Privacy Policy

1. Information We Collect

To provision accounts, execute digital software licenses, and ensure system security, CATIF collects the following information:

• Client Identification Details: Full Name, Business Name, and chosen Username.
• Email Address: Collected for purchase receipts, invoice generation, critical security notifications, and password recovery.
• Mobile / WhatsApp Number: Collected for mandatory multi-factor authentication, security fraud prevention, and onboarding verification.
• Encrypted Passwords: Passwords are never stored in plaintext; they are hashed using industry-standard salted PBKDF2 SHA-512 cryptographic functions.
• Payment Transaction Data: When paying via Zoho Payments, we receive transaction IDs, order references, and payment status. CATIF does NOT store full credit/debit card numbers or bank CVVs on our servers.

2. How We Use Collected Information

We use your information exclusively for legitimate business and operational purposes:

• Provisioning your WhatsApp Bulk Sender, Chatbot, or Social Media publishing workspaces.
• Enforcing subscription quotas (e.g., 24-hour message limits and social scheduling caps).
• Transmitting transactional receipts, invoices, and renewal alerts.
• Responding to your direct customer support inquiries within our 24-hour SLA.
• Detecting, preventing, and mitigating fraudulent, abusive, or unauthorized account usage.

3. WhatsApp Session Keys & OAuth Credentials

CATIF utilizes decentralized session isolation:

• WhatsApp QR Connections: Your WhatsApp pairing keys and credentials are encrypted on the server in dedicated isolated directories. CATIF does not read, archive, or mine the contents of your private personal chats.
• Social Media Tokens: Social platform tokens (YouTube, Facebook, Instagram, LinkedIn) use official OAuth 2.0 encrypted bearer tokens and are used solely to dispatch posts scheduled by you.

4. Data Sharing & Third-Party Gateways

CATIF does not share your personal information with third parties, except in the following necessary contexts:

• Payment Gateways: To authorize UPI, card, and netbanking transactions via trusted gateways like Zoho Payments in full compliance with PCI-DSS guidelines.
• Legal & Regulatory Compliance: If mandated by Indian law enforcement, court order, or statutory authority under the Information Technology Act, 2000.

5. Data Retention & Deletion Rights

You have full control over your information. Upon cancellation of your subscription or request for account closure, you may email Support@catif.in to request the permanent deletion of your account records, contacts, and session keys within 7 business days.

6. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the contact details of the Grievance Officer are provided below: