Operator, scope and roles
Vayreach is a multi-tenant WhatsApp Automation CRM operated by Vayqube Technologies Private Limited. This policy applies to the Vayreach website, accounts, workspaces, support channels and connected WhatsApp Business Platform functionality. Vayqube Technologies Private Limited acts as controller or Data Fiduciary for website, account, subscription, billing, security, audit and support processing. For contacts, conversations and messaging data processed on a customer’s documented instructions, it acts as a processor or service provider; the customer determines the recipients and purposes.
Data we process
The data processed depends on how a person or customer uses Vayreach.
- Website and account data, including name, business contact details, organization, authentication state and communication preferences.
- Workspace, membership, role, permission and authorized-user data.
- Customer-uploaded contacts, normalized phone numbers, tags, groups, custom fields and import or export records.
- WhatsApp consent and opt-in evidence, purpose, source, policy or text version, timestamps, withdrawals and suppression records.
- WhatsApp Business Account, phone-number and Cloud API identifiers; templates; campaigns; conversations; message content made available to the customer workspace; message and delivery metadata; and automation activity.
- Support requests, privacy and deletion cases, complaints, evidence, audit records, security events and diagnostic logs.
- Subscription, wallet, ledger, payment, tax and invoice records where the relevant commercial feature is enabled for the workspace.
- Browser, device, IP, request, cookie-preference and local-storage data described in the Cookie and Storage Policy.
Why we process data
We process data to operate and secure Vayreach; authenticate users; enforce tenant isolation and permissions; connect authorized WhatsApp channels; deliver inbox, contact, template, campaign and automation functions; maintain consent and suppression controls; provide support; investigate abuse; keep financial and audit records; comply with law; and improve reliability. Optional marketing communications require a separate choice and may be withdrawn.
WhatsApp Cloud API data
When a customer connects an authorized WhatsApp Business Account, Vayreach processes identifiers, configuration, templates, messages and status events supplied through the WhatsApp Cloud API. Vayreach does not claim access to unrelated personal WhatsApp conversations. Meta independently processes data under its terms and policies. Customers remain responsible for their notices, lawful basis, consent and messaging instructions.
Vayreach is independent and is not represented as affiliated with, endorsed by or certified by Meta or WhatsApp unless expressly confirmed in writing.
International processing
Meta and service providers may process data outside the person’s or customer’s country. Vayqube applies contractual, access-control and security measures appropriate to the transfer and applicable law. Customers should review the current subprocessor disclosure and their own cross-border obligations before connecting regulated data.
Security safeguards
Vayreach uses tenant-scoped access controls, role and permission checks, MFA for platform administrators, encrypted provider credentials, secret redaction, webhook signature verification, request limits, audit logging, queue idempotency and transactional financial controls. No internet service can guarantee absolute security. Customers must protect credentials, manage authorized users and report suspected compromise promptly.
Retention and deletion
Data is retained only while needed for the service, the customer’s instructions, security, dispute handling and legal duties. Account and workspace data is retained while the workspace is active and through verified closure processing. Contact, message, template, campaign and automation data follows workspace instructions and applicable product retention settings. Consent, withdrawal and minimal suppression evidence may be retained to demonstrate compliance and prevent renewed unwanted contact. Billing, tax, ledger, security and audit records are retained for the period required by applicable law or an active dispute. Deletion from active systems may precede expiry from protected backups, which remain access-restricted and are overwritten through the controlled backup cycle. A legal hold overrides ordinary deletion. Retention periods vary according to the type of data, customer instructions, security requirements and applicable legal obligations. Account and workspace data is retained while the service relationship remains active and for a limited period required to complete verified closure, export, dispute and security processes. Billing, tax, ledger, audit, consent, suppression and security records may be retained for the period required by applicable law or a legitimate compliance purpose. Data deleted from active systems may remain in protected backups until those backups are overwritten through the controlled backup cycle.
Rights and requests
Subject to applicable law and verification, a person may request access or information, correction, updating, deletion, consent withdrawal, marketing opt-out, account closure or grievance review. Use the User Data Deletion Instructions and its request form for deletion, or contact the privacy address below. If a Vayreach customer controls the data, Vayqube may coordinate the request with that customer. Withdrawal does not invalidate earlier lawful processing, and legally required records may be retained.
Children’s data
Vayreach is a business service and is not directed to children. Customers must not use Vayreach to process children’s personal data unless they have the authority, notices, consent and safeguards required by applicable law and platform rules.
Changes, grievance and contact
Material changes will be identified by a revised version and date. Privacy and grievance requests may be submitted through the public request form or the contact below. Identity and workspace authority may be verified before sensitive action.
Vayqube Technologies Private Limited, T3b 604-606, Nx-one Techzone-4, Greater Noida, Gautam Buddha Nagar, Gautam Budh Nagar 201318, India. Email: support@vayreach.com. Phone: +91 8796955128.