Privacy policy

SaasQuirk (“SaasQuirk”, “we”, “us”) is SAASQUIRK LLP, a company registered in India. We run Engage, a messaging platform that lets businesses (“Clients”) send and receive messages with their own customers (“End Users”) on WhatsApp, SMS, RCS, email and voice, and we build and run software systems for our customers.

This policy explains what personal information we collect through our website at https://saasquirk.com, the Engage platform and its console, how we use it, who we share it with, and the choices you have.

• For information about our Clients and website visitors, such as account, enquiry and billing details, we decide how the data is used and are responsible for it.
• For the messages, calls and contact details of a Client’s End Users, we act on behalf of that Client and process the data only on the Client’s instructions to provide our service. The Client is responsible for having a lawful basis, including the End User’s opt-in, to contact them.

• Website enquiries: your name, work email, company and message, when you write to us through the contact form on this site.
• Account information: name, business name, email address, phone number, password and role, provided when an account is set up for you.
• Channel and business account information: when you connect WhatsApp through Meta’s signup flow, we receive your Meta business portfolio ID, WhatsApp Business Account ID, phone number ID, display name, business profile details, message templates and an access token that lets us operate the account for you. For SMS and RCS, we hold your sender IDs and registered templates; for email, the sending domain and addresses; for voice, the numbers used by the voice AI agent.
• Message data: End User phone numbers, email addresses and profile names, message content and media, timestamps, and delivery and read status for messages sent or received through our platform on any channel.
• Voice data: for calls placed or answered by a voice AI agent, the number called, timestamps, the outcome, a transcript of the call and, where the Client has enabled it, a recording.
• Billing information: billing address, GST details and payment records. Clients pay by bank transfer and our account managers record each payment on the account. We do not take card payments on the platform.
• Usage and device information: IP address, browser type, log data and how you use our platform, collected to keep the service secure and working.
• Support communications: information you share when you contact us.

• To answer your enquiry when you write to us.
• To create and manage your account and provide our platform.
• To send, receive, store and display messages, calls, transcripts and delivery reports on your behalf.
• To manage your channel accounts, phone numbers, sender IDs, business profiles and message templates at your request.
• To bill you, provide support and send service-related notices.
• To secure our platform, prevent fraud and abuse, and fix problems.
• To comply with legal obligations and the policies of Meta, WhatsApp and the carriers and providers we work with.

We do not sell personal information, and we do not use End User message or call data for advertising or to build profiles.

Information we obtain through Meta’s platform (“Platform Data”) is used only to provide our messaging service to the Client who connected their account, and only in line with the Meta Platform Terms, the WhatsApp Business Terms of Service and the WhatsApp Business Messaging Policy.

• We do not sell, license or purchase Platform Data.
• We do not use Platform Data for advertising, profiling, surveillance, credit or eligibility decisions, or to discriminate against anyone.
• We do not share one Client’s Platform Data with another Client.
• We delete Platform Data when it is no longer needed to provide the service, when a Client disconnects their account, or when Meta requires it.

• Infobip: our WhatsApp Business Solution Provider and carrier partner, which delivers messages and calls between our platform and WhatsApp, the mobile networks and the RCS network.
• Meta Platforms (WhatsApp): to deliver messages, manage WhatsApp Business Accounts and templates, as required to use the WhatsApp Business Platform.
• Service providers: cloud hosting, email delivery, speech-to-text and other providers that help us run the service, under contracts that require them to protect the data.
• Legal and safety: where required by law, court order or government request, or to protect the rights and safety of our users and the public.
• Business transfers: to a successor if we are involved in a merger, acquisition or sale of assets, subject to this policy.

Our data is stored on servers in India. Infobip, Meta and the carriers may process message and call data in other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law.

We keep account information for as long as your account is active and as required for legal, tax and accounting purposes. Message data, call transcripts and recordings are kept for 90 days unless the Client chooses a different period or deletes them sooner. We then delete or anonymise them.

We protect data with encryption in transit, access controls, restricted staff access and regular security reviews. No system is completely secure, but we work to protect your information and will notify affected users and authorities of a breach as required by law.

Under applicable law, including India’s Digital Personal Data Protection Act, 2023, you may have the right to:

• access a summary of the personal data we hold about you;
• correct or update inaccurate data;
• request deletion of your data;
• withdraw consent where we rely on it;
• nominate another person to exercise your rights; and
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

If you are an End User of one of our Clients, please contact that business first, as they control how your messages are used. We will help them respond to your request.

You can ask us to delete your data at any time:

• Clients: email support@saasquirk.com from your registered email address with the subject “Data deletion request”.
• Disconnecting WhatsApp: you can remove our app’s access in Meta Business Settings, or ask us to disconnect your WhatsApp Business Account. We will then stop accessing the account and delete its Platform Data.
• End Users: email support@saasquirk.com with your phone number or email address and the name of the business that contacted you. You can also reply STOP to the business to stop receiving messages.

We will confirm your request and complete deletion within 30 days, except for information we must keep by law (for example, invoices), which we keep only as long as required.

Our website uses necessary cookies to keep the site working and secure, and to remember your cookie choice. We do not set analytics cookies (Google Analytics) or marketing cookies (the Meta Pixel, for Facebook and Instagram) unless you allow them through the cookie banner; every optional category is off until you switch it on.

You can change your choice at any time from Cookie settings in the footer of every page, and you can also control cookies through your browser settings. The Engage console uses essential cookies and local storage to keep you signed in.

Our platform is for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the new version on this page with a new effective date and, for significant changes, notify Clients by email or in the platform.

For privacy questions, requests or complaints, contact our Grievance Officer:

Shashank Harish Athawale, Grievance Officer
SAASQUIRK LLP, India
302, IT Park, Nagpur, Maharashtra
Near JM High School, Kanhar Toli, Balaghat Road, Gondia 441614, Maharashtra
Email: support@saasquirk.com
Phone: +91 74477 44406

We respond to grievances within the time required by applicable law.