Privacy policy

Last updated: 8 November 2026

DA Connect ("we", "us") is a software service run by Digital Arts, Port Blair, India. It lets businesses ("customers") send and receive WhatsApp messages through Meta's official WhatsApp Business Platform. This policy explains what data we handle and why.

1. Data about our customers

• Account data: name, email address, password (stored hashed by our authentication provider), workspace name and team members.
• WhatsApp connection data: WhatsApp Business Account ID, phone number ID, display number, verified business name, quality rating and an access token issued by Meta. Access tokens are stored encrypted at rest and are never shown in the app.
• Billing data: plan, payment amount and Razorpay order/payment IDs. Card and UPI details are handled by Razorpay, not by us.

2. Data our customers process with DA Connect

Our customers upload or receive contact details (phone numbers, names, optional email and custom fields) and exchange messages with their own customers. For this data, the business using DA Connect is the data controller and we act as their processor. We use it only to provide the service: sending and receiving messages, showing reports, running the customer's chatbot rules and delivering webhooks the customer configured.

3. Meta / WhatsApp

Messages are sent and received through Meta's WhatsApp Cloud API. Meta processes message content and metadata under its own terms and privacy policy. Media files received from WhatsApp are fetched from Meta on demand and are not stored by us; Meta deletes them after 30 days.

4. Where data is stored

Data is stored with Supabase on servers in Mumbai, India (AWS ap-south-1). The website is served by Cloudflare. We do not sell data and do not use customers' contacts or messages for advertising or to train AI models.

5. Retention

Data is kept while the workspace exists. Webhook delivery logs are kept for 30 days. When a workspace owner deletes the workspace, or asks us to, all its contacts, messages, templates and tokens are deleted within 30 days (backups roll off within a further 30 days).

6. Security

Each workspace's data is isolated with row-level security in the database. Connections use HTTPS. Webhooks from Meta are verified with Meta's signature. API keys are stored only as hashes.

7. Your rights

You can view, export and delete your contacts in the app. To access or delete your account data, see Data deletion or write to contact@digitalarts.biz. If you received a WhatsApp message from a business that uses DA Connect, reply STOP to that business to stop marketing messages, or contact that business directly.

8. Contact

Digital Arts, Port Blair, Andaman & Nicobar Islands, India. Email contact@digitalarts.biz, WhatsApp +91 99332 11177.