Privacy Policy
This policy explains how Darvik Innovative Private Limited (“Darvik”, “we”, “us”) collects, uses, stores and shares personal data. It covers our website, our products, and the messaging automation services we operate for business clients.
1. Who we are
Darvik Innovative Private Limited, CIN U70200RJ2023PTC088847, a private limited company incorporated in India with its registered office at Flat 101, Plot 97–98, Narayan Vihar-B, Mansarovar, Jaipur 302020, Rajasthan, India.
For any question about this policy or your personal data, write to privacy@darvikinnovative.com.
2. Two different roles we play
The distinction below decides who is responsible for your data and who you should approach.
Where Darvik decides — we are the Data Fiduciary
For visitors to this website, people who contact us, and our own business clients' account information, we determine why and how data is processed.
Where our client decides — we are a Data Processor
When we operate messaging automation for a business client, that client decides who is messaged, what is said, and why. We process that data only on their instructions and under contract. If you received a WhatsApp message sent through our platform, the business that contacted you is responsible for that data. We will direct any request we receive to that business.
3. What we collect
Website visitors
- Information you submit voluntarily — name, email, phone number, company, and your message.
- Basic technical data — IP address, browser and device type, pages viewed, and referring page.
Client accounts
- Business details — legal name, registered address, tax registration, and authorised contacts.
- Account credentials and access tokens needed to operate the services on the client's behalf.
- Billing information and transaction records.
Data processed on behalf of clients
- Contact identifiers of the client's customers, including WhatsApp phone numbers and profile names.
- Message content and metadata — the text and media exchanged, timestamps, and delivery status.
- Information a customer supplies during an automated conversation, as configured by the client.
4. Why we process it
- To provide the services — delivering and receiving messages, running automated flows, and reporting on delivery.
- To operate and secure our systems — monitoring, debugging, fraud and abuse prevention, and maintaining audit logs.
- To communicate with you — responding to enquiries and sending service notices.
- To meet legal obligations — accounting, tax, and lawful requests from authorities.
Where the law requires consent, we process personal data on the basis of consent obtained from the individual. For messaging sent on a client's behalf, obtaining and recording that consent is the client's responsibility, and our contracts require it.
5. WhatsApp and Meta
Our messaging services are built on the WhatsApp Business Platform operated by Meta Platforms, Inc. Messages sent or received through the services pass through Meta's infrastructure and are additionally governed by Meta's and WhatsApp's own terms and privacy policies. We do not control Meta's processing of that data.
6. Sharing and disclosure
We do not sell personal data, and we do not share it for advertising. We disclose data only:
- to service providers who help us operate — cloud hosting, communications infrastructure, and analytics — each bound by contract and permitted to use the data only to provide their service;
- to the business client on whose behalf we processed it;
- where required by law, court order, or a lawful request from a public authority;
- to a successor in interest in connection with a merger, acquisition or reorganisation, subject to this policy.
7. Where data is stored
Our systems are hosted with third-party cloud providers, and data may be stored or processed outside India. Where that happens we take steps to ensure the transfer is lawful and that the data remains protected to the standard described here. Clients with specific data residency requirements should raise them before onboarding.
8. How long we keep it
- Website enquiries — up to 24 months from last contact.
- Client account and billing records — for the life of the account and then as long as tax and company law require.
- Message content processed for clients — for the retention period agreed with that client, and deleted or returned within 30 days of the account closing unless the law requires otherwise.
- Security and audit logs — up to 12 months.
9. Security
We apply access controls on a need-to-know basis, encryption in transit, encryption at rest for credentials and access tokens, logging of administrative access, and regular review of permissions. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires.
10. Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask us to:
- confirm what personal data of yours we hold and give you access to it;
- correct data that is inaccurate, incomplete or out of date;
- erase data we no longer have a lawful reason to keep;
- withdraw consent, where consent is the basis for processing;
- nominate another person to exercise these rights on your behalf.
Write to privacy@darvikinnovative.com. We will respond within the period the law allows. Where we hold the data as a processor for a client, we will forward your request to that client and tell you we have done so.
11. Grievance redressal
If you are not satisfied with how we have handled your data or your request, contact our Grievance Officer:
Grievance Officer, Darvik Innovative Private Limited
Flat 101, Plot 97–98, Narayan Vihar-B, Mansarovar, Jaipur 302020, Rajasthan, India
grievance@darvikinnovative.com
We acknowledge grievances within 7 working days and aim to resolve them within 30 days.
12. Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal data of children. If you believe we have, contact us and we will delete it.
13. Cookies
This website uses only the cookies necessary to serve the site and, where enabled, basic analytics to understand traffic volume. You can block or delete cookies in your browser; the site will continue to work.
14. Changes
We may update this policy. The effective date at the top will change, and material changes will be communicated to clients directly. Continued use of the services after a change means you accept the updated policy.