Policies
Privacy Policy
How Vaarta collects, uses and deletes the information you and your customers give us.
Last updated: 8 September 2026
Ayush Dental, trading as Vaarta (“we”), operates a messaging platform built on the WhatsApp Business Platform. This policy explains what we collect, why, and what you can ask us to do about it.
Who the data belongs to
When a business signs up, that business is the Data Fiduciary for its customers' information under the Digital Personal Data Protection Act, 2023. We act as its Data Processor: we process contact details and message content only on that business's instructions.
What we collect
- From the business: name, address, GST or registration details, contact email and phone, and the WhatsApp number being connected.
- From the business's customers: phone number, name, and whatever context the business chooses to store against them — an appointment time, an order number, a due date.
- Message content: messages sent through the platform and replies received, retained so the business can see its own conversation history.
- Technical logs: delivery receipts, error records, and login events, kept for troubleshooting and security.
What we do not do
- We do not sell, rent or share contact lists with anyone.
- We do not use your data or your customers' messages to train machine-learning models.
- We do not send marketing to your customers on our own behalf.
- We do not read message content except when you ask us to investigate a specific problem.
Who else processes it
- Meta Platforms, Inc. — delivers the messages. Message content passes through Meta's WhatsApp Business Platform and is governed by Meta's own terms.
- Our hosting provider — servers in the Mumbai (ap-south-1) region hold the application and database.
- Our payment processor — handles subscription payments. We do not store card numbers.
Where it is stored and for how long
All customer data is stored in India. Message history and contact records are retained for as long as the account is active, and deleted within 30 days of a written deletion request or 90 days after an account closes — except invoices and tax records, which we are legally required to keep for eight years.
Consent and opt-out
Businesses using Vaarta must have the recipient's consent before messaging them. Every recipient can reply STOP, or the equivalent in Malayalam, to end messages; we honour that automatically across all templates and it cannot be overridden.
Your rights
Under the DPDP Act you may ask for access to your data, correction of anything inaccurate, erasure, or the name of any processor handling it. Write to the address below and we will respond within 30 days.
Grievance Officer
Archana Nair · hello@vaartatech.com · +91 86066 64320
Ayush Dental, KRA 166, Kudappanakunnu, Thiruvananthapuram 695043, Kerala, India
Changes
If we change this policy we will email every active customer at least 14 days before it takes effect.