Privacy Policy

Last updated: 29 September 2026

Shristi Health & Power Solutions Private Limited ("we", "us") operates the Watobot onboarding application (the "Service"), which lets a business connect its WhatsApp Business Account to WhatsApp Coexistence via Meta's Embedded Signup, and then hands ongoing message delivery to that business's own systems.

What we collect

  • Your phone number, to sign you in. We send you a one-time code over WhatsApp, using Watobot, a WhatsApp messaging service we operate.
  • From Meta's Embedded Signup: the access token for your WhatsApp number, your WhatsApp Business Account (WABA) ID and your phone number ID.
  • Per number: the incoming-message URL you set, and counts of the messages sent through our API (per day, week and month), with the time and outcome of the last call. Never the content of your messages.
  • A hash of your Watobot API key. The key itself is created in your browser and we never keep it.
  • When you click Join Waitlist, a running total is increased. We store no personal information for that.

How we use it

We use Meta's access token only to act for you when you ask us to: to send messages you submit through our API, to point your number's incoming messages at your own URL, and to manage your message templates.

We store the token encrypted, with a key derived from your Watobot API key. We don't keep that key, so we can't open the token ourselves. It is only decrypted, in memory, while we handle a request that includes your API key, and is discarded afterwards. The flip side is that we can't recover a lost key. If you lose it, the stored tokens are deleted and you onboard your numbers again.

Messages you send through our API pass through us on their way to Meta. We don't store or log their content. Messages your customers send you go straight from Meta to your own URL and never pass through us.

Data retention

We keep this data until you delete your account from the Dashboard, which removes your numbers, usage counts and stored tokens. You can also revoke our access from Meta Business Manager at any time.

Third parties

Meta, as required to operate the WhatsApp Business Platform integration. Google (Firebase), which hosts our database and servers. Watobot, to send sign-in codes. We don't sell or share your data for any other purpose.

Your rights

You can revoke this app's access at any time from Meta Business Manager. See our Data Deletion page for how to request deletion of any data we hold.

Contact

Questions about this policy: developer@shristigroup.com