This Privacy Policy describes how Oliveredge Pvt. Ltd. (Olivergen) collects, processes, stores, and protects data when businesses and their customers interact with the WACRM (WhatsApp CRM) platform hosted at wacrm.olivergen.com and integrated with the Meta WhatsApp Business Cloud API.
We never sell, rent, or broker your customer conversations, phone numbers, or metadata to any third party or advertiser.
Built strictly according to Meta Business Solution Terms, featuring cryptographic HMAC webhook verification and TLS 1.3 encryption.
End-users and business administrators can request instant deletion of their WhatsApp conversation logs and contact records.
This Privacy Policy governs the software application known as WACRM (WhatsApp CRM), developed and operated by Oliveredge Pvt. Ltd. (branded as Olivergen), an enterprise technology entity headquartered in Moradabad, Uttar Pradesh, India.
WACRM is a self-hostable and cloud-managed Customer Relationship Management platform engineered specifically for the WhatsApp ecosystem. The software is accessible to authenticated clients via our production subdomain at wacrm.olivergen.com, and is presented on our primary domain www.olivergen.com.
Depending on how you interact with WACRM, our legal role under international data protection laws (such as GDPR, CCPA, and the Indian Digital Personal Data Protection Act 2023) is defined as follows:
We act as the Data Controller with respect to account holders, corporate customers, and authorized agents who register to use WACRM. This includes user account credentials, billing details, agent logins, and diagnostic usage metrics.
When our business clients use WACRM to connect with their prospective or existing customers via WhatsApp, the business client is the Data Controller of those end-customer conversations. Olivergen acts strictly as a Data Processor, storing and routing WhatsApp messages, contacts, and media according to the instructions and business configuration of our client.
In order to provide our omnichannel WhatsApp CRM, shared inbox, automated message routing, and sales pipeline features, WACRM processes the following categories of information:
WACRM integrates directly with Meta's official WhatsApp Business Cloud API (Graph API). All communications are received through an authenticated HTTPS webhook receiver located at /api/whatsapp/webhook.
To ensure that incoming webhook events originate exclusively from Meta Platforms, Inc. and have not been tampered with or intercepted in transit, WACRM computes and validates an HMAC-SHA256 cryptographic signature using the Meta App Secret against the incoming X-Hub-Signature-256 header. Any request failing this verification is immediately rejected with HTTP 401 Unauthorized.
We process collected data solely for legitimate business purposes necessary to deliver the functionality of the WACRM software:
WACRM strictly adheres to Meta's WhatsApp Business Messaging Policy, WhatsApp Commerce Policy, and Meta Developer Terms:
Businesses utilizing WACRM must obtain explicit, verifiable opt-in consent from end-users before initiating non-transactional or broadcast messages over WhatsApp. Users must clearly understand what types of messages they will receive.
Customers who reply with standard opt-out keywords (such as "STOP", "UNSUBSCRIBE", "CANCEL") are automatically flagged, halting all further automated or broadcast communications unless explicit re-consent is provided.
Olivergen has never sold and will never sell, lease, monetize, trade, or distribute WhatsApp phone numbers, contact books, or message transcripts to third-party advertisers, data aggregators, or external commercial networks.
WACRM works with vetted third-party technology providers to securely deliver messaging, database storage, and hosting:
| Entity | Purpose | Location |
|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business Cloud API transmission & delivery | USA / Global |
| Supabase, Inc. | Encrypted PostgreSQL database, authentication & real-time channels | USA / EU |
| Vercel / Cloud Infrastructure | Application hosting, edge routing & API serverless execution | Global Edge Network |
We employ defense-in-depth security mechanisms designed to protect personal data from unauthorized access, loss, or alteration:
We maintain data only for as long as necessary to fulfill the business purposes specified in this policy:
• Customer Chat History: Retained for the duration of the client's active account subscription or until deleted by the user.
• Temporary Webhook Logs: Diagnostic raw payload delivery logs are routinely recycled and permanently purged every 30 to 90 days.
• Account Deactivation: Following workspace closure or cancellation, customer database entries and media files are hard-deleted within 30 days.
In accordance with Meta Developer Platform policies and global privacy regulations (GDPR, CCPA, and Indian DPDP Act), WACRM provides clear, accessible methods for individuals and enterprise administrators to request the complete deletion of their data.
If you are an end-user who has exchanged messages over WhatsApp with a business powered by WACRM, you may request full deletion of your contact profile, message transcripts, and media files through any of the following:
DELETE MY DATA directly in the WhatsApp chat thread with the business."WhatsApp Data Deletion Request" specifying your WhatsApp phone number (including country code).Workspace administrators can delete individual contacts or perform a complete data purge directly inside the WACRM console:
To revoke WACRM's access to your WhatsApp Business Account (WABA):
Regardless of your geographic location, Olivergen guarantees the following privacy rights to all users:
If you have questions, feedback, or regulatory inquiries regarding this Privacy Policy or our Meta WhatsApp Business integration, please contact our Data Protection Team: