Privacy Policy

1. Who We Are

Stacko Ventures LLP (“Stacko Digital,” “we,” “us,” or “our”) operates www.stackodigital.com and the Stacko WhatsApp Marketing Platform at app.stackodigital.com. We are registered in India and subject to applicable Indian data protection laws.

This Privacy Policy explains how we collect, use, share, and protect information when you use our website and platform services.

2. Information We Collect

Information you provide directly:

• Name, email address, phone number when you register or contact us
• Business details (name, WhatsApp Business number, industry) when setting up an account
• Payment information (processed securely by our payment provider; we do not store card details)
• Content you upload such as message templates, media files, and contact lists

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps
• Device information: operating system, screen resolution
• Cookies and similar tracking technologies (see Section 10)
• WhatsApp message metadata (delivery status, read receipts) via the Meta WhatsApp Business API

Information from third parties:

• Meta / Facebook: business account details, phone number verification status, messaging capacity via Meta Business Platform APIs
• Integrated platforms (e.g., e-commerce, CRM) when you connect them to our platform

3. How We Use Your Information

• Providing, operating, and improving our platform and services
• Processing and delivering WhatsApp campaigns and automated messages on your behalf
• Sending transactional notifications (account alerts, billing receipts, security notices)
• Responding to support requests and inquiries
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations and regulatory requirements
• Sending marketing communications about our services (you may opt out at any time)
• Conducting analytics to understand platform usage and improve features

4. Meta Platform Data Usage

Our platform integrates with Meta APIs (WhatsApp Business API, Facebook Login for Business, and related Meta Business Platform services). When you connect your Meta Business account:

• We access data only to the extent necessary to provide the features you have authorised
• Data obtained through Meta APIs is used solely to operate and improve our platform services on your behalf
• We do not sell, transfer, or use Meta platform data for advertising or to build independent data products
• We do not use Meta platform data to train machine-learning models unrelated to the service you requested
• Access tokens and credentials are stored securely and transmitted only over encrypted connections
• If you disconnect your Meta account, we stop accessing new data immediately and delete stored Meta-derived data within 30 days

Our use of Meta platform data complies with the Meta Platform Terms and applicable Meta usage policies.

5. WhatsApp Messaging: Opt-In and Opt-Out

Our platform enables businesses to send WhatsApp messages to their customers. As a business using our platform, you are responsible for ensuring:

• Opt-in: Your end-customers have given explicit, informed consent to receive WhatsApp messages from your business before you add them to any campaign
• Opt-out: Every message campaign must include a clear and easy mechanism for recipients to unsubscribe (e.g., replying “STOP”)
• Honour opt-outs immediately: You must cease messaging any contact who opts out and remove them from future campaigns without delay
• Consent records must be maintained and made available if requested

End-customers who wish to stop receiving WhatsApp messages should reply STOP to any message, or contact the business directly.

6. Sharing Your Information

We do not sell your personal data. We may share information with:

• Service providers: Cloud hosting (Supabase, Vercel), payment processors, email and SMS providers who process data on our behalf under strict confidentiality obligations
• Meta Platforms: As required to deliver WhatsApp messaging services via the WhatsApp Business API
• Legal authorities: When required by law, court order, or to protect our legal rights
• Business transfers: In the event of a merger, acquisition, or sale of assets, with notice provided to you

7. Data Retention

• Account data is retained for as long as your account is active plus 90 days after closure
• WhatsApp message content and logs are retained for up to 30 days, after which they are automatically deleted unless you export them
• Billing and transaction records are retained for 7 years as required by Indian tax law
• You may request earlier deletion of personal data (see Section 9)
• Data obtained via Meta APIs is deleted within 30 days of account disconnection

8. Security

We implement industry-standard technical and organisational measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encryption at rest for sensitive data stored in our databases
• Role-based access control limiting who can access customer data
• Regular security reviews and vulnerability assessments

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@stackodigital.com.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing for direct marketing purposes
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise these rights or to request account deletion, email support@stackodigital.com with the subject line “Data Request.” We will respond within 30 days.

10. Cookies

We use cookies and similar technologies to:

• Keep you logged in to the platform (essential cookies)
• Remember your preferences
• Analyse website traffic and usage patterns (analytics cookies)

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

11. Children's Privacy

Our platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where required, notify you by email or in-platform notice. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

13. GDPR Legal Basis (EEA / UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract: Processing necessary to perform our agreement with you (delivering platform services)
• Legitimate interests: Security monitoring, fraud prevention, and service improvement
• Consent: Marketing communications and non-essential cookies
• Legal obligation: Compliance with applicable laws and regulations