Privacy Policy

Comniket Technologies Pvt. Ltd. ("Comniket", "we", "us") operates the Comniket marketing platform at comniket.com. Comniket helps businesses message their customers on WhatsApp, email and SMS, run and measure advertising on Google, YouTube, Facebook, Instagram and LinkedIn, and manage their Google Business Profile — from one dashboard.

This policy explains what information we collect, including information we receive from Google and Meta when you connect your accounts, how we use it, who we share it with, how long we keep it, and the choices you have.

1. Information we collect

1.1 Information you give us

• Account information: your name, email address, phone number, business name and role, used to create and secure your account.
• Billing information: business name, billing address and GSTIN. Card, UPI and bank details are entered with our payment gateways (Razorpay and Cashfree) and are not stored by us.
• Business information: your website address, brand name, logo, business category and similar details you add to set up campaigns.
• Contacts you upload or collect: names, phone numbers, email addresses and labels of your customers and leads. You control this data; we process it on your instructions.
• Content you create: message templates, campaigns, ads, posts, replies and files you upload.

1.2 Information from accounts you connect

When you choose to connect a Google, Meta or LinkedIn account, you sign in on that provider's own page and approve specific permissions. We receive only the permissions you approve, and we use them only for the features described in sections 2 and 3.

1.3 Information collected automatically

• Technical data: IP address, browser type, device type and time of access, used for security, fraud prevention and troubleshooting.
• Cookies and local storage: used to keep you signed in and remember your preferences. See section 8.

2. Google user data

If you connect a Google account, Comniket asks Google for the following access. Each is requested only so the matching feature can work for your own business.

2.1 How we handle Google user data

• We use Google user data only to provide and improve the user-facing features described above, at your request.
• We do not sell Google user data, and we do not use or transfer it for advertising, retargeting, credit-worthiness or lending purposes.
• We do not use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine-learning models.
• We do not allow humans to read Google user data unless you give us permission (for example, to help with a support request), it is necessary for security purposes such as investigating abuse, or it is required by law.
• We transfer Google user data to third parties only as necessary to provide the feature you are using (see section 5), to comply with law, or as part of a merger or acquisition with notice to you.

2.2 Storage and protection of Google data

• The access tokens Google issues to us are encrypted at rest with AES-256-GCM and are never shown in the dashboard or sent to your browser.
• Advertising and profile data we store (for example, daily campaign results) is kept in our database on servers we control, protected by access controls and encrypted connections (HTTPS/TLS).

2.3 Removing Comniket's access to Google

• Disconnect Google at any time from Setup in the Comniket dashboard. We stop using the connection immediately and revoke our token with Google where Google allows it.
• You can also remove Comniket's access from your Google Account at myaccount.google.com/permissions.
• To delete Google data we have already stored, see section 10 or our Data Deletion Instructions.

3. Meta data (Facebook, Instagram, WhatsApp, Meta Ads)

If you connect Meta, we request only the permissions needed for the features you use:

• Facebook Pages and Instagram: your Page and account details, posts and insights, and messages sent to your Page or Instagram account — to publish posts, reply to messages and show performance.
• Meta Ads: your ad accounts, campaigns, ads, budgets, balance and results — to create and manage your campaigns and report on them.
• WhatsApp Business: your WhatsApp Business account and phone number, message templates, and the messages you send and receive — to send your campaigns and run your inbox.

WhatsApp messages are processed in line with Meta's WhatsApp Business Messaging Policy. You are responsible for having your contacts' opt-in consent before you message them. Instructions for deleting data obtained through Meta are on our Data Deletion Instructions page.

4. How we use information

• To provide the platform: send your messages, run your ad campaigns, manage your Business Profile and show your reports.
• To give suggestions you ask for, such as keyword ideas, ad text, budget estimates and review replies.
• To process payments and manage your subscription and wallet.
• To provide support and send service messages (for example, sign-in codes, invoices, and alerts about your campaigns).
• To keep the platform secure, prevent fraud and abuse, and fix problems.
• To comply with legal obligations.

We do not sell personal information, and we do not use your contacts' data for our own marketing.

5. Who we share information with

We share information only with service providers that help us run Comniket, and only as needed for the feature involved:

• Cloud hosting: the servers our application and database run on.
• Google, Meta and LinkedIn: to carry out the actions you ask for on your own connected accounts.
• Payment gateways (Razorpay, Cashfree): to process payments.
• Messaging and email delivery providers: to deliver WhatsApp, SMS and email messages you send.
• OpenAI (AI features): when you use an AI feature — such as writing ad text, drafting a review reply or suggesting keywords — the text needed for that request (for example, your website's public text, keywords, or the review being answered) is sent to OpenAI to generate the result, and the result is returned to you. We use OpenAI's API, under which data sent is not used to train OpenAI's models. AI features run only when you or your settings ask for them.
• Legal and safety: when required by law, court order or government request, or to protect the rights and safety of our users and the public.

6. Data retention

• We keep account and campaign data for as long as your account is active.
• Data from a connected account is kept while the connection is active. After you disconnect, we stop collecting new data; stored reports remain in your workspace until you delete them or close your account.
• When you close your account or ask for deletion, we delete your data within 30 days, except records we must keep by law (such as invoices and tax records).

7. Security

We use encryption in transit (HTTPS/TLS), encryption at rest for access tokens and payment credentials, role-based access inside each workspace, and restricted administrative access. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a personal-data breach as required by law.

8. Cookies

We use cookies and browser storage that are necessary to keep you signed in, protect your session and remember your preferences (such as dark mode). Disabling them may stop the dashboard from working.

9. Children

Comniket is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children.

10. Your rights and choices

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• access the personal data we hold about you, and correct or update it;
• ask us to delete your personal data or close your account;
• withdraw consent, including by disconnecting Google, Meta or LinkedIn at any time;
• nominate another person to exercise these rights on your behalf;
• raise a grievance with us, and escalate it to the Data Protection Board of India if unresolved.

If you are a customer of a business that uses Comniket, please contact that business first — they decide how your data is used, and we act on their instructions.

To exercise these rights, email us at the address below or follow our Data Deletion Instructions. We respond within 30 days.

11. Changes to this policy

We will update this page when our practices change and revise the date at the top. For significant changes, we will notify account holders by email or in the dashboard.

12. Contact and grievances

Comniket Technologies Pvt. Ltd.
Email: support.comniket@gmail.com
Phone: +91 90040 05399