Privacy Policy

AppShakti | Last updated: March 2026

1. Information We Collect

We collect information you provide when using AppShakti to create your business app, including your business name, phone number, services, and location. We also collect your WhatsApp number to enable our conversational app-building service.

2. How We Use Your Information

We use your information to:

• Create and host your business Progressive Web App (PWA)
• Send you app updates and order notifications via WhatsApp
• Improve our services and user experience

3. Data Sharing — Sub-Processors (DPDPA §8(7))

We do not sell your personal data. We use the following sub-processors strictly to operate the AppShakti platform. Each is bound by their published Data Processing Agreement:

• Railway — application hosting and the database (servers located in the EU/US, depending on region selection)
• Cloudinary or Amazon Web Services (S3) — image storage (configurable per deployment; AWS region ap-south-1, Mumbai, where used)
• Cloudflare — DNS and CDN for custom domains
• Meta Platforms (WhatsApp Business API) — message delivery to you and your customers (data flows through Meta servers, primarily US/Ireland)
• Anthropic — AI-powered features (chatbot, prescription medicine extraction). Personally identifiable information is locally redacted before transmission wherever feasible (see § 11)
• Razorpay — payment processing (data resident in India)
• Microsoft Clarity — anonymous analytics (see § 7)
• Google — Ads conversion tracking and search indexing (Google Tag, Indexing API)

4. Data Storage & Cross-Border Transfers (DPDPA §16)

Your business data (SQLite database) is stored on Railway's infrastructure, currently provisioned in the United States. Image uploads are stored either in AWS Mumbai (ap-south-1) or on Cloudinary's global CDN, depending on deployment configuration. Payment data stays in India (Razorpay). WhatsApp messages transit Meta servers (US/Ireland). AI inference requests transit Anthropic (US).

India has not gazetted any country to which transfers are restricted under § 16 of the DPDPA at the date of this notice. We will update this section if that changes. You may request deletion of your data at any time using § 6 below.

5. Customer Data

Order information submitted by your customers through your AppShakti-powered app is stored on your behalf. You are responsible for how you use and share that data.

6. User Data Deletion (DPDPA §12)

To delete your AppShakti account and all associated data, you have three options:

• Send "deleteapp" via WhatsApp to our bot, then confirm with "haan delete karo"
• Use the Delete Account option in your dashboard (sends an OTP to your registered WhatsApp number)
• Email us at hello@appshakti.com

Once confirmed, your account enters a 48-hour cool-off window. You can cancel any time in those 48 hours by sending "cancel delete" on WhatsApp. After the window closes, your business profile, all customer orders, bookings, prescriptions, photos, generated PWA, and uploaded files are permanently and irreversibly erased. Only an immutable audit-log entry (proving you requested the deletion) is retained for compliance.

7. Analytics & Session Recording

To improve our service, we use Microsoft Clarity for anonymous session recording and analytics. Clarity captures how users interact with the app (clicks, scrolls, page views) but does not capture passwords, payment details, or other sensitive form inputs. Sessions are recorded only after you consent via the in-app banner. You may opt out at any time by clearing your browser's local storage. For more information, see Microsoft Clarity's Terms.

8. Cookies

AppShakti uses minimal cookies and local storage for session management and analytics consent. We do not use advertising cookies.

9. Contact

For privacy-related questions, contact us at hello@appshakti.com or visit appshakti.com.