Privacy Policy For Meta and Whatsapp

Andro Buddy Technologies Private Limited

Effective Date: 13 September 2026
Last Updated: 13 September 2026

Andro Buddy Technologies Private Limited, referred to in this Policy as Andro Buddy Technologies, Andro Buddy Technologies Private Limited, ABTPL, ABT, we, us, or our, is committed to protecting personal information and business data processed through integrations with Meta technologies.

This Meta Platform and WhatsApp Business Privacy Policy explains how we collect, access, receive, use, process, store, disclose, secure, retain and delete information obtained through or in connection with Meta Platforms and related technologies.

This Policy applies specifically to our integrations and services involving, where applicable:

• Meta Platforms
• Meta Business Portfolio and Meta Business Manager
• Meta for Developers
• Facebook
• Facebook Pages
• Facebook Login and Facebook Login for Business
• Instagram and Instagram Business Accounts
• Messenger
• WhatsApp Business Platform
• WhatsApp Business Accounts
• Meta APIs, webhooks and related business tools

This Policy supplements our general Privacy Policy available at:

https://androtechbuddy.com/privacy-policy/

Where this Policy imposes more specific restrictions on information obtained through Meta or WhatsApp services, those specific provisions apply to such information.

1. About Andro Buddy Technologies

Legal Entity: Andro Buddy Technologies Private Limited

CIN: U47910MH2024PTC423697

Website:
https://androtechbuddy.com/

General Support and Privacy Requests:
[email protected]

Grievance Officer:
Lakshman Prajapati
Co-Founder & Grievance Officer
[email protected]

Telephone:
+91 788 755 7441

Address:
Andro Buddy Technologies Private Limited
1327/1 F-2, First Floor, C-Ward,
Laxmipuri, Kolhapur,
Maharashtra 416002, India

2. Scope of this Policy

This Policy applies where Andro Buddy Technologies receives or processes information through a Meta product, Meta API, Meta Business integration or the WhatsApp Business Platform.

It applies whether we provide:

• software-development services
• API integrations
• SaaS products
• WhatsApp Business Platform integrations
• messaging platforms
• CRM integrations
• customer-support solutions
• automation services
• Facebook or Instagram integrations
• Meta Business integrations
• technical implementation
• managed services
• maintenance or support services

Not every service operated by Andro Buddy Technologies uses Meta technologies.

Information unrelated to Meta integrations is governed primarily by our general Privacy Policy.

3. Our Role When Processing Meta Data

Our role depends on the relevant service and relationship.

When a business customer authorises us to access or process information from its Meta environment, Facebook Page, Instagram Business Account or WhatsApp Business Account, we generally act as a technology provider, service provider or Data Processor acting on behalf of that customer.

In those circumstances, the customer generally determines:

• why personal data is processed
• which individuals may be contacted
• what messages may be sent
• which Meta assets are connected
• what customer information is uploaded
• which integrations are enabled
• how long customer-specific information should be retained, subject to applicable requirements

The customer is generally responsible for providing legally required privacy notices and obtaining any required consents or permissions from its users.

Andro Buddy Technologies may separately act as a Data Fiduciary or independent business for limited information required for our own operations, including:

• customer administrator contact details
• account-management information
• security records
• technical-support information
• billing records
• contractual information
• communications with our business customers

4. Information We May Receive From Meta

The information available to us depends on the Meta products used, permissions granted, customer configuration and functionality requested.

We do not automatically receive every category listed below.

4.1 Meta Business Information

We may receive or process:

• Meta Business Account identifiers
• Meta Business Portfolio identifiers
• business names
• business verification information made available through authorised APIs
• business asset identifiers
• authorised administrator information
• account status information
• business configuration information

4.2 WhatsApp Business Account Information

Where a customer uses the WhatsApp Business Platform, we may process:

• WhatsApp Business Account ID
• WABA information
• business name
• WhatsApp business phone number
• phone number ID
• display name
• business profile information
• account status
• messaging configuration
• message-template information
• messaging-quality or account-status information made available through applicable APIs
• authorised configuration information

4.3 WhatsApp User and Messaging Information

Where necessary to provide the functionality requested by a customer, our systems may process:

• WhatsApp user telephone numbers
• WhatsApp identifiers
• message identifiers
• sender and recipient information
• message content
• message type
• timestamps
• conversation metadata
• message delivery status
• sent status
• delivered status
• read status
• failure or error status
• webhook events
• reply information
• customer-support communications
• attachments or media where supported and required by the service

We process such information only where required to provide the authorised service.

4.4 Message Template Information

We may process:

• template names
• template IDs
• language
• template categories
• approval status
• template text
• media configuration
• variables
• template components
• related Meta API responses

4.5 Facebook Information

Where a customer enables authorised Facebook functionality, we may receive information such as:

• Facebook Page IDs
• Page names
• app-scoped identifiers
• authorised business information
• Page permissions
• Page-related events
• Messenger-related information
• information required to provide the functionality authorised by the customer

4.6 Instagram Information

Where Instagram functionality is enabled, we may process:

• Instagram Business Account ID
• business account information
• authorised profile information
• connected Facebook Page information
• messaging events
• comments or interactions where supported and authorised
• media or content information where necessary for an authorised feature

4.7 Technical Information

We may process:

• Meta App IDs
• access tokens
• system-user information
• permission information
• webhook subscriptions
• API request information
• API responses
• event timestamps
• IP addresses
• diagnostic logs
• error logs
• security events
• integration configuration
• authentication information

Access tokens and other authentication credentials are treated as confidential security information.

5. Meta Permissions

Our applications may request Meta permissions required to provide particular services.

Depending on the approved integration, these may include permissions associated with:

• WhatsApp Business management
• WhatsApp Business messaging
• business management
• Facebook Pages
• Instagram Business functionality
• Messenger
• other Meta functionality approved for our application

We seek to request only permissions reasonably necessary for the functionality being provided.

Granting access to a Meta permission does not transfer ownership of your Meta account, business assets or data to Andro Buddy Technologies.

The data accessible through a permission will be used only for authorised purposes described in this Policy, our agreement with the customer and applicable Meta requirements.

6. How We Use Meta Platform Data

We may use authorised Meta data to:

• establish integrations
• authenticate business customers
• connect authorised Meta business assets
• connect WhatsApp Business Accounts
• connect authorised business telephone numbers
• send customer-authorised WhatsApp messages
• receive incoming WhatsApp messages
• provide messaging functionality
• process webhook events
• manage message templates
• retrieve messaging statuses
• provide customer support
• operate CRM integrations
• provide customer-requested analytics
• troubleshoot integrations
• maintain service availability
• investigate technical failures
• prevent abuse
• secure customer accounts
• maintain necessary audit records
• comply with applicable legal requirements
• comply with applicable Meta and WhatsApp requirements

We do not intentionally use Meta Platform Data for materially unrelated purposes.

7. WhatsApp Business Solution Data

Information received, generated or otherwise processed through use of the WhatsApp Business Platform may constitute Business Solution Data under applicable WhatsApp terms.

Where Andro Buddy Technologies has access to Business Solution Data on behalf of a customer, we process such information:

• on behalf of that customer
• pursuant to the customer’s instructions and authorisation
• for services requested by that customer
• in accordance with our contractual obligations
• subject to applicable Meta and WhatsApp requirements
• subject to applicable privacy and data-protection laws

We do not obtain ownership of customer Business Solution Data merely because the data passes through or is temporarily stored in systems operated by us.

8. Restrictions on Our Use of WhatsApp Business Data

Andro Buddy Technologies does not use WhatsApp Business Solution Data for unauthorised independent purposes.

In particular, we do not intentionally:

• sell Business Solution Data
• rent Business Solution Data
• trade Business Solution Data
• commercially distribute Business Solution Data to unrelated parties
• build unrelated advertising profiles from customer WhatsApp conversations
• combine conversations from unrelated customers to create cross-client behavioural profiles
• use customer contact lists for our independent marketing
• use WhatsApp conversations for surveillance
• use Business Solution Data for purposes unrelated to providing the authorised service

Business Solution Data may be shared with authorised service providers only where reasonably necessary to provide the requested service and where such processing is permitted by applicable Meta requirements and law.

9. Artificial Intelligence and Machine Learning

Certain services provided by Andro Buddy Technologies or our customers may include artificial-intelligence functionality.

We do not use WhatsApp Business Solution Data, including derived, anonymised or aggregated forms where prohibited by applicable WhatsApp requirements, to create, develop, train or improve unrelated general-purpose artificial-intelligence or machine-learning models.

We do not permit an AI provider acting for us to use customer WhatsApp Business Solution Data to train its general models where such use is prohibited by applicable WhatsApp requirements.

Where an authorised AI provider is used as a service provider for a customer workflow:

• access is limited to the functionality required
• the provider is expected to process data only for authorised purposes
• appropriate contractual and security restrictions apply
• applicable Meta and WhatsApp restrictions continue to apply

Where Meta or WhatsApp expressly permits customer-exclusive model fine-tuning or another specific AI processing activity, such processing may be carried out only where the relevant customer has authorised it and all applicable Meta, WhatsApp and legal requirements are satisfied.

10. We Do Not Sell Meta Platform Data

We do not sell personal information obtained through Meta APIs or the WhatsApp Business Platform to:

• data brokers
• advertisers
• unrelated marketing organisations
• unrelated businesses
• third parties seeking to build independent databases

Customer information remains subject to the customer’s instructions, applicable agreements and platform requirements.

11. No Unauthorised Advertising or Profiling

We do not use WhatsApp Business messages received on behalf of customers to independently create advertising audiences for Andro Buddy Technologies.

We do not use customer WhatsApp conversations to develop unrelated profiles of individual users.

We do not combine Business Solution Data from different customers to create unrelated behavioural, advertising or marketing profiles.

12. WhatsApp Opt-In and Messaging Requirements

Businesses using our WhatsApp Business Platform integrations are responsible for ensuring they have all notices, permissions, lawful bases and opt-ins required to communicate with their users.

Customers must use WhatsApp functionality in accordance with applicable:

• laws
• WhatsApp Business messaging requirements
• Meta requirements
• customer consent requirements

Our services must not be used knowingly for:

• spam
• unlawful unsolicited messaging
• deceptive communications
• fraudulent messaging
• purchased or unlawfully obtained contact databases
• prohibited products or services
• messaging that violates applicable WhatsApp policies

Where an individual withdraws consent, opts out, blocks a business or otherwise clearly requests that applicable communications stop, the relevant business is responsible for respecting that request in accordance with applicable law and platform requirements.

13. Customer Responsibility for Contact Data

Business customers determine which individuals they communicate with through the WhatsApp Business Platform.

Customers are responsible for ensuring that telephone numbers and other personal information supplied to our systems were obtained lawfully and may lawfully be used for the intended communication.

Customers must not upload contact databases that they do not have authority to use.

14. Sharing Meta Platform Data

Meta-related information may be shared only where reasonably necessary with:

• the business customer controlling the relevant account
• authorised users of that customer
• Meta
• WhatsApp
• authorised Andro Buddy Technologies employees
• authorised contractors
• cloud-infrastructure providers
• database providers
• security providers
• monitoring providers
• communication infrastructure providers
• other authorised subprocessors required to operate the requested service

Where appropriate, service providers that process personal data on our behalf are expected to be subject to confidentiality, security and data-processing requirements.

We do not authorise such providers to independently sell customer Meta data or use it for unrelated purposes.

15. Customer Data Separation

Where we provide services to multiple organisations, we maintain logical, application-level and organisational measures intended to separate one customer’s information from another customer’s information.

Depending on the relevant product, these safeguards may include:

• separate customer workspaces
• tenant identifiers
• access-control rules
• role-based permissions
• database access controls
• API authorisation
• account-level permissions

Authorised personnel are expected to access customer data only where required for legitimate support, operations, security or other authorised purposes.

16. Information Security

We maintain administrative, technical and organisational safeguards designed to protect Meta Platform Data and WhatsApp Business Solution Data against:

• unauthorised access
• unlawful processing
• disclosure
• alteration
• destruction
• loss
• misuse
• compromise

Depending on the relevant system, safeguards may include:

• encrypted communications
• TLS-protected network connections
• access controls
• role-based permissions
• least-privilege access
• multi-factor authentication
• secure credential management
• secrets management
• network controls
• logging
• monitoring
• backups
• vulnerability management
• patch management
• secure software-development practices
• incident-response procedures
• employee confidentiality obligations
• contractual security requirements for service providers

No internet-connected system can be guaranteed to be completely secure.

17. Access Tokens and Authentication Credentials

Meta access tokens, system-user credentials and similar authentication information are considered sensitive technical information.

We seek to:

• restrict access to authorised systems and personnel
• avoid publicly exposing credentials
• store credentials using appropriate security measures
• rotate or replace credentials where appropriate
• revoke credentials where access is no longer required
• remove credentials when an integration is permanently disconnected where appropriate

Customers must also protect credentials within systems under their control.

18. Data Retention

We retain Meta Platform Data only for as long as reasonably necessary to:

• provide the customer’s requested service
• maintain an active integration
• follow documented customer instructions
• troubleshoot problems
• maintain security
• prevent fraud
• comply with law
• comply with applicable Meta or WhatsApp requirements
• maintain required business or audit records

Retention periods may vary based on the category of information and product configuration.

We do not intentionally retain message content indefinitely merely because the information was processed through our systems.

Where message storage is part of a customer-requested product, the applicable retention period may be determined by product configuration, customer instructions and contractual requirements.

19. Disconnection and Termination

When a customer permanently disconnects an applicable Meta integration or terminates the relevant service, we may:

• disable access to the integration
• revoke or remove applicable credentials
• remove customer-specific integration configurations
• delete or de-identify eligible Meta Platform Data
• retain limited records where required for security, billing, contractual or legal purposes

Deletion will be performed subject to applicable retention requirements and technical backup cycles.

20. WhatsApp Business Account Ownership

A customer’s WhatsApp Business Account remains under the ownership or control of the applicable business customer, subject to Meta and WhatsApp requirements.

Andro Buddy Technologies does not claim ownership of a customer’s WABA merely because we:

• configured it
• connected it
• integrated it
• technically managed it
• provided software supporting it

The customer remains responsible for its business account and messaging activities.

21. WhatsApp Business Account Portability

Where applicable to our role as a service provider, if a customer requests to assume control of its WhatsApp Business Account or migrate it to another authorised service provider or system under the customer’s control, we will reasonably cooperate in accordance with applicable WhatsApp requirements.

Where the applicable WhatsApp terms require a defined transfer period, we will seek to complete the required assistance within that period.

After a completed transfer, we will relinquish control over the WABA where required and delete relevant WABA information from our systems except where:

• the customer instructs otherwise
• Meta or WhatsApp requires otherwise
• applicable law permits or requires continued retention

22. Meta Permission Revocation

Users and authorised business administrators may revoke permissions granted to our application through the relevant Meta account or business settings.

Revoking a permission may prevent some or all of the related functionality from operating.

Revoking permissions prevents future authorised access through those permissions but may not automatically delete information previously and lawfully received by our systems.

Where deletion is also required, a deletion request should be submitted using the process described below.

23. Data Deletion Requests

Individuals and customers may request deletion of eligible information associated with our Meta integrations.

Requests may be submitted to:

[email protected]

Use the subject:

Meta Data Deletion Request

Please provide information reasonably necessary for us to locate the relevant records, such as:

• your name
• business name
• email address associated with the service
• telephone number associated with the service
• relevant Meta Business Account or Business Portfolio, if known
• WhatsApp Business Account ID, if known
• Facebook Page, if relevant
• Instagram Business Account, if relevant
• product or service used
• description of the data you want deleted

Do not send us your Meta password, OTP, access token, API secret or other authentication credentials with a deletion request.

We may take reasonable steps to verify the identity and authority of the requester.

After verification, eligible information will be deleted, anonymised, de-identified or otherwise restricted as required by applicable law and customer instructions.

24. Exceptions to Deletion

We may retain limited information despite a deletion request where continued retention is legally permitted or required, including for:

• compliance with law
• fraud prevention
• cybersecurity
• incident investigation
• accounting
• billing
• taxation
• dispute resolution
• contractual records
• establishment or defence of legal claims
• regulatory requirements

Where data is retained under an exception, we will not use that information for unrelated purposes merely because it remains stored.

25. Backup Data

Deletion from active systems may not immediately remove information contained in protected backup systems.

Backup information may remain until the relevant backup expires, is overwritten or is securely deleted according to our applicable backup-retention process.

Information retained solely in backups remains subject to applicable security safeguards and will not ordinarily be restored except for legitimate disaster-recovery, security or business-continuity purposes.

26. Meta User Data Deletion Instructions

For Meta application purposes, users may request deletion of information obtained through an authorised Meta connection by contacting:

[email protected]

Subject:

Meta Data Deletion Request

Users should provide sufficient information for us to identify the relevant account or integration.

Where applicable, users may also remove or revoke our application’s access through the privacy, application or business-integration settings provided by Meta.

Removing our application may stop future access to Meta information.

Where a person also requires historical information stored in our systems to be erased, the individual should separately submit a deletion request as described above.

We may provide a dedicated public Data Deletion Instructions page for Meta applications at:

https://androtechbuddy.com/data-deletion

27. Requests From End Users of Our Customers

Where we process Meta or WhatsApp information solely on behalf of a business customer, that customer may be the primary party responsible for an end user’s privacy request.

If an end user contacts us directly, we may:

• identify the relevant customer
• refer the individual to that customer
• forward the request to the customer where appropriate
• assist the customer in fulfilling the request
• act on the customer’s documented instructions

This does not limit legal obligations that apply directly to Andro Buddy Technologies.

28. International Processing

Meta Platform Data may be processed using infrastructure located in India or other jurisdictions where our authorised service providers or Meta entities operate.

Where international processing occurs, we seek to comply with applicable Indian data-protection requirements and any restrictions imposed by competent authorities.

Where required, appropriate technical, organisational or contractual safeguards may be used.

29. Personal Data Breaches and Security Incidents

We maintain procedures for identifying, investigating, containing and responding to security incidents.

If an incident affects Meta Platform Data or WhatsApp Business Solution Data, we will take appropriate steps to:

• investigate the incident
• limit further unauthorised access
• mitigate reasonably identifiable risks
• restore affected services where appropriate
• preserve necessary records
• notify affected customers where required
• notify applicable authorities where legally required
• notify Meta or WhatsApp where applicable platform requirements require notification

Where Andro Buddy Technologies acts as a Data Processor, we will reasonably cooperate with the affected customer regarding applicable incident-response obligations.

30. Compliance With Indian Privacy Law

Where applicable, our processing of personal data is intended to comply with Indian privacy, data-protection, information-technology and cybersecurity requirements, including, as applicable and in force from time to time:

• the Digital Personal Data Protection Act, 2023
• the Digital Personal Data Protection Rules, 2025
• the Information Technology Act, 2000
• applicable rules issued under the Information Technology Act
• applicable CERT-In directions
• other applicable Indian laws

The commencement and applicability of particular statutory provisions may differ over time.

31. Compliance With Meta and WhatsApp Requirements

Our use of Meta and WhatsApp technologies is subject to applicable terms, policies, technical documentation and requirements issued by Meta and WhatsApp from time to time.

These may include, as applicable:

• Meta Platform Terms
• Meta Developer requirements
• applicable Meta Terms for WhatsApp Business
• WhatsApp Business Platform terms
• WhatsApp Business Solution Terms
• WhatsApp Business Messaging requirements
• WhatsApp terms applicable to service providers
• WhatsApp Business Data Processing Terms
• applicable security terms
• applicable product and API documentation

If a Meta or WhatsApp requirement changes in a manner that affects a feature we provide, we may modify, restrict, suspend or discontinue the affected functionality where reasonably necessary to maintain compliance.

32. No Representation of Meta Ownership or Endorsement

Andro Buddy Technologies is an independent company.

Nothing in this Privacy Policy should be interpreted as indicating that Meta, Facebook, Instagram or WhatsApp owns Andro Buddy Technologies.

Any designation, programme membership, partnership, technology-provider status or similar relationship with Meta will be represented publicly only to the extent officially granted and permitted by Meta.

Meta, Facebook, Instagram, Messenger and WhatsApp are trademarks of their respective owners.

33. Changes to this Meta Privacy Policy

We may update this Policy where:

• our Meta integrations change
• our WhatsApp services change
• Meta changes its APIs
• Meta or WhatsApp updates its policies or terms
• our data-processing practices change
• applicable laws or regulations change
• security requirements change

The latest version will be published with an updated Last Updated date.

Where legally required, we may provide additional notice or obtain consent before applying a materially different processing purpose.

34. Grievance Redressal

For privacy concerns relating to our Meta or WhatsApp integrations, please contact:

General Privacy and Data Requests:
[email protected]

If your concern requires escalation, contact our Grievance Officer.

Grievance Officer

Name: Lakshman Prajapati
Designation: Co-Founder & Grievance Officer
Email: [email protected]
Telephone: +91 788 755 7441

Address:
Andro Buddy Technologies Private Limited
1327/1 F-2, First Floor, C-Ward,
Laxmipuri, Kolhapur,
Maharashtra 416002, India

We will review and respond to privacy grievances in accordance with applicable legal requirements.

35. Contact Us

For questions relating to this Meta Platform and WhatsApp Business Privacy Policy, contact:

Andro Buddy Technologies Private Limited

CIN: U47910MH2024PTC423697

Website:
https://androtechbuddy.com/

General Privacy Requests:
[email protected]

Grievance Officer:
Lakshman Prajapati
Co-Founder & Grievance Officer
[email protected]

Telephone:
+91 788 755 7441

Address:
1327/1 F-2, First Floor, C-Ward,
Laxmipuri, Kolhapur,
Maharashtra 416002, India

This Policy should be read together with our general Privacy Policy and any applicable product-specific terms, customer agreements, Data Processing Agreements and Data Deletion instructions.