Privacy Policy

1. Introduction

Actionpackd ("we", "our", "us") operates the website actionpackd.com and provides WhatsApp messaging automation services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information that you provide directly to us:

• Account information (name, email address, phone number, business name)
• WhatsApp Business API credentials (access tokens, phone number IDs)
• Contact lists uploaded for messaging campaigns
• Message content and templates
• Usage data and analytics

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide and maintain our messaging platform
• To send WhatsApp messages on your behalf through the Meta Cloud API
• To process your account registration and manage your subscription
• To communicate with you about service updates and support
• To monitor and analyze usage patterns to improve our services
• To detect, prevent, and address technical issues or fraud

4. Data Sharing and Disclosure

We may share your information with:

• Meta Platforms, Inc. — to facilitate WhatsApp message delivery via the Cloud API
• Service providers — hosting (Railway, Vercel), database (Neon), and analytics providers who assist in operating our platform
• Legal requirements — when required by law, regulation, or legal process

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data, including encryption of sensitive credentials (AES-256-GCM), secure HTTPS connections, and access controls. However, no method of electronic transmission or storage is 100% secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Message logs and webhook events are retained for up to 90 days for operational purposes. You may request deletion of your account and associated data at any time.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

8. WhatsApp and Meta Integration

Our platform integrates with Meta's WhatsApp Cloud API. When you use our service to send messages, your message content and recipient phone numbers are transmitted to Meta for delivery. Meta's use of this data is governed by their own privacy policy. We only access your WhatsApp Business Account data with your explicit authorization.

9. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Vercel Analytics) to understand how our service is used. You can control cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through our website at actionpackd.com or email the grievance officer at privacy@actionpackd.com.

12. Lead enquiry notice

This section is the notice for people who contact Actionpackd about our own products (website form, WhatsApp, events, partners, or a printed code). It does not replace the account terms above for customers who use the platform.

• Who we are. Actionpackd (legal entity name to be confirmed), Chennai, Tamil Nadu.
• Data we collect. Name, WhatsApp number, email (optional), company, role, city, product interest, messages you send us, the code or link you used, and consent records (version, time, and IP address for the web form).
• Purposes. (1) Respond to your enquiry and provide demos or quotes. (2) With your optional consent, send product updates and offers on WhatsApp or email. (3) Attribute referrals to partners for commission. (4) Comply with law.
• Sharing. Service providers acting for us: Meta/WhatsApp, Google (including the leads spreadsheet), hosting, payment, and AI model or tool providers. A referring partner sees only your name, status, and deal outcome. We do not sell personal data.
• Version. CN-2026-09-v1.

13. WhatsApp messaging consent

If you message us on WhatsApp, or submit the interest form, you agree that Actionpackd may contact you on WhatsApp, phone, or email about that enquiry. Marketing updates are separate and optional. They are off unless you tick the updates box or tap the matching button in chat. We do not upload bought lists or visiting-card numbers into marketing templates without that consent.

14. Withdrawal and opt-out

You can withdraw as easily as you gave consent. Reply STOP (or UNSUBSCRIBE) on WhatsApp, use a Stop updates button, or email privacy@actionpackd.com. An opt-out stops marketing. You can still message us. Marketing templates start again only after an explicit START and a fresh consent.

15. Retention

• Lead with no engagement: 12 months from last touch, then delete or anonymise.
• Opted-out lead: keep the phone number, opt-out flag, and timestamp so we can honour the opt-out. Delete the rest within 30 days.
• Lost lead that engaged: 24 months from last touch.
• Customer: for the contract and the period tax or accounting law requires.
• Consent records: for the life of the lead plus the applicable limitation period.
• Sales chat transcripts: 12 months, then a short note. Raw webhook logs: 30 days. Access and security logs: at least 1 year.
• Erasure requests: target within 30 days, keeping only a suppression record.

16. Your rights under the DPDP Act

You may ask for a summary of your personal data, correction, erasure, withdrawal of consent, grievance redressal, and nomination. Write to the grievance officer or reply on WhatsApp. You may also complain to the Data Protection Board of India. We aim to acknowledge grievances within 48 hours and resolve them within 15 days, and in any case within the period the law prescribes.

17. Children

The interest form asks you to confirm you are 18 or older. We do not knowingly market to children. If we learn someone is under 18, we will not send marketing and will delete the lead after any reply needed to close the chat. A cohort for minors would need a separate parental-consent flow, which we do not run today.

18. Partners and processors

Partners may refer only people who agreed to be contacted by Actionpackd. We share the minimum status needed to calculate a commission. Processors (Meta, Google, hosting, payments, and model providers) act on our instructions. Data may be processed outside India by those providers, except where the Government of India restricts a transfer.

19. Grievance officer

Grievance Officer. Email privacy@actionpackd.com. Response within 15 days (and within the maximum period under the DPDP Rules).

20. Breach notice

If a personal-data breach is likely to affect you, we will tell you without delay what happened, the likely impact, what we have done, and how to reach us. We will also inform the Data Protection Board of India without delay and provide the detailed report the Rules require within 72 hours.