Privacy Policy
Last Updated: January 1, 2026 | Effective Date: January 1, 2026
Digital Personal Data Protection Commitment
This Privacy Policy explains how CHAT GROW (“CHAT GROW”, “we”, “us”, or “our”) collects, processes, protects, and handles personal data when you visit our website (https://chatgrow.in), use our free online WhatsApp tools, submit inquiry forms, or access our WhatsApp CRM software platform. ChatGrow is a software platform operated by CHAT GROW, a proprietorship enterprise (Proprietor: Kajal Kumari). ChatGrow has implemented privacy and data-handling practices designed to support compliance with applicable Indian data protection requirements, including the principles of India’s Digital Personal Data Protection Act, 2023 (DPDPA) and the notified Digital Personal Data Protection Rules, 2025 (subject to applicable law and legal review).
1. Data Fiduciary Identity & Business Entity
The Data Fiduciary / Data Controller responsible for processing personal data on this website is:
2. Free WhatsApp Tools: 100% Client-Side Privacy
When you use our free utilities — including the WhatsApp Chat Button & Widget Generator and the WhatsApp QR Code Generator:
- All processing, code generation, and QR code rendering runs entirely inside your browser memory using client-side JavaScript.
- Your phone number, custom greeting message, and business name are never sent to or stored on ChatGrow servers.
- The generated QR code encodes standard WhatsApp Click-to-Chat deep links (
https://wa.me/...) directly without passing through intermediate tracking redirectors.
3. Information We Collect & Specified Purposes
In accordance with Section 5 of the DPDP Act, 2023, personal data is collected strictly for specified, lawful, and necessary purposes:
A. Demo & Onboarding Requests (/demo)
Data Collected: Full name, business name, work email address, WhatsApp/phone number, industry category, estimated monthly conversation volume, and stated workflow goals.
Specified Purpose: To contact you, coordinate a tailored product walkthrough, assess technical requirements, and deliver onboarding guidance.
Lawful Basis: Consent granted upon voluntary submission of the demo form.
B. General Contact & Inquiries (/contact)
Data Collected: Name, work email address, optional phone number, inquiry subject, and message content.
Specified Purpose: To evaluate and respond to sales, technical support, or partnership inquiries.
Lawful Basis: Consent granted upon voluntary submission of the message.
C. Software Portal Account & Customer Data (app.chatgrow.in)
Data Collected: Authorized agent names, login emails, passwords (hashed), billing addresses, GSTIN numbers, WhatsApp Business Account (WABA) IDs, phone number IDs, and Meta API access tokens.
Specified Purpose: To provide, operate, and maintain the multi-agent CRM workspace, execute approved template broadcasts, synchronize webhooks, and process subscription invoices.
Lawful Basis: Contractual necessity for service delivery.
D. Technical Logs & Telemetry
Data Collected: IP addresses, browser user-agents, requested URLs, referral headers, and timestamps.
Specified Purpose: Maintaining network and server security, detecting DDoS attacks, investigating security incidents, and monitoring platform uptime.
4. Analytics, Cookies & Tracking Technologies
Our website uses cookies and similar storage technologies:
- Strictly Necessary: We store your consent preference in your browser (
chatgrow_cookie_consent_v1) and use security cookies for session protection. - Optional Performance Analytics (Google Analytics 4 & IND Analytics): Used to measure aggregated website traffic, device resolutions, and navigation patterns with IP anonymization. Completely disabled until you grant explicit analytics consent.
- Optional Customer Support Live Chat (IND Connect): Enables real-time visitor assistance directly on the website. Completely disabled until you grant explicit functional/chat consent.
- Optional Marketing Telemetry (Meta Pixel): Used to evaluate the conversion performance of digital advertising campaigns. Completely disabled until you grant explicit marketing consent.
- Zero Personal Data in Telemetry: We strictly prohibit sending personal names, phone numbers, email addresses, or form contents into analytics event streams.
For complete details, please review our dedicated Cookie Policy. You may adjust or revoke your preferences at any time:
5. Data Processors & Third-Party Service Providers
ChatGrow does not sell, rent, or trade your personal data to data brokers or advertisers. We engage vetted service providers (“Data Processors”) strictly to operate our technical infrastructure:
| Service Provider | Role / Service | Data Processed | Location / Compliance |
|---|---|---|---|
| Hostinger International Ltd. | Cloud Web Hosting & Server Infrastructure | Encrypted server logs, web requests, application build assets | Global Cloud Tier III / GDPR & ISO27001 standard |
| Meta Platforms, Inc. | WhatsApp Business Platform (Cloud API) | Official phone numbers, approved message templates, delivery metadata | Subject to Meta Business Terms & Data Processing Addendum |
| Google LLC (Alphabet) | Google Analytics 4 (Optional Telemetry) | Aggregated interaction telemetry, anonymized IP (only upon opt-in analytics consent) | Google Cloud Global Infrastructure / Google Consent Mode v2 |
| IND Analytics (indanalytics.in) | Privacy-First Website Telemetry | Aggregated pageviews, screen resolution, referrers (only upon opt-in analytics consent) | Server-side analytics / privacy-focused telemetry |
| IND Connect (indconnect.in) | Visitor Customer Support Live Chat | Live chat messages, session state (only upon opt-in functional/chat consent) | Cloud chat infrastructure |
| RBI-Compliant Payment Gateways | Subscription Payment Processing | Billing details, transaction IDs, tax records (payment card data held directly by PCI-DSS Level 1 gateway) | India Data Localization Compliant |
6. User Rights Under the DPDP Act, 2023
As a Data Principal under India’s Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights regarding your personal data:
To exercise any of these rights, submit a written request to our Data Protection Desk at: [email protected]. We will acknowledge and respond to valid requests within the statutory timeframe prescribed under the DPDP Rules.
7. Withdrawal of Consent
In accordance with Section 6(4) of the DPDP Act, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal.
- Website Cookies & Telemetry: You can withdraw consent instantly by reopening the and selecting “Reject All”.
- Form Inquiries & Marketing Communications: Email us at [email protected] with the subject line “Consent Withdrawal Request”.
8. Privacy / Grievance Contact & Redressal
In accordance with Section 13 of the DPDP Act, 2023 and Rule 14 of the DPDP Rules, 2025, CHAT GROW (operating ChatGrow) has designated a Privacy / Grievance Contact for handling inquiries, privacy rights requests, and data protection concerns:
If your grievance is not resolved satisfactorily by our Grievance Contact within the prescribed period, you may escalate your complaint to the Data Protection Board of India (DPBI) in the manner notified by the Central Government.
9. Data Retention & Deletion Principles
Personal data is retained only for as long as reasonably necessary for the stated purpose for which it was collected and to satisfy applicable legal, accounting, tax, or business requirements. Operational retention schedules remain subject to ongoing business and legal review:
- Free WhatsApp Utilities: 0 seconds (zero server retention; processed strictly in browser RAM).
- Inquiry & Demo Communications: Retained only for as long as reasonably necessary to evaluate, respond to, and manage business correspondence, or until consent is withdrawn or an erasure request is received, subject to applicable legal requirements.
- Active Customer CRM Accounts: Retained during the duration of your active subscription contract and as necessary to provide service, fulfill contractual obligations, or comply with legal requirements. Workspace data may be exported or deleted upon account closure.
- Tax & Accounting Records: Invoices and transaction records are retained for statutory retention periods mandated by Indian tax and financial legislation.
10. Protection of Children & Minors
ChatGrow is a business-to-business (B2B) software-as-a-service platform designed exclusively for commercial enterprises, marketing agencies, and working professionals. Our website and services are not directed at, marketed to, or intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
11. Security Safeguards
We implement reasonable technical, operational, and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure:
- TLS 1.3 encryption for all data in transit across public networks.
- Encrypted database storage and isolated multi-tenant data segmentation.
- Role-based access controls (RBAC) ensuring internal staff only access data necessary for support duties.
- Continuous server health and incident monitoring on production endpoints.
12. Changes to This Privacy Policy
We may revise this Privacy Policy from time to time to maintain alignment with evolving statutory rules, judicial interpretations, and product enhancements. The updated version will be published on this page with a revised “Last Updated” date. We encourage visitors to review this policy periodically.
13. Contact Information
For any questions, requests, or privacy notices, please contact us at: