Who is responsible for what
Under India's Digital Personal Data Protection Act, your business decides why and how your customers' data is used, so for that data you are the data fiduciary and QuickSamvaad is your data processor. We handle your customers' data only to run QuickSamvaad for you. For your own account details, we are the fiduciary. Our Privacy Policy has the full picture.
How your data is protected
- Separate by design. Every workspace's data is isolated in the database itself, not just in the app, so one business can never read another's.
- Encrypted secrets. The access QuickSamvaad holds for your WhatsApp account, and your webhook signing secrets, are stored encrypted.
- Keys we can't read. API keys and passwords are stored only as one-way fingerprints. A key is shown once, when you create it.
- Encrypted in transit. The app, the API and webhooks use https only.
- Media kept safely. Images, documents and voice notes customers send are stored as soon as they arrive, because Meta's links to them expire, and are only served to signed-in members of your workspace.
- Logs without personal data. Our system logs don't record message text or phone numbers.
Who can see what
- Roles decide what each member can see and do; see Invite your team and choose roles. Only owners and admins can export or erase contacts.
- Removing or disabling a member ends their access to the workspace at once.
- Changes in your workspace, such as settings, members, campaigns, templates and contacts, are recorded in an audit log that can't be edited or deleted.
- If our support team needs to look inside your workspace to help, access is time-limited (an hour at most), needs a recorded reason, and every action is written to your audit log.
Meeting your DPDP duties
| Your duty | How QuickSamvaad helps |
|---|---|
| Get valid consent before marketing | Marketing templates only go to contacts with a recorded opt-in; unknown counts as no. |
| Prove consent | Every opt-in and opt-out is kept in a permanent history with its source, evidence and time. |
| Let people withdraw consent easily | STOP and its Hindi and Hinglish equivalents opt people out automatically, with a confirmation. |
| Answer access requests | Owners and admins can export everything held about a contact as a file. |
| Erase data on request | Erasing a contact wipes their number, name, email, attributes, message content and media, while keeping anonymous counts in your reports. |
Data shared with Meta
WhatsApp messages travel through Meta's WhatsApp Business Platform, so Meta processes the messages you send and receive under its own terms. QuickSamvaad never shares your contacts with Meta beyond what is needed to deliver a message.
Report a concern
To report a security issue or raise a privacy grievance, write to us. Please include what you found and how to reproduce it, and don't access other people's data while testing.
- Grievance Officer
- TODO: Grievance Officer name
- Grievance email
- TODO: Grievance Officer email
- Support email
- hello@quicksamvaad.com