Privacy Policy

1. Who we are

This policy explains how Wishbasket Technologies India LLP ("Wishbasket", "we", "us") collects, uses and protects personal data when you use our website wishbasket.in, the Wishbasket business application, and Eva, our assistant, including when you talk to Eva on WhatsApp.

Registered office: Shop No. 325, Globe Business Park, Opposite Shastri School, Kalyan Badlapur Road, Ambernath (West), Maharashtra 421505, India. GSTIN: 27AAEFW4906H1Z1. Contact: info@wishbasket.in, +91 89990 92171.

We follow India's Digital Personal Data Protection Act, 2023 and related rules.

2. What we collect

Information you give us

• Contact and account details: your name, business name, email address, mobile number, password (stored only in encrypted, one-way form), and billing details such as address and GSTIN.
• Business records you enter: enquiries, customers, quotations, orders, invoices, payments, expenses, deliveries and notes. This often includes details of your customers (names, phone numbers, addresses).
• Messages to Eva: what you type or say to Eva in the app or on WhatsApp, including voice notes, so that Eva can carry out your request.
• Enquiries to us: what you send through our contact forms, email, phone or WhatsApp.

Information collected when you use our services

• WhatsApp: your WhatsApp phone number, profile name, the content and time of messages you exchange with our WhatsApp number, and their delivery status.
• Technical data: IP address, browser and device type, pages visited and error logs, used to keep the service running and secure.
• Cookies: only those needed to keep you signed in and secure. We do not use advertising cookies.

What we do not collect

Card numbers, UPI PINs and bank passwords are entered on our payment partner's secure page (Razorpay). We never see or store them.

3. How we use it

• To provide Wishbasket and Eva: record and organise your business information, prepare quotations and invoices, and send reminders and follow-ups.
• To understand your messages to Eva (typed or spoken) and reply to you, in the app or on WhatsApp.
• To recognise you on WhatsApp by your phone number, so Eva only acts inside the business you belong to.
• To bill you for your plan and issue GST invoices and receipts.
• To give support, answer your enquiries and tell you about important changes to the service.
• To keep the service secure, prevent misuse and meet our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

4. WhatsApp and Eva

• We use the WhatsApp Business Platform provided by Meta. Messages between you and our WhatsApp number pass through Meta's systems under WhatsApp's Business Policy and Meta's own privacy terms.
• Eva only works for phone numbers linked to a Wishbasket account. If your number is not linked, Eva cannot see or change any business data; we may reply once to explain, and we may note your enquiry so we can help you.
• We message you on WhatsApp only about your Wishbasket account and requests: replies to you, reminders and account notices. You can stop non-essential messages at any time by replying STOP or by writing to info@wishbasket.in.
• Voice notes are converted to text so Eva can understand them.

5. Who we share it with

We share personal data only with providers who help us run the service, under agreements that limit how they use it, or where the law requires:

• Meta Platforms, for WhatsApp messaging.
• Razorpay, for payments.
• Hosting, email delivery and backup providers that store and deliver our service.
• AI service providers, which process the text of your messages only to produce Eva's response.
• Authorities, when required by law, court order or to protect rights and safety.

6. Your customers' data

When you enter information about your own customers into Wishbasket, you decide what is entered and why. We process it on your behalf to provide the service, keep it separate from every other business's data, and do not use it for any purpose of our own.

7. How we protect it

• Every business's data is kept separate, and access is checked on every request.
• Connections are encrypted (HTTPS), and passwords are stored only as one-way hashes.
• Access by our team is limited to what is needed to run and support the service.
• Data is backed up, so it can be restored if something goes wrong.

No system is perfectly secure, but we work to protect your data and will inform you and the authorities as the law requires if a breach affects you.

8. How long we keep it

We keep your data while your account is active and for as long as needed to provide the service. When you close your account or ask us to delete your data, we delete it within 30 days, except records we must keep by law (for example, tax and GST records), which we keep only for the period the law requires.

9. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, or withdraw consent you have given;
• nominate a person to act for you in case of death or incapacity;
• raise a grievance with us, and, if not resolved, with the Data Protection Board of India.

To use any of these rights, write to info@wishbasket.in. We reply within 7 working days.

10. Delete your data

11. Children

Our services are for businesses and are not meant for anyone under 18. We do not knowingly collect children's data.

12. Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, tell you by email, in the app or on WhatsApp before they take effect.

13. Contact and grievances

Grievance Officer, Wishbasket Technologies India LLP
Shop No. 325, Globe Business Park, Opposite Shastri School, Kalyan Badlapur Road, Ambernath (West), Maharashtra 421505, India
Email: info@wishbasket.in · Phone: +91 89990 92171