Privacy Policy
This Privacy Policy explains how Lasan Media Private Limited, which operates Lasan Connect as a product of Lasan Labs ("we", "us"), collects, uses, shares and deletes personal information when you visit lasanconnect.com, create an account, or use the Lasan Connect messaging service (the "Service").
1. Who this policy covers
- Business customers are companies and individuals who create an account and use the Service to message their own customers.
- Contacts are the people whose WhatsApp numbers and names a business customer adds to the Service, and people who message a business customer's WhatsApp number.
- Visitors are people who browse lasanconnect.com.
For contacts, the business customer is usually the controller of the data and we process it on the business's behalf. Where we act as the controller, this policy applies directly.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, password (stored only as a salted hash), business name | You, at sign-up |
| Business and WhatsApp setup | Workspace name, plan, WhatsApp Business Account ID, phone number ID, display number, access token | You, in Settings |
| Contact data | Phone number, name, tags, opt-in status | You (manual entry or CSV import), or the contact messaging you |
| Message data | Text of messages sent and received, template used, delivery and read status | WhatsApp Cloud API and our Service |
| Technical data | IP address, browser type, session token, server logs | Your device, automatically |
3. How we use information
- To create and secure your account, and to run the Service you request.
- To send and receive WhatsApp messages on your behalf, track delivery, and run automations you set up.
- To enforce opt-outs: when a contact replies STOP, we stop sending them campaign messages.
- To prevent fraud, abuse and spam, and to comply with the WhatsApp Business Policy and Commerce Policy.
- To provide support, send service messages, and improve the Service.
4. Sharing
- Meta Platforms, Inc. and WhatsApp LLC: messages and phone numbers are transmitted through the WhatsApp Business Platform. Their use of this data is governed by their own terms and privacy policies.
- Hosting and infrastructure providers that store and process data for us under contracts that require confidentiality.
- Legal authorities when required by law, court order or a valid government request.
- Business transfers: if we merge or sell part of our business, personal data may transfer under the same protections.
We do not sell personal data, and we do not use contact data to market our own products to contacts.
5. Retention
We keep account and message data while your account is active. When you delete your account, we delete your workspace, contacts, templates, campaigns, messages and automations within 30 days, except where we must keep limited records for legal, tax or security reasons.
6. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023, and the EU/UK GDPR), you may ask us to access, correct, delete or restrict your personal data, or to withdraw consent. You can do most of this yourself: edit contacts and delete your account in the dashboard. For any other request, see the Data Deletion page or contact us below.
If you are a contact (not a business customer) and want your number removed, contact the business that messaged you, or email us and we will forward your request to the business.
7. Security
We use HTTPS for all connections, hash passwords, encrypt WhatsApp access tokens at rest, restrict access to production systems, and limit access to personal data to staff who need it. No system is perfectly secure, so please use a strong password and tell us immediately at the address below if you suspect unauthorised access.
8. Children
The Service is for businesses and is not directed at children. Do not create an account or send us information about anyone under the minimum age required by WhatsApp in your country.
9. International transfers
Our servers and our providers may be outside your country. Where we transfer personal data, we rely on safeguards required by applicable law.
10. Changes
We will post changes on this page and update the date above. For material changes we will also notify account owners by email.
11. Contact and grievances
Lasan Media Private Limited
[Registered office address]
Email: privacy@lasanconnect.com
Grievance Officer: [Name], [Email], [Phone]