Privacy Policy
Last updated: 18 October 2026
MECGURA Platform (“we”, “us”) is a WhatsApp business messaging platform operated by MECGURA. Businesses that use it (“clients”) manage their customer conversations, contacts, campaigns and automations in a private workspace. This policy explains what data we handle and why.
Who is responsible for which data
- Account data (name, email, sign-in details of our clients’ team members): we are the controller.
- Customer data (contacts, phone numbers, messages, and tags a client stores or exchanges through the platform): the client is the controller and we process it on the client’s behalf and on their instructions. If you are a client’s customer and want to see or delete your data, please contact that business first.
What we collect
- Account details: name, email, hashed password, role, sign-in and security events.
- Workspace data entered by clients: contacts, conversations and messages, templates, campaigns, automations, notes and files.
- WhatsApp Business connection details (account and phone-number identifiers). Access tokens are stored encrypted and are never shown back.
- Billing details: plan, invoices and payment status. Card or bank details are handled by the payment provider, not stored by us.
- Technical data: IP address, browser, and request logs used for security, rate limiting and troubleshooting.
Why we use it
- To provide the service: send and receive WhatsApp messages, run campaigns and automations, show analytics.
- To secure accounts, prevent abuse and keep audit logs.
- To bill clients and provide support.
- To comply with legal obligations and WhatsApp/Meta platform rules (for example opt-in, opt-out and template policies).
Service providers we rely on
We share data only as needed to run the service, with providers such as:
- Meta Platforms (WhatsApp Business Platform), to deliver messages.
- Our hosting and database providers (Vercel and Neon), to run the application and store data.
- An email provider, for password-reset and account emails, when configured.
- A payment provider, for billing, when configured.
- An AI provider, only when a client turns on AI replies. The relevant conversation text is sent to generate a reply.
We do not sell personal data.
Retention
Workspace data is kept while the client’s account is active. When a workspace is closed, its data is deleted or anonymised within a reasonable period, except records we must keep for legal, tax or security reasons.
Security
Passwords are hashed, WhatsApp credentials are encrypted at rest, access is separated per workspace, and sensitive actions are audit-logged. No system is perfectly secure; if we learn of a breach affecting you we will notify the affected clients.
Your choices and rights
You can ask to access, correct or delete your data, or object to processing. See how to request deletion, or contact support@mecgura.tech or WhatsApp +917837722567.
Changes
We may update this policy. The date above shows the latest version.
Contact
Questions about this policy: support@mecgura.tech or WhatsApp +917837722567.