Privacy Policy
NitiGrow ("we", "our", "us") is a product of Websbaba Technologies Private Limited. This Privacy Policy explains how we collect, use, and protect your information.
NitiGrow is in early access ahead of its planned public launch. Sections 2 to 9 describe how personal data is handled when an early-access workspace is provisioned. Before that point, the only personal data we process is what this website collects — set out in section 1 immediately below.
1. This Website (nitigrow.in)
This is what happens when you visit nitigrow.in today, before the platform launches.
- Waitlist form: the name and email you enter are sent to an Amazon API Gateway endpoint and processed by an AWS Lambda function in the Asia Pacific (Mumbai) region,
ap-south-1. The entry is stored in Amazon S3, a short-lived record is written to Amazon DynamoDB to rate-limit repeat submissions, and we are notified by Amazon SNS. We use it only to email you when NitiGrow opens for signup. - Contact form: the name, business name, email, phone number, topic and message you enter are sent to our API so we can reply. If that request does not go through, the page instead opens WhatsApp with your message pre-filled — nothing reaches us unless you then tap Send in WhatsApp, and at that point the message is handled by WhatsApp under Meta's privacy policy, not this one.
- Hosting: the site is served from Amazon S3 through Amazon CloudFront. As with any web server, requests may be logged, including your IP address, user agent and the page requested.
- Fonts: the page loads typefaces from Google Fonts (
fonts.googleapis.comandfonts.gstatic.com). Your browser contacts Google's servers directly to fetch them, so your IP address and user agent are disclosed to Google, governed by Google's privacy policy. We do not control and do not receive that data. - Browser storage: we store two small values in your own browser — whether you have joined the waitlist, and whether you have dismissed the launch popup this session. They stay on your device, are not cookies, are never sent to us, and are cleared when you clear site data.
- No analytics or advertising: this site currently runs no analytics, advertising or tracking scripts, and sets no tracking cookies. If that changes, we will update this policy before turning anything on.
How long we keep it: waitlist entries are kept until launch and for up to six months afterwards, so we can tell you signups are open, and then deleted. Contact-form enquiries are kept for up to 24 months so we have a record of the conversation. You can ask us to delete either at any time by emailing privacy@nitigrow.in, and we will do so within 30 days.
2. Information We Collect (Platform)
- Account Information: Business name, administrative email address, phone number, GSTIN (optional/for tax invoicing), and password credentials when you register.
- WhatsApp Business Data: Messages sent and received through your connected WhatsApp Business Account (WABA), recipient phone numbers, message statuses (sent, delivered, read), and approved message templates.
- Usage & Telemetry Data: Pages visited, features used, campaign delivery metrics, error logs, and device/browser details.
- Payment Information: Processed securely through our RBI-licensed payment aggregator partner, Cashfree Payments. We do not store credit or debit card numbers, CVVs, or UPI PINs on our servers.
3. How We Use Your Information
- To provision, operate, and maintain your NitiGrow multi-tenant workspace
- To transmit and synchronize WhatsApp messages on your behalf via Meta's official Cloud API
- To deliver critical transactional communications (password resets, billing receipts, security alerts)
- To provide optional AI-powered reply suggestions and workflow automation
- To prevent abuse, detect fraudulent messaging, and comply with applicable statutory laws
4. WhatsApp & Meta Ecosystem
NitiGrow integrates directly with Meta's official WhatsApp Cloud API. By linking your WhatsApp Business Account, you acknowledge and agree to abide by Meta's WhatsApp Business Policy, Commerce Policy, and Terms of Service. You are strictly responsible for obtaining prior verifiable opt-in consent from all recipient contacts before transmitting broadcast templates.
5. Data Sharing & Third-Party Processors
We do not sell, rent, or monetize your personal or business data. We share information strictly with verified subprocessors necessary to deliver our services:
- Meta Platforms: to transmit, deliver, and manage WhatsApp messages, templates, and webhooks via the official Cloud API.
- Cashfree Payments: our payment gateway aggregator, for processing subscription billing, UPI autopay mandates, and approved refunds.
- Amazon Web Services (AWS): cloud infrastructure hosted in the Asia Pacific (Mumbai) region (
ap-south-1), with encryption at rest and in transit. - MongoDB Atlas: secure multi-tenant database clusters, encrypted at rest with AES-256 and isolated by tenant ID.
- AI Model Inference Providers (Google Cloud & Anthropic): When you choose to utilize AI smart replies, copywriting tools, or chatbot flows, message context is processed via enterprise APIs with Google Gemini or Anthropic Claude. All AI data transmission is encrypted over TLS 1.3, processed ephemerally, and is never used to train public foundation models.
- Google Fonts: your browser fetches typography directly from Google's content servers, subject to Google's standard privacy terms.
6. Data Security
We safeguard your data through robust industry-standard safeguards: Meta WhatsApp system tokens are encrypted using AES-256-GCM; all communications occur over forced HTTPS/TLS; multi-tenant database access is restricted by cryptographic workspace boundaries; and our systems undergo regular security reviews in accordance with OWASP standards.
7. Data Retention & DPDP Act, 2023 Compliance
We process personal data in strict compliance with India's Digital Personal Data Protection (DPDP) Act, 2023:
- Data Fiduciary vs. Data Processor: For workspace administrative accounts and billing details, Websbaba Technologies operates as a Data Fiduciary. For end-customer contact lists, numbers, and message logs uploaded by your business, you act as the Data Fiduciary and NitiGrow operates strictly as a Data Processor executing actions under your direction.
- Retention Period: Active account data is retained for the duration of your subscription plus 30 days after account termination, after which it is permanently purged from active databases and rotated out of encrypted backups.
- Billing Retention: Statutory invoices and financial transaction ledgers are retained for the legally mandated period required by Indian tax laws (GST / Income Tax), after which they are deleted.
8. Your Rights & Self-Service Tools
Under the DPDP Act 2023 and applicable privacy standards, you have the right to:
- Access & Export: Download and export your complete contact lists and conversation histories from Settings → Privacy & Data.
- Correction: Update inaccurate business, billing, or contact records from your workspace profile.
- Erasure: Request total deletion of your account and associated assets at any time via our self-service Account Deletion Page or by emailing privacy@nitigrow.in. Requests are completed within 30 days.
- Consent Withdrawal: Revoke WhatsApp permissions or disconnect your Meta Business Account at any time directly through Settings.
9. Cookies & Browser Storage
This marketing website sets zero tracking or advertising cookies. It stores only two functional session items in your local browser storage (waitlist submission state and banner dismissal), which remain on your device and are never transmitted to third parties.
The authenticated NitiGrow dashboard (app.nitigrow.in) uses strictly essential, encrypted HTTP-only session cookies to authenticate logged-in users. We do not use third-party behavioral advertising cookies.
10. Grievance Officer & Redressal Mechanism
In accordance with the DPDP Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, if you have any questions, concerns, or grievances regarding privacy or data handling, you may reach our designated officer:
- Designation: Data Protection & Grievance Redressal Officer
- Company: Websbaba Technologies Private Limited
- Address: Office No. FF29, First Floor, Ajnara Arcade, Crossing Republik, Ghaziabad, Uttar Pradesh 201016, India
- Email: privacy@nitigrow.in (cc: grievance@nitigrow.in)
- Statutory SLA: Acknowledgment within 24 hours; resolution within 15 days of grievance receipt.
If you are not satisfied with our grievance resolution, you may have the right to submit a complaint to the Data Protection Board of India (DPBI) in accordance with the procedures established under the DPDP Act, 2023.