Terms of Service & Acceptable Use Policy DPDP Act Privacy Policy & Dual-Role Framework
Governing your day-to-day use of syntwa software, Meta WhatsApp Cloud API bulk messaging, two-way inbox communication, and hosted data processing by Syntista.
- Customer Owns All Data: All contacts, phone numbers, campaign texts, and message logs remain your exclusive intellectual property.
- Direct Meta API Billing: Message conversation fees are billed directly by Meta Platforms, Inc. to your Meta Business Manager without markup.
- Mandatory Opt-In: You must possess verified recipient consent before sending broadcasts; unsolicited spam is strictly prohibited.
Intellectual Property & Customer Data Ownership
All contact lists, telephone numbers, lead profiles, spreadsheets, message variables, template content, customer interaction records, two-way chat logs, and uploaded media attachments (collectively, "Customer Data") submitted to, uploaded onto, or processed via the syntwa software remain the sole and exclusive intellectual property of the Customer.
Syntista acquires no proprietary right, title, interest, or copyright in or to Customer Data. The Customer grants Syntista only a limited, non-exclusive, revocable, non-transferable, royalty-free license strictly to process, host, encrypt, store, and transmit Customer Data solely to the extent necessary to deliver the WhatsApp bulk messaging and Leads Inbox features of the software.
Zero Data Monetization: Syntista does not sell, lease, commercialize, rent, trade, or distribute Customer Data to any third party, nor does Syntista use Customer Data to train artificial intelligence or machine learning models.
Platform IP: Syntista retains all exclusive right, title, and intellectual property interest in and to the syntwa software, source code, database architecture, design systems, algorithms, APIs, and associated documentation.
Software Access & Meta Cloud API Charges
syntwa connects directly to the official Meta WhatsApp Cloud API (Graph API v20.0). All conversation fees (Marketing, Utility, Authentication, Service) are billed directly by Meta Platforms, Inc. to your organization's linked Meta Business Manager account. syntwa assesses no per-message fees or conversation markups.
- Authorized Access Scope: Access to the syntwa deployment is granted to authorized personnel solely for organizational customer communications, broadcast dispatches, and incoming lead management.
- Credential Safeguards: You are solely responsible for maintaining the confidentiality of administrative credentials, Meta System User Permanent Access Tokens, and Webhook verification tokens.
Limitation of Liability
Exclusion of Consequential Damages: To the maximum extent permitted under applicable law, neither party shall be liable to the other for any indirect, incidental, punitive, special, or consequential damages, including loss of profits, loss of business revenue, business interruption, loss of reputation, or loss of goodwill.
Meta Platform Actions: Syntista shall not be liable for any account restrictions, phone number blocks, template rejections, or frequency capping (Meta code 131049) imposed by Meta Platforms, Inc. resulting from messaging behavior or recipient complaints.
Acceptable Use Policy (AUP) & Messaging Obligations
All users and authorized agents using syntwa must strictly adhere to the following acceptable use rules:
Syntista reserves the right to terminate access or revoke API keys immediately upon receiving verified notices of spamming or systemic Meta policy violations.
Operational Reliability & Third-Party Outage Exclusions
syntwa operates as an interface between local servers and Meta's global cloud network. syntwa does not warrant uninterrupted or error-free transmission to the extent affected by third parties. Liability and performance commitments explicitly exclude:
- Meta Third-Party Outages: Outages, downtime, API errors, webhook delays, or template review backlogs within Meta Platforms, Inc.
- Carrier & Internet Disruptions: ISP disruptions, tier-1 telecommunications carrier outages, or cloud infrastructure downtime outside Syntista's control.
- Customer Configuration Faults: Unavailability resulting from expired Meta Permanent Access Tokens, unconfigured Phone Number IDs, invalid webhooks, or local server misconfigurations.
- Force Majeure: Events beyond reasonable control including natural disasters, government internet bans, cyber warfare, or statutory telecom restrictions.
Digital Personal Data Protection Act, 2023 (DPDP Act) Dual-Role Framework
Under the Indian DPDP Act, 2023, Syntista operates in dual distinct legal capacities depending on the context of data processing:
Syntista acts as a Data Fiduciary for administrative user account details, administrator email addresses, authentication passwords, and system login telemetry.
Syntista acts solely as a Data Processor for the customer/lead telephone numbers, recipient names, spreadsheet variables, and chat messages hosted or transmitted through your product instance. You (the Customer) remain the primary Data Fiduciary for your audience.
1. Notice & Categories of Personal Data Collected
In compliance with the transparency mandate under DPDP Rules, we delineate all personal data collected and processed:
2. Specified Purposes of Data Processing
- Facilitating the transmission of WhatsApp broadcasts via Meta Graph API v20.0.
- Ingesting Meta webhook receipts and surfacing incoming replies in the Leads Inbox.
- Cryptographically securing customer phone numbers and message content at rest using AES-256-GCM.
- Managing user authentication and multi-factor session integrity.
- Complying with statutory security and regulatory requirements under Indian law.
3. Data Retention & Erasure Practices
Customer Data is retained only for the duration of the active deployment. Upon decommissioning or written request:
- Organizations have a standard thirty (30) day export window to download all contact lists, export logs, and chat records.
- Following the export window, all hosted Customer Data is permanently purged or cryptographically erased from active databases.
4. Rights of Data Principals under DPDP Act
Data Principals whose personal data is handled enjoy the following statutory rights:
5. Statutory Grievance Redressal Mechanism
In accordance with the DPDP Act and Rules, Syntista has appointed a designated Grievance Officer to address questions, complaints, or security concerns:
If your grievance is not resolved within the prescribed 30-day timeline, you have the right to file an escalation with the Data Protection Board of India (DPBI).