Privacy Policy

Last updated: 25 July 2026

This Privacy Policy explains how MurshiSoft LLP ("MurshiSoft", "we", "us", or "our") collects, uses, stores, shares, protects and deletes information in connection with our WhatsApp Business Platform service (the "Service"), available at murshisoft.com.

MurshiSoft is a technology provider for the WhatsApp Business Platform. Our customers are businesses ("Clients") who connect their own WhatsApp Business Account to use our Service to communicate with their end customers.

1. Information we collect

a. Account and business information

• Contact details of the people who sign up and use the Service (name, email address, phone number).
• Business details of the Client (business name, address, tax identifiers, billing information).
• Authentication data such as hashed passwords and access tokens.

b. WhatsApp Business Platform data ("Platform Data")

When a Client connects their WhatsApp Business Account through Meta's official Embedded Signup, we access and process the following data obtained from Meta, strictly to operate the Service on the Client's behalf:

• WhatsApp Business Account (WABA) identifiers and business profile information;
• Business phone numbers registered to the WABA and their status;
• Message templates and their approval status;
• Messages sent and received through the connected number, and related webhook events (including message content, sender/recipient WhatsApp IDs, timestamps, and delivery/read status);
• Media shared in conversations (images, documents, audio, video) for the purpose of delivering messages;
• A long-lived access token used to call the WhatsApp Business Platform on the Client's behalf.

c. Usage and technical data

• Log data, IP address, device/browser information, and diagnostic and performance metrics used to operate and secure the Service.

2. How we use information

We use the information above only to provide, maintain, secure and improve the Service for the Client who connected the account. Specifically, we use Platform Data to:

• Send and receive WhatsApp messages on behalf of the Client;
• Display conversations in the Client's shared team inbox;
• Manage the Client's message templates, phone numbers and business profile;
• Provide automation, broadcasts, notifications and analytics that the Client configures;
• Provide customer support and troubleshoot issues;
• Detect, prevent and address fraud, abuse, security and technical issues.

3. WhatsApp Business Platform & Meta compliance

Our access to and use of Platform Data complies with the Meta Platform Terms, the Meta Developer Policies, and the WhatsApp Business Terms. In particular:

• We use Platform Data solely to provide or improve the Service experience for the Client who authorized it;
• We do not sell, license or rent Platform Data to any third party;
• We do not use Platform Data for advertising or to build user profiles for advertising;
• Each Client's data is logically isolated; one Client can never access another Client's data;
• We only retain Platform Data for as long as needed to provide the Service, and delete it on request or on account termination (see Section 6).

4. How we share information

We do not sell your data. We share information only in these limited circumstances:

• With Meta / WhatsApp — to send and receive messages and manage assets through the WhatsApp Business Platform, as necessary to provide the Service.
• Service providers (sub-processors) — reputable infrastructure and hosting providers who process data on our behalf under contractual confidentiality and data-protection obligations.
• Legal requirements — where required by applicable law, regulation, legal process, or to protect the rights, property or safety of MurshiSoft, our Clients or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

5. Data security

• Access tokens and other secrets are encrypted at rest (AES-256-GCM) and are never exposed to end-user browsers.
• All data in transit is protected with TLS/HTTPS.
• Access is restricted on a least-privilege basis and protected by authentication and role-based permissions.
• We apply tenant isolation so that each Client's data is separated from every other Client's data.

6. Data retention and deletion

We retain personal data and Platform Data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. A Client may:

• Disconnect their WhatsApp Business Account at any time, after which we stop processing new Platform Data for that account;
• Request deletion of their account and associated data by emailing contact@murshisoft.com. We will delete or de-identify the data within 30 days, except where retention is required by law.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. To exercise these rights, contact us at contact@murshisoft.com.

8. International data transfers

MurshiSoft operates from India with technical support in Saudi Arabia, and may process data in other locations through our service providers. Where data is transferred across borders, we take steps to ensure it is protected consistent with this Policy and applicable law.

9. Children's privacy

The Service is intended for businesses and is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

11. Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact:

MurshiSoft LLP
VII/42 Paloth, Paloth Poovathikkal, Malappuram, Kerala 673639, India
Email: contact@murshisoft.com
Phone: +91 7356989449