Privacy Policy
This Privacy Policy explains how Nexreach Solutions ("Nexreach", "we", "us"), a unit of Tirupati Health Lifestyle and Services, a sole proprietorship of Mandem Reddy Bharath registered in Andhra Pradesh, India (GSTIN 37CNOPM5629J2ZA), collects, uses, shares and protects personal data. It applies to our website nexreachsolutions.in and to the business messaging services we provide (the "Services").
We follow the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and the rules made under them.
1. Our two roles
- For our own clients and website visitors, we decide why and how their data is used. Under the DPDP Act we are the Data Fiduciary.
- For the end customers our clients message, our client decides what is sent and to whom. We process that data only on the client's instructions, as their Data Processor. Questions about those messages should go first to the business that sent them.
2. Data we collect
- Client account data: name, business name, GSTIN, address, email, phone number, billing and payment records, and the details needed to set up a WhatsApp Business account.
- Messaging data processed for clients: end-customer phone numbers and names, opt-in records, message content, delivery and read status, and conversation history.
- Website and enquiry data: what you send us through email or forms, and basic technical data such as IP address, browser type and pages visited.
We do not knowingly collect data from children under 18 and do not offer the Services to them.
3. How we use data
- To set up, run and support client messaging accounts and deliver messages.
- To complete business and account verification required by Meta Platforms, Inc. and its partners.
- To bill clients, keep accounts and meet tax and legal obligations.
- To answer enquiries, send service updates and improve the Services.
- To prevent spam, fraud and misuse, and to enforce our Terms of Service.
We do not sell personal data, and we do not use our clients' customer data for our own marketing.
4. Consent and opt-in
Clients must collect valid opt-in from every end customer before sending them messages, as required by WhatsApp's Business Messaging Policy and the DPDP Act. Clients are responsible for the lawfulness of the content they send and the contacts they upload.
5. Who we share data with
- Meta Platforms, Inc. and WhatsApp LLC, which operate the WhatsApp Business Platform. Messages sent through the platform are also governed by WhatsApp's own terms and privacy policy.
- Technology partners who host the messaging software and infrastructure we use, under contracts that limit their use of the data.
- Payment gateways and banks, to process payments.
- Government authorities, when Indian law requires it.
Some partners may store or process data outside India. Where they do, we use providers that follow recognised security standards, and we follow any restrictions the Government of India notifies under the DPDP Act.
6. How long we keep data
We keep client account and billing records for as long as the account is active and for up to 8 years after, as required by GST and tax law. Messaging data processed for a client is kept for the period the client chooses, and deleted or returned within 90 days after the client's account ends, unless the law requires us to keep it longer.
7. Security
We use reasonable security safeguards, including encrypted connections, access controls, two-step login on our accounts and limited staff access. No system is completely secure. If a personal data breach occurs, we will inform affected clients and the Data Protection Board of India as the DPDP Act requires.
8. Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how it is used;
- correct, complete or update it;
- erase it, where we no longer need it for a lawful purpose;
- withdraw consent you gave us, without affecting processing done before;
- nominate another person to exercise these rights if you die or cannot act.
To stop receiving WhatsApp messages from a business that uses our Services, reply STOP to that business or contact it directly. You can also block the business in WhatsApp.
9. Cookies
Our website uses only the cookies needed for it to work. We do not use advertising or tracking cookies.
10. Grievance Officer
Mandem Reddy Bharath, Proprietor and Grievance Officer
Nexreach Solutions, Second Floor, 19-3-1/C3/F2, Postal Colony, 4th Cross, Opp. Max Security, Tirupati, Andhra Pradesh 517501
Phone: +91 86860 20430
Email: privacy@nexreachsolutions.in
We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Changes to this policy
We may update this policy. We will post the new version here with a new effective date, and tell clients by email about significant changes.