Privacy Policy & Data Governance
Effective Date: September 28, 2026 · Last Reviewed: September 2026
This Privacy Policy explains how SANCHAR (“we”, “us”, or “our”), an enterprise software platform developed and operated by ARTHEON (Udyam Registration No. UDYAM-TS-09-0247951) in Hyderabad, India, collects, uses, processes, stores, and protects digital personal data in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and Rule 3 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
Platform & Trademark Notice:
WhatsApp® is a registered trademark of Meta Platforms, Inc. SANCHAR is an independent enterprise productivity software platform developed and operated by ARTHEON. SANCHAR is not affiliated with, sponsored by, authorized by, or endorsed by Meta Platforms, Inc. or WhatsApp LLC.
30-Minute Session TTL
Forwarded chat context is held in ephemeral memory for at most 30 minutes, then permanently purged from active session tables.
No Model Training
Your trade conversations, invoices, pricing, and debtor records are never used to train public or proprietary AI foundation models.
Full User Control
Withdraw consent anytime by texting STOP or requesting full account erasure via DELETE MY DATA.
1Data Fiduciary Legal Identity & Classification
Under Section 2(i) of the DPDPA 2023, the Data Fiduciary determining the purpose and means of processing personal data is:
Legal Entity: ARTHEON
Enterprise Classification: Registered Micro Enterprise, Ministry of MSME, Govt. of India
Udyam Registration Number: UDYAM-TS-09-0247951
Operating Product / Brand: SANCHAR
Registered Address: Giridhari Executive Park, Bandlaguda, Peeramcheri, Hyderabad, Telangana, PIN: 500091
Official Grievance Email: complaint@sancharbiz.in
General Inquiries: partho@sancharbiz.in
Scope: Digital personal data collected via the SANCHAR WhatsApp Business Channel and the Companion Web Portal (sancharbiz.in).
2Categories of Personal Data Collected
We practice strict Data Minimisation (DPDPA Section 5(2)). We only collect data necessary to fulfill specified commercial actions:
- Merchant Account Identifiers: Your 10-digit mobile number, WhatsApp user ID, and language preference (e.g. Hindi, Telugu, Tamil, Marathi, Gujarati).
- Forwarded Business Communications: Commercial text messages, negotiation quotes, or voice notes forwarded voluntarily by you to the SANCHAR bot for translation or reply drafting.
- Inward Tax Invoices: Photographs or PDF copies of purchase/sale bills forwarded for OCR extraction, including GSTIN numbers, HSN/SAC codes, vendor trade names, taxable line items, and invoice amounts.
- Trade Document Files: Product catalogs, rate sheets, and price lists that you voluntarily upload to your companion file vault for 1-tap WhatsApp forwarding.
- Receivables & Debtor Records: Counterparty debtor names, outstanding balances, overdue days, and commitment notes entered voluntarily into the Payment Recovery Assistant.
- Web Companion Authentication: Temporary 6-digit WhatsApp OTP verification tokens and secure HTTP-only browser session tokens.
3Lawful Basis & Purpose Limitation
Under Section 4(1) of the DPDPA 2023, SANCHAR processes personal data exclusively on the lawful basis of Specific, Informed, and Unambiguous Consent provided by you.
Your consent is obtained during onboarding upon replying YES on WhatsApp and when logging into the companion web portal via OTP.
We process your data strictly for the following purposes (Purpose Limitation):
- Translating vernacular trade communications into English or your preferred regional language.
- Drafting professional, culturally calibrated commercial negotiation and debt follow-up replies.
- Extracting and verifying invoice mathematics, GSTIN legitimacy, and statutory HSN tax rates for your Input Tax Credit (ITC) ledger.
- Retrieving and forwarding your uploaded master trade catalogs upon query.
4Data Retention & Storage Limitation Schedule
Under DPDPA Section 5(3), personal data is retained only for the duration necessary to satisfy the specific commercial purpose:
| Data Asset | Retention Window | Purge / Deletion Mechanism |
|---|---|---|
Forwarded Chat Context (session_memory) | 30 Minutes (TTL) | Automated database timestamp purge |
| Invoice Image Files | 12 Months (or user-managed) | Private encrypted bucket with RLS deletion |
| Extracted Tax Records | Active account tenure | Exportable and deletable from Web Portal |
| Payment Recovery Reminders | 90 Days | Merchant-controlled debtor record cleanup |
5Sub-Processors & Third-Party Services
Under DPDPA Section 5(8), we execute valid Data Processing Agreements with trusted enterprise sub-processors. All processing is governed strictly by our instructions:
6Intermediary Status & Section 79 Safe Harbor (IT Act, 2000)
SANCHAR functions as an Intermediary as defined under Section 2(1)(w) of the Information Technology Act, 2000. In accordance with Section 79 of the IT Act:
- SANCHAR provides an automated software conduit for user-directed messages, invoices, and documents. We do not initiate the transmission, select the receiver, or modify the underlying information transmitted.
- We observe statutory due diligence under Rule 3 of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
- Notice & Takedown: If any party believes that content transmitted or stored through SANCHAR infringes their intellectual property or violates applicable laws, they may submit a formal takedown notice to complaint@sancharbiz.in. We act expeditiously upon verified complaints within statutory timelines.
7Your Statutory Rights as a Data Principal
Under Chapter III of the DPDPA 2023, you enjoy full statutory rights regarding your personal data:
- Right to Access: View all stored files, invoices, and profile records anytime via the web portal or by texting
MY DATAon WhatsApp. - Right to Correction & Updating: Rectify incomplete or outdated details directly in the dashboard.
- Right to Erasure & Consent Withdrawal: Text
STOPorDELETE MY DATAto withdraw consent, cease all processing, and initiate immediate data purging. - Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity (DPDPA Section 14).
- Right to Grievance Redressal: Direct statutory access to our Grievance Officer.
8Grievance Redressal Officer & Dispute Escalation
In accordance with Section 5(7) of DPDPA 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, our designated Grievance Redressal Officer is:
Entity: ARTHEON (Operating Platform: SANCHAR)
Designated Grievance Email: complaint@sancharbiz.in
Physical Postal Address: Giridhari Executive Park, Bandlaguda, Peeramcheri, Hyderabad, Telangana, India (PIN: 500091)
WhatsApp Escalation: Text keyword GRIEVANCE to the SANCHAR business number
⏱️ Statutory Acknowledgment: Within 48 hours of receipt.
⏱️ Formal Resolution SLA: Within 15 to 30 calendar days.
If your grievance is not resolved satisfactorily within 30 days, you have the statutory right under DPDPA Section 18 to file an appeal before the Data Protection Board of India (DPBI) or the Telecom Disputes Settlement and Appellate Tribunal (TDSAT).