Privacy policy

1. Who we are

IDEAFOLD TECHNOLOGIES PRIVATE LIMITED (“Holabolo”, “we”). Holabolo is our product. Questions about this policy: [email protected].

2. Our two roles

For our clients’ accounts and the staff who sign in to Holabolo, we decide how data is used: we are the Data Fiduciary. For the contacts and messages our clients manage in Holabolo, the client decides: the client is the Data Fiduciary, and we process that data only on their instructions, as their Data Processor.

3. What we collect

• Account details: name, email, phone and role.
• Sign-in records: time, IP address and device.
• Business details: company name, GSTIN and billing address.
• WhatsApp account details from Meta: business account and phone number IDs, display name.
• Content our clients put in Holabolo, including data received from Meta’s WhatsApp Business Platform: contacts, phone numbers and profile names, labels, messages, templates and media.
• Support conversations with us.

The Holabolo app and this website use no cookies.

4. Why we use it

To provide and secure the service, bill for it, give support, meet legal duties, and improve Holabolo using combined statistics that identify nobody. We never sell personal data, and we never use our clients’ content, or data received from Meta, for advertising.

5. AI features

If a client turns them on, only the part of the data needed for a request is sent to the AI provider to produce the answer. It is not used to train AI models. Clients can turn AI off at any time.

6. Who handles it

Meta, to deliver WhatsApp messages through the WhatsApp Business Platform; the service providers below, who process data for us under contract; and authorities when the law requires it.

7. Where it is stored

Our servers, database and backups are in India (Hostinger, Mumbai). WhatsApp messages pass through Meta’s systems, which may be outside India. Transfers follow the Digital Personal Data Protection Act, 2023.

8. How long we keep it

• Account data: while the account is active, and 90 days after it closes.
• Client content: as the client’s retention settings say, and deleted 30 days after the contract ends.
• Security and access logs: at least 1 year.
• Invoices: as tax law requires (8 years).

9. Security

Encryption of secrets and access tokens, two-factor sign-in, role-based access, audit logs and encrypted backups.

10. Your rights

You can ask for a summary of your data, correct or complete it, erase it, withdraw consent, nominate someone to act for you, and complain. Write to [email protected]. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

11. Deleting your data

• Holabolo users: ask your workspace admin to remove you, or email [email protected] from your account email. We delete your data within 30 days, except what the law requires us to keep.
• People who receive messages from a business that uses Holabolo: reply STOP to stop messages, and ask that business to delete your data; it can do so in Holabolo straight away. You can also email us and we will pass your request on.

12. Children

Holabolo is for businesses. Clients who message about children (for example schools) message parents or guardians and must get consent where the law requires it.

13. Breaches

If a breach affects your data, we tell you and the authorities as the law requires.

14. Grievance Officer

[email protected].

15. Changes

We show the version and date at the top of this page and tell clients before material changes take effect.