Privacy Policy

QHT Messaging ("we", "us", "our") is a WhatsApp Business team-inbox service available at chat.hairmedindia.com, operated by QHT Clinic, India. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices and rights you have.

This policy covers two groups of people: (a) customers — businesses and their team members who sign up for and use QHT Messaging; and (b) end users — people who message a business on WhatsApp whose conversations are processed through our service on that business's behalf.

We collect the following categories of information:

• Account data — name, email address, business name, and login credentials (passwords are stored only in hashed form) when you create a QHT Messaging account.
• Team member details — names, email addresses, roles, and permissions of teammates a customer invites into their workspace.
• WhatsApp messages and contacts — messages (text, media, and attachments), contact phone numbers, profile names, and delivery/read metadata exchanged between a business and its customers on WhatsApp. This data is transmitted through Meta's WhatsApp Business Platform and we process it on behalf of the business that owns the WhatsApp Business number.
• Payment data — subscription payments are processed by our payment partners (Razorpay and PayU). We receive transaction identifiers, payment status, and billing details; we do not store your full card number, CVV, or UPI PIN on our systems.
• Usage and log data — IP address, browser type, pages visited, actions performed in the app, and timestamps, collected to keep the service secure and reliable.

We use the information described above to:

• Provide, operate, and maintain the QHT Messaging service, including delivering and displaying WhatsApp conversations to the right workspace and team members;
• Set up and manage accounts, workspaces, roles, and permissions;
• Process subscription billing and detect failed or duplicate payments;
• Provide customer support and respond to enquiries;
• Monitor, troubleshoot, and improve performance, security, and reliability of the service;
• Comply with applicable law, and enforce our Terms of Service and acceptable-use rules (including WhatsApp policy compliance).

We do not use the contents of WhatsApp conversations for advertising, and we do not sell personal data to anyone.

QHT Messaging connects to WhatsApp through Meta's official WhatsApp Business Platform (WhatsApp Cloud API). Messages sent and received through the service are relayed via Meta's systems and are subject to Meta's own terms and privacy practices, including the WhatsApp Business Terms of Service and Meta's privacy policies.

For WhatsApp conversation data, the business you are chatting with is responsible for the conversation; we process that data as a service provider to the business, only to provide the inbox, automation, and reporting features the business has enabled. We handle WhatsApp Business Platform data in accordance with Meta's applicable platform terms and developer policies.

We share personal data only with the parties needed to run the service:

• Meta Platforms — to send and receive WhatsApp messages through the WhatsApp Business Platform;
• Payment processors (Razorpay, PayU) — to process subscription and other payments;
• CRM providers (such as LeadSquared) — where a business has connected its CRM, lead and conversation details are synced to that CRM at the business's direction;
• Infrastructure providers — cloud hosting, database, and storage vendors that we use to run the service, under contractual confidentiality obligations;
• Legal requirements — courts, regulators, or law-enforcement authorities where we are legally required to disclose information.

We never sell personal data, and we do not share it with third parties for their own marketing.

Account and workspace data is retained for as long as the account is active. WhatsApp conversation data is retained for as long as the business that owns the workspace keeps it, so that the team has its conversation history. When an account is closed or a valid deletion request is received, we delete the associated personal data within 30 days, except for records we must keep to meet legal, tax, or accounting obligations (for example, payment records), which are kept only as long as those obligations require.

We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS) for all traffic, encrypted storage with access controls, role-based permissions inside each workspace, hashed passwords, session expiry for signed-in users, and restricted, logged access to production systems. No method of transmission or storage is 100% secure, but we work to protect your data against unauthorised access, alteration, and loss.

You may, at any time:

• Request access to the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Request deletion of your account and associated data (see our Data Deletion page for the exact steps);
• Withdraw consent for processing that is based on consent, without affecting processing already carried out.

To exercise any of these rights, email info@qhtclinic.com from your registered email address. If you are an end user whose WhatsApp messages were processed on behalf of a business, you can contact either that business or us directly — see Data Deletion Instructions.

QHT Messaging uses only essential cookies: session authentication cookies that keep you signed in to your workspace. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies on this site. If you block cookies in your browser, you will not be able to sign in.

QHT Messaging is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify customers by email or an in-app notice. Continued use of the service after a change takes effect means you accept the updated policy.

In accordance with the (Indian) Information Technology Act, 2000 and the rules made under it, the contact details of the Grievance Officer are:

Grievance Officer, QHT Clinic
Email: info@qhtclinic.com

We acknowledge grievances within 48 hours and aim to resolve them within 30 days of receipt.

For any questions about this Privacy Policy or how we handle your data, write to info@qhtclinic.com or visit our Contact page.