Privacy Policy

1. Introduction

Welcome to Web Sarathi ("Platform", "Service", "we", "us", or "our"). Web Sarathi is a product of Webakshar Solutions Private Limited, a company registered under the laws of India.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Business Profile management platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us when you:

• Register for an account (name, email address, phone number, password)
• Connect your Google Business Profile (Google account information, OAuth tokens)
• Use our services (business information, reviews, posts, photos)
• Contact us for support (communication records)
• Subscribe to our services (billing information)

2.2 Google Business Profile Data

When you connect your Google Business Profile, we access and store:

• Business profile information (name, address, category, contact details)
• Reviews and ratings received on your business profile
• Review responses and reply history
• Business posts and updates
• Photos uploaded to your profile
• Analytics and performance metrics
• OAuth access tokens and refresh tokens (encrypted)

2.3 Mobile App Device Permissions

The Web Sarathi mobile app asks for the following device permissions. Each one is requested only at the moment you use the feature that needs it, and you can decline or revoke it later in your device settings without losing access to the rest of the app:

• Camera — only when you choose "Take a photo" while adding an image to your business profile or a post. Photos you capture are used solely for that upload. We do not access the camera in the background, and we do not record video or audio.
• Photos and media — only when you choose an existing image or video to upload. We use your device's system photo picker, so the app receives only the specific items you select. We do not read or index your photo library.
• Notifications — to send you review alerts, task reminders, and account notices. Declining this does not affect any other feature.

Images and videos you choose to upload are stored on our media host and, where you have connected an account, published to your Google Business Profile or your linked Meta (Facebook/Instagram) pages. Media that you capture or select but do not upload never leaves your device.

2.4 Automatically Collected Information

We automatically collect certain information when you visit our platform:

• Device information (browser type, operating system, device type)
• Mobile app version and build number, so we can support and update the app
• IP address and approximate location
• Usage data (pages viewed, features used, time spent)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Manage your Google Business Profile on your behalf
• Generate AI-powered review responses and content suggestions
• Analyze your business performance and provide insights
• Send you notifications about reviews, posts, and important updates
• Process your subscription and billing
• Respond to your inquiries and provide customer support
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

4. Google API Services

Our platform uses Google API Services to connect with your Google Business Profile. By using our services, you agree to be bound by the Google Terms of Service and Google Privacy Policy.

Limited Use Disclosure: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Facebook and Instagram (Meta) Data

Web Sarathi lets you connect a Facebook Page and/or an Instagram professional account so you can publish posts, manage comments, reply to messages, and view engagement metrics from one place. Connecting these accounts is entirely optional, and we only access what the permissions you grant during the Facebook login allow.

5.1 What We Access

When you connect a Facebook Page and/or Instagram professional account, we access and process, on your behalf:

• The list of Facebook Pages you manage, and the details of the Page you select
• The Business portfolio assets needed to resolve that Page and its linked Instagram account
• Your linked Instagram professional account profile, username, and media
• Posts you publish or schedule through Web Sarathi, including the images and videos you upload
• Comments on the connected accounts and Page/Instagram Direct messages, including the names, profile pictures, and message or comment content of the people who interact with those accounts
• Engagement insights (reach, impressions, likes, comments, and similar metrics) for the Page, the Instagram account, and their posts
• Access tokens issued by Meta, which are encrypted at rest

5.2 Why We Process It

Solely to provide the features you use — composing, scheduling, and publishing posts; reading and replying to comments and messages; and showing you engagement metrics. Web Sarathi acts on your behalf and on your instruction. We do not use Facebook or Instagram data for advertising, we do not sell it, and we do not use it to build profiles of the people who message or comment on your accounts.

5.3 How We Store It

• Meta access tokens are encrypted at rest and are never exposed to your browser or mobile app
• Media you upload for posts is stored on our media host (Cloudflare R2)
• Posts, comments, conversations, and messages are cached in our database so the inbox and post history work

5.4 Retention, Revoking Access, and Deletion

We retain this data for as long as the account remains connected. You can remove it at any time by:

• Disconnecting in Web Sarathi: open the location, go to Social, and choose Disconnect. This revokes our access and deletes the stored connection and tokens.
• Removing the app on Facebook: Settings & privacy → Settings → Business integrations → Web Sarathi → Remove. This triggers Meta's automatic data-deletion callback to our servers, which permanently erases your Facebook and Instagram data from Web Sarathi.
• Asking us: email [email protected] and we will delete it.

A deletion request permanently removes the stored access tokens, connection details, cached posts, comments, conversations and messages, and any post media we hosted. You can view the deletion instructions and check the status of a deletion request at our data deletion page.

Your use of these features is also subject to Meta's Terms and Privacy Policy. Web Sarathi is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc.

6. AI and Automated Processing

We use artificial intelligence (AI) services to provide features such as:

• Automated review response generation
• Review content refinement and enhancement
• Sentiment analysis of reviews
• Content suggestions for posts

We may use third-party AI providers (OpenAI, Anthropic Claude, Google Gemini) to process your data. When using these services, we only share the minimum information necessary to provide the requested functionality. These providers are bound by their respective privacy policies and data processing agreements.

7. Data Storage and Security

We take the security of your data seriously and implement industry-standard security measures:

• Hosting: Our services are hosted on Amazon Web Services (AWS) infrastructure located in India
• Encryption: All data is encrypted in transit (TLS/SSL) and sensitive data is encrypted at rest
• Access Control: Strict access controls and authentication mechanisms
• OAuth Tokens: Google OAuth tokens are encrypted and stored securely
• Regular Audits: We conduct regular security assessments

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain information as required by law or for legitimate business purposes.

• Account Data: Retained while your account is active
• Google Business Data: Synced and retained while your profile is connected
• Analytics Data: Retained for up to 2 years for historical analysis
• Billing Records: Retained as required by Indian tax laws

To request data deletion, please contact us at the email address provided below. Note that we may retain certain data as required by law or for legitimate business purposes.

9. Third-Party Services

We use the following third-party services:

• Google Analytics: For website analytics and usage tracking
• Google Business Profile API: For managing your business profiles
• AI Providers: OpenAI, Anthropic, Google for AI-powered features
• Meta Platforms (Facebook Graph API): For publishing to, and managing comments, messages, and insights on, the Facebook Page and Instagram professional account you connect (Section 5)
• Cloudflare R2: For hosting the media you upload for posts
• Payment Processors: For subscription billing (if applicable)

These third parties have their own privacy policies governing the use of your information. We recommend reviewing their policies.

10. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted partners who assist in operating our platform (under strict confidentiality agreements)
• Legal Requirements: When required by law, regulation, or legal process
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

11. Your Rights

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for data processing at any time
• Disconnect Google Account: Revoke access to your Google Business Profile at any time

To exercise any of these rights, please contact us using the information provided below.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized experiences

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our platform.

13. Age Restrictions

Our platform is designed for business use and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use our services or provide any personal information.

If we learn that we have collected personal information from a person under 18, we will delete that information promptly. Please contact us if you believe we may have collected information from a minor.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending you an email notification (for significant changes)

Your continued use of the platform after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

16. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are: