sign-in provider) and, if you use it, your Google sign-in profile (name, email, photo).
• Business name and the roles of team members.
• Billing records for your Connect subscription (invoices, GST details). Card and bank details are handled by our payment provider and never stored by us.

From Meta, when a Client connects a WhatsApp number

• The WhatsApp Business Account ID, phone number ID, display phone number, display name, quality rating and account status.
• An access token that lets Connect send and receive messages for that number. We encrypt it before storing it.
• Message templates and their approval status.

Customer messaging data (processed for the Client)

• The customer's WhatsApp phone number and profile name.
• Messages sent and received, including text, media references, templates used, timestamps and delivery/read status.
• Contacts the Client adds or imports, with any tags and the opt-in record.

Technical data

• Essential cookies that keep you signed in, and a saved light/dark theme choice. On our public website pages only (never inside the app), we use the Meta Pixel to measure our own ads: it tells Meta which page you opened and whether you started a plan, and sets a Meta cookie. You can block it in your browser or with Meta’s ad settings. After a plan is paid, we send Meta a hashed (scrambled) email, phone number and first name with the plan and price, so it can count the sale. Messages and customer chats are never shared.
• Server logs (IP address, browser type, time of request) kept briefly for security and troubleshooting.

4. How we use data

• To provide Connect: show the inbox, deliver messages to and from WhatsApp, sync templates and show delivery status.
• To secure accounts, prevent abuse and fix problems.
• To send service emails, such as password resets and important account notices.
• To bill for the Connect subscription and meet tax and legal duties.

We do not sell personal data, use customer messages for advertising, or use WhatsApp data for any purpose other than providing Connect to the Client it belongs to. We do not use customer messages to train AI models.

5. WhatsApp and Meta data

Messages travel between the Client's customers and Connect through Meta's WhatsApp Business Platform. Meta processes this data under its own terms and privacy policy, including the WhatsApp Business Terms of Service and the Meta Platform Terms. We use data received from Meta only as those terms allow, only to provide Connect, and we keep it only as long as needed for that purpose.

Meta bills message charges directly to the Client's own Meta account. Nevorai does not receive or handle those payments.

6. Who we share data with

We share data only with service providers that help us run Connect, and only as much as they need:

• Meta Platforms, Inc. – WhatsApp Business Platform: delivering messages, templates and number management.
• Supabase, Inc. – database, sign-in and storage (data hosted in Mumbai, India).
• Vercel, Inc. – application hosting (servers in Mumbai, India).
• Cloudflare, Inc. – domain name (DNS) services.
• Google LLC – "Continue with Google" sign-in, if you choose it.
• Resend – sending service emails such as password resets.

We may also disclose data if Indian law requires it, or to protect the rights and safety of our users and the public. Some providers may process data outside India with appropriate safeguards.

7. How we protect data

• Every Client's data is kept separate by database-level access rules, so one business can never see another's data.
• WhatsApp access tokens are encrypted at rest. All traffic uses HTTPS.
• Messages from Meta are checked with a signature before they are accepted.
• Only authorised staff can access systems, and only to operate and support the service.

8. How long we keep data

• Account, contact and message data: while the Client's account is active. When a Client closes the account or asks for deletion, we delete it within 30 days.
• Backups: overwritten within a further 30 days.
• Invoices and tax records: kept for the period Indian tax law requires (currently at least six years).

9. Your rights and choices

• You can ask to see, correct or delete your personal data, or withdraw consent. See our data deletion page.
• If you are a customer of a business that uses Connect, you can stop messages by replying STOP or blocking the number, and you can ask that business to delete your data. You can also write to us and we will help.
• You can nominate another person to exercise your rights, as the DPDP Act allows.

10. Children

Connect is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data for our own purposes.

11. Grievance officer

Under the Information Technology Act, 2000 and the DPDP Act, 2023, our grievance officer is Adarsh Chaturvedi, Nevorai Technologies, Chhatarpur, Madhya Pradesh 471001, India. Email: teamnevorai@gmail.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

12. Changes

If we change this policy, we will update the date at the top and, for important changes, tell Clients by email or in the app.