Summary: CampaignPlus ("we", "us", "our") operates campaignplus.in and app.campaignplus.in. We collect only what's necessary to run our WhatsApp Business API platform. We never sell your personal data. This policy applies to all users — business owners, team members, and end-customer contacts managed through our platform.
1. Information We Collect
Information You Provide Directly
When you register or use our services, we collect:
- Account information: Full name, business name, email address, phone number, and encrypted password
- Business details: GST number, business address, industry type, and company size
- WhatsApp Business details: WhatsApp Business Account (WABA) ID, phone number, and display name
- Contact data: Names, phone numbers, and custom attributes of contacts you import for broadcasting
- Payment information: Billing address processed via Razorpay/PayU — we do not store card numbers
- Support communications: Messages, emails, and chat transcripts when you contact our team
Information Collected Automatically
- Usage data: Pages visited, features used, campaigns created, and time spent on the platform
- Device & browser data: IP address, browser type, operating system, and device identifiers
- Log data: Server logs including timestamps, API requests, and error reports
- Analytics data: Campaign delivery rates, read rates, click-through rates, and conversion events
Information from Third Parties
- Meta / WhatsApp: Message delivery status, read receipts, and opt-out signals
- Razorpay / PayU: Payment confirmation, transaction IDs, and refund status
- Shopify / WooCommerce: Order data, customer details, and product catalog information when you connect your store
- Zapier / HubSpot / Salesforce: Contact and CRM data synced via integrations you enable
2. How We Use Your Information
- Service delivery: Providing, operating, and maintaining the CampaignPlus platform
- Account management: Creating accounts, authenticating logins, and managing team access
- Campaign execution: Sending WhatsApp broadcasts, chatbot messages, and notifications on your behalf
- Analytics & reporting: Generating campaign performance reports and read-rate dashboards
- Billing & payments: Processing subscriptions and generating GST-compliant invoices
- Customer support: Responding to queries and providing onboarding assistance
- Product improvement: Analysing usage patterns to improve features and develop new ones
- Communication: Sending product updates, security alerts, and (with consent) marketing communications
- Legal compliance: Complying with Indian and international laws and Meta's WhatsApp Business API policies
3. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We share data only in these circumstances:
- With your consent: When you authorise integrations with third-party services
- Service providers: Trusted vendors who assist us (cloud hosting, email delivery, analytics), bound by confidentiality agreements
- Meta / WhatsApp: Business info and message templates shared as required to operate the API on your behalf
- Payment processors: Billing data shared with Razorpay and PayU solely for payment processing
- Legal requirements: When required by Indian law, court orders, or government authorities
- Business transfers: In the event of a merger or acquisition (you will be notified in advance)
- Safety: To protect the rights, property, or safety of CampaignPlus, users, or the public
4. WhatsApp & Meta Data
CampaignPlus is an Official WhatsApp Business Solution Provider (BSP). By using our platform, you acknowledge:
- Your use is subject to Meta's WhatsApp Business Policy and Meta's Terms of Service
- Message content and delivery data are processed via Meta's infrastructure and subject to Meta's own privacy policy
- All contacts you broadcast to must have opted in to receive WhatsApp messages. You are responsible for ensuring this compliance
- CampaignPlus processes WhatsApp data as a Data Processor acting on your instructions. You remain the Data Controller for your customer contacts
- Opt-out requests from WhatsApp users are processed automatically within 24 hours
5. Data Storage & Security
- Encryption: All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Infrastructure: Hosted on SOC 2-compliant cloud infrastructure with data centres in India and Singapore
- Access controls: Role-based access (RBAC) ensures only authorised personnel access customer data
- Passwords: Hashed using bcrypt with salt — never stored in plain text
- Monitoring: 24/7 security monitoring, intrusion detection, and automated threat response
- Backups: Regular encrypted backups with tested recovery procedures
If you discover a security vulnerability, contact security@campaignplus.in immediately.
6. Cookies & Tracking Technologies
- Essential cookies: Required for login sessions and core platform functionality — cannot be disabled
- Analytics cookies: Google Analytics and internal analytics to understand platform usage (can be disabled)
- Preference cookies: Remembering dashboard settings and display preferences
- Marketing cookies: Measuring effectiveness of advertising campaigns on campaignplus.in (opt-out available)
Manage cookies through your browser settings. Disabling essential cookies will affect platform functionality.
7. Payments & Financial Data
All payments are processed by Razorpay and PayU — PCI-DSS compliant payment gateways.
- We do not store credit/debit card numbers, CVV codes, or UPI PINs on our servers
- Payment tokenisation is used for recurring billing so you never need to re-enter card details
- Transaction IDs, payment amounts, and billing status are stored for invoice generation and dispute resolution
- GST-compliant invoices are generated automatically and stored for 7 years as required by Indian tax law
8. Your Rights & Choices
Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have these rights:
- Right to access: Request a copy of your personal data
- Right to correction: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to withdraw consent: Withdraw consent for marketing communications at any time
- Right to portability: Request your data in a machine-readable format (CSV/JSON)
- Right to grievance redressal: Lodge a complaint with our Grievance Officer
Email privacy@campaignplus.in with subject "Data Rights Request". We respond within 30 days.
9. Data Retention
- Active account data: Retained for the duration of your subscription and 90 days after account closure
- Campaign & message logs: 12 months from the campaign date
- Financial records: 7 years as required by the Income Tax Act, 1961 and GST regulations
- Support tickets: 3 years from closure
- Contact data (end-customers): Retained while your account is active; deleted within 30 days of closure
10. Children's Privacy
CampaignPlus is a business platform for users aged 18 and above. We do not knowingly collect information from persons under 18. If you believe a minor has provided us data, contact privacy@campaignplus.in and we will delete it promptly.
11. Changes to This Policy
When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Email all registered account holders at least 14 days before the change takes effect
- Display a prominent notice on the CampaignPlus dashboard
Continued use of the platform after the effective date constitutes acceptance of the revised policy.
12. Contact Us
For questions, concerns, or data requests regarding this Privacy Policy:
If unsatisfied with our response, you may lodge a complaint with the Data Protection Board of India under DPDPA 2023.