Privacy Policy

The RaZone Customer Growth is operated by Razone Media House, Sector 56, Chandigarh. The grievance officer is Rakesh Kumar. Write to help@razone.in and mark the message for the grievance officer.

The RaZone Customer Growth is a separate product from the RaZone influencer marketplace. This policy is for business accounts on app.razone.in: owners, invited staff, and the customer records stored for a single business.

A guest who messages one business is stored as your business’s customer. The same phone number can exist as a separate customer at another account. This application does not build a shared customer profile across businesses.

When RaZone creates a business and its owner signs in, the application stores:

• User name, email address, a scrypt password hash, and platform role
• Membership role for your business (owner or staff)
• Invitation email, role, and a hashed invite token
• Password-reset token hashes when a reset is requested

Profile fields that can be saved are the trading name, an optional legal name, phone number, email, address, city, state, country (default India), time zone (default Asia/Kolkata), currency (default INR), logo URL, brand colour, offer title, offer description, and WhatsApp call-to-action label.

This product does not store a food menu. QR pages show the business name, offer text, and a link to that business’s WhatsApp number.

Each QR code stores a name, source type (table, counter, bill, packaging, Instagram, poster, or other), source name, a public token, optional reward text, and any linked coupon or campaign. The founding plan allows up to 10 QR codes per business.

Opening a QR page can record that the code was scanned, the time, and a hash of the visitor IP address. A scan does not reveal the guest’s phone number. A phone number is stored when the guest messages the business’s WhatsApp number or is otherwise entered for your business.

Each business has one WhatsApp connection in this version. Connecting it, through Embedded Signup or the manual form, stores the WhatsApp Business Account id, phone number id, display phone number, display name, business account name, connection status, webhook status, and billing owner. The access token is stored as AES-256-GCM ciphertext. The dashboard does not display the token.

The default billing owner is the business. The application calls the Meta WhatsApp Cloud API for that business’s phone number id: token exchange, app subscription, template sync, and sending. Approved template names, language, category, status, and template components returned by Meta can be stored. Outbound message logs store the message type, template name, category, provider message id, and delivery status. They do not store a separate copy of the rendered message body.

Inbound webhooks are stored as a reduced payload: sender, profile name when Meta sends it, message text, message id, and delivery status updates. That text is used to record opt-in or opt-out and to attribute a QR token. Promotional sends run only after an explicit opt-in. Reply STOP, UNSUBSCRIBE, CANCEL, or OPT OUT to stop promotional messages for your business.

Disconnecting WhatsApp in the dashboard clears the stored access token and phone number id and marks the connection disconnected. It does not delete message logs, webhook records, or data held by Meta.

For each business, a customer row can include:

• Name, phone number, normalised phone, and WhatsApp id
• Optional email, source, and source QR code
• Visit count, last interaction, and staff-entered coupon redemption amounts
• Opt-in status, opt-in and opt-out times, consent source, and consent notice version
• Tags, consent log entries, and customer events

Tracked revenue is the order amount a staff member types when redeeming a coupon. It is not a feed from a billing or point-of-sale system. Point-of-sale integration, online ordering, and loyalty points are not part of this version.

• To create the business account, authenticate owners and staff, and send invite or password-reset email
• To show the business’s QR offer page and count scans
• To keep your business’s customer list, consent, coupons, campaigns, and automations
• To send WhatsApp messages from your business’s own number and record delivery status
• To show account analytics and an internal WhatsApp usage count
• To record the founding subscription amounts and whether setup has been marked paid
• To keep an audit log of actions such as customer export, customer deletion, and WhatsApp connect or disconnect

Usage counts are labelled tracked usage. A rupee estimate appears only when a verified per-message rate has been configured. The application does not copy Meta’s invoice.

Meta Platforms operates WhatsApp and the Cloud API. When a business is connected, message content, phone numbers, template data, and webhook events pass through Meta. WhatsApp and other Meta services are also governed by Meta’s own terms and privacy policies, including the WhatsApp Privacy Policy and the WhatsApp Business Terms.

Password-reset and invitation email is sent through Resend when a Resend API key is configured. Questions about this policy go to help@razone.in.

Subscription rows can store Razorpay customer and subscription identifiers if an administrator records them. RaZone Customer Growth fees may be paid by Razorpay or in cash. This application does not collect card numbers. Razorpay processes a Razorpay payment under its own terms.

Business data for this product is stored in its own PostgreSQL database. Queues and rate-limit keys use Redis under the prefix razone-growth. Access tokens are encrypted before they are written.

Passwords are stored as scrypt hashes. WhatsApp access tokens are stored as AES-256-GCM ciphertext. QR scan logs store a hash of the IP address. Sending uses the WhatsApp connection loaded for your business on the server. A business cannot choose another business’s phone number id from the browser.

No automatic retention schedule or automatic account deletion is implemented. A business owner can export your business’s customers as a CSV and can delete an individual customer from the dashboard. Deleting a customer removes your business’s customer row and the related records that the database deletes with it. It does not delete the same phone number at another account, and it does not delete Meta’s copy of WhatsApp messages.

Account-level deletion is requested by email. See the data deletion page. After the owner is verified, RaZone completes that deletion within 30 days.

Payment records are kept after the rest of the business account is deleted. These include the subscription amounts, whether setup was marked paid, and Razorpay identifiers when a payment was recorded. They are kept so Razone Media House can respond to a government authority or the police.

Business owners can update the business profile, disconnect WhatsApp, export customers, and delete an individual customer. Staff accounts can redeem coupons and view the business. Staff cannot export or delete customers. Guests can opt out of promotional WhatsApp messages by replying STOP, UNSUBSCRIBE, CANCEL, or OPT OUT.

To ask a question about this policy or to request deletion of a business account, email help@razone.in. Grievance officer: Rakesh Kumar, Razone Media House, Sector 56, Chandigarh.