MerzichatPrivacy Policy
This Privacy Policy explains how Merzichat ("Merzichat", "we", "us") collects, uses, shares, and protects information when you use our website, dashboard, and ordering services (together, the "Service"). We act as a data processor on behalf of the merchants who use Merzichat to take orders, and as a data controller for our own account holders and website visitors.
1. Information we collect
Information you or a merchant provide
- Account details — name, business name, email address, phone number, and login credentials for merchants who create an account.
- Catalog & business content — products, prices, images, branding, and business hours uploaded by merchants.
- Order & customer details — when a customer places an order, we process their name, WhatsApp/phone number, delivery address, order contents, and any notes, on behalf of the merchant.
Information collected automatically
- Usage & device data — IP address, browser type, pages viewed, and similar diagnostic data used to operate and secure the Service.
- Cookies — see our Cookie Policy.
Information from WhatsApp / Meta
When a merchant connects a WhatsApp Business number, we receive messages, phone numbers, and profile information necessary to deliver ordering conversations, via the WhatsApp Business Platform provided by Meta. We use this data solely to operate the ordering Service and never to build advertising profiles.
2. How we use information
- To provide, maintain, and improve the Service and process orders.
- To send transactional messages such as order confirmations and status updates.
- To send merchant-initiated broadcasts that the merchant is responsible for, and only where a lawful basis or opt-in exists.
- To provide customer support and respond to enquiries.
- To detect, prevent, and address fraud, abuse, and security issues.
- To comply with legal obligations.
3. Legal bases
Where applicable law requires a legal basis, we rely on: performance of a contract (providing the Service); legitimate interests (securing and improving the Service); consent (certain cookies and marketing messages); and compliance with legal obligations.
4. How we share information
We do not sell personal data. We share information only as needed to run the Service:
- Merchants — order and customer details are shared with the merchant the customer chose to order from.
- Service providers — hosting, database, messaging (Meta / WhatsApp), and payment processors who process data under contract on our instructions.
- Legal & safety — where required by law or to protect rights, safety, and security.
5. Data retention
We retain personal data for as long as an account is active or as needed to provide the Service, then for the period required to meet legal, accounting, or reporting obligations. Merchants can request deletion of customer data at any time.
6. Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@merzichat.com. You can also request deletion via our Data Deletion page. If we process your data on behalf of a merchant, we will refer your request to that merchant.
7. Security
We use technical and organizational measures — including encryption in transit, access controls, and tenant isolation — to protect personal data. No method of transmission or storage is 100% secure, but we work continuously to protect your information.
8. International transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
10. Changes to this policy
We may update this Policy from time to time. Material changes will be posted on this page with a new "last updated" date.
11. Contact us
Questions about this Policy or your data? Email privacy@merzichat.com or support@merzichat.com. This Policy is governed by the laws of India.