Privacy Policy & Data Protection

AsanConnect provides mission-critical enterprise customer-communication services for the AsanPay Innovation Pvt. Ltd. group, including one-time passwords (OTP), automated WhatsApp notifications, and customer support infrastructure.

The parent company is AsanPay Innovation Pvt. Ltd. (fintech portal: https://asanpay.in). For legal or compliance concerns, our Grievance Desk can be reached at support@asanpay.in.

Depending on your interaction with AsanConnect, we may collect and process:

• Contact Attributes: Name, work email address, and company name provided during demo or trial onboarding.
• Telecommunication Identifiers: Mobile number used for WhatsApp messaging, OTP authentication, or fallback SMS routing.
• Authentication Metadata: One-time password cryptographic tokens and verification timestamps (never plaintext OTP codes).
• Transactional Signals: High-level transaction statuses (e.g. Success, Pending, Failed) required to trigger order status alerts. Full payment card numbers or CVVs are never processed on AsanConnect.
• Technical Diagnostics: IP address, user agent, and API latency metrics for fraud prevention and Meta Cloud API uptime monitoring.

We process personal information solely for legitimate enterprise purposes, including:

• Delivering critical account authentication (1-tap WhatsApp OTPs).
• Sending requested transactional alerts (e.g. shipping updates, payment receipts).
• Multi-agent customer support routing via the Shared Team Inbox.
• Preventing bot spam, abuse, phishing attempts, and unauthorized account access.

Messages sent via AsanConnect utilize the Official Meta WhatsApp Cloud API. Templates conform strictly to Meta's category rules (Authentication, Utility, Service, and Marketing).

Meta operates as an independent infrastructure processor governed by Meta Business Platform Terms and GDPR / DPDP adequacy standards.

We retain personal data only as long as necessary to fulfill operational obligations or satisfy Indian regulatory standards (such as statutory financial audit trails).

You may exercise your right to erasure at any time. For detailed instructions on removing your telephone number or logs, visit our User Data Deletion Portal.

All data in transit is protected using TLS 1.3 protocol with 256-bit encryption. System secrets, Meta API tokens, and webhooks reside in hardware-security-module (HSM) backed key vaults with automated rotation.