Privacy policy
Last updated 13 October 2026
Kidjig Messages is a tool that lets a small business keep its own customer list and send those customers WhatsApp messages — reminders, updates and announcements — and read the replies. This page explains what the service stores and why.
Who is responsible
The service is operated by Kidjig. The business using it decides which customers to add and what to send them; we store that information on their behalf.
What is stored
- Customer details the business enters: name and mobile number, and optionally email, plan, amount, join / due / expiry dates, birthday, notes, and an address — street, area, landmark, town or city, state and PIN code.
- Any extra fields the business invents for itself, and the groups it sorts customers into.
- Messages sent through the service, and whether WhatsApp reported them delivered or read.
- Files sent in a conversation: pictures the business sends, and pictures, voice messages, videos and documents a customer sends back. These are kept so the conversation still reads correctly later; WhatsApp itself deletes its copy after 30 days.
- Replies customers send back to the business's WhatsApp number.
- Message templates the business writes and submits to WhatsApp for approval.
- For the people who sign in for a business: their name, email address and role, their password as a one-way hash, and when they last signed in.
- Basic technical records needed to run and troubleshoot the service.
How it is used
Only to deliver the service: sending the messages the business asks for, showing delivery status and replies, and keeping a history the business can look back on. Customer data is not sold, rented, or used for advertising, and it is not used to train AI models.
Who else sees it
- WhatsApp (Meta) — message content and recipient numbers pass through Meta's WhatsApp Business Platform in order to be delivered. Meta processes them on its own servers, including outside India, under its own terms.
- Google Cloud — the service and its database run on a server rented from Google Cloud in Mumbai, India.
- Cloudflare — the files sent in conversations, and the encrypted nightly backups, are held in Cloudflare's R2 storage, which may keep them outside India.
- Google Fonts — this website and the web app load their typefaces from Google, which sees the network address of the device opening a page. No customer data is sent to it.
- Google Cloud and Cloudflare only store the data for us; neither uses it. No one else sees it, and it is not shared with other businesses using the service.
Messaging rules
Businesses using this service must only message people who expect to hear from them, and must stop when asked. Anyone can reply STOP to a message to ask that business to stop messaging them.
Where it is stored
The service and its database run on Google Cloud servers in Mumbai, India. The files sent in conversations, and the encrypted nightly backups, are held by Cloudflare (R2), which may store them outside India. Messages are delivered through Meta's WhatsApp Business Platform, which processes them on its own servers, including outside India. Files are never on a public address: they are only handed back through the app to somebody signed in to that business.
How long it is kept
Customer records and message history are kept while the business uses the service, and are deleted on request. Files sent in conversations are kept for 365 days, or for a different period agreed with the business, and then deleted. Raw delivery notifications from WhatsApp are kept for about 30 days. Backups are kept for 30 days and then destroyed, so a deletion can take up to 30 days to disappear from every copy.
Your choices
Under India's Digital Personal Data Protection Act 2023 you can ask what is held about you, ask for it to be corrected, and ask for it to be deleted.
If a business messaged you through this service, that business holds your details and the request is theirs to answer — contact them first. You can also write to us at the address below and we will pass it on or act on it directly. How to ask for your data to be deleted.
Keeping it safe
The service is served over HTTPS and passwords are stored only as a one-way hash, so nobody here can read them. The database is not reachable from the public internet. Changing a password signs that account out everywhere else. If we ever discover a breach affecting personal data, we will tell those affected and the Data Protection Board, as the Act requires.
Contact
Email: support@kidjig.com