Who we are
AdSaathi ("we") runs advertising campaigns on Instagram, Facebook, and Google on behalf of small and medium enterprises (SMEs) in India, managed over WhatsApp and a web dashboard. Contact: privacy@adsaathi.in.
What we collect
- Business details you give us on WhatsApp: your name, business name, category, city, WhatsApp number, budget, goals, business hours, and the answers you give about your customers and offers.
- Content you send us: photos of your business, which we use only to create your ads.
- Connected ad accounts: when you connect Meta or Google accounts, we store the access credentials and account identifiers needed to run and optimize your campaigns. We only run ads. We never post on your behalf.
- Campaign performance data: impressions, clicks, spend, and enquiries reported by the ad platforms, used to optimize your campaigns and report to you.
- Payment status: subscription and payment state from our payment processor. We never see or store your card, UPI, or bank credentials.
How we use it
Only to provide the service: creating your ads, launching and optimizing campaigns, sending you reports and service messages on WhatsApp, billing your subscription, and support. We do not sell your data. We do not use one customer's private data to serve another customer.
Visitors to this website
Everything above is about businesses who sign up. Separately, we measure how this website itself is used, so we can tell which pages are useful and whether our own advertising works.
We use Google Analytics for this. It records the pages visited, roughly where in the world the visit came from, the type of device and browser, and which link or advertisement brought the visitor here. We also record when someone taps a button to start a conversation with us on WhatsApp. This is measurement of visits, not of people: we do not ask a website visitor for their name, number, or email, and we do not try to work out who they are.
If you would rather not be measured at all, browser settings and extensions that block analytics will stop it, and the site works normally without it.
Who processes data with us
Service providers we rely on, each receiving only what their role needs: Meta (WhatsApp messaging and ad delivery), Google (ad delivery, AI-assisted ad copy, and website analytics), Razorpay (payments), Sarvam AI (Indian-language ad copy), and our cloud storage and hosting providers. Your ad budget is paid by you directly to the ad platforms and never passes through us.
Data from Google APIs
When you connect your Google Ads account, AdSaathi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We request only the Google Ads scope. We use that access to list the ad accounts you can reach so you can choose one, to create and manage campaigns, budgets, keywords and ads in the account you connected, to read performance figures so we can report them to you and adjust budgets, and to create one conversion action so enquiries can be measured.
We do not read your Gmail, Drive, Contacts, Calendar or any other Google data, and we request no scope that would allow it. We do not sell this data, transfer it for advertising or credit purposes, or allow humans to read it except where you ask us to for support, where the law requires it, or to investigate abuse or a security incident. You can revoke our access at any time from your Google Account permissions, and doing so stops all campaign management immediately.
The information we receive from Google APIs, including the credential that lets us manage your account, is protected by the measures set out in How we protect your data below: encrypted in transit, encrypted at rest with AES-256, held server side only, and never written to a log in readable form. How long we keep it, and how to have it deleted, is in How long we keep it, and deleting it.
WhatsApp messages
We message you on WhatsApp to run the service: reports, alerts about your own campaigns, payment notices, and login links. Reply STOP ALL anytime to pause all campaigns and automation. For any messaging concern, write to privacy@adsaathi.in.
How we protect your data
Security procedures are in place to protect the confidentiality of everything we hold about your business, including the data we receive from Google APIs. In plain terms, this is what those procedures are.
Encrypted in transit. Every connection to AdSaathi uses HTTPS. A request that arrives over plain HTTP is redirected to the secure address before anything is sent, so your data is never carried over an unencrypted connection.
Encrypted at rest. Your business data, your campaign history and the access credentials for your connected accounts are stored in a managed database that is encrypted at rest with AES-256, as are its backups. The photos you send us are held in object storage that is also encrypted at rest with AES-256.
Credentials never leave the server. The access credentials for your connected Meta and Google Ads accounts are used only by our application, server side. They are never placed in a web address, an email, a WhatsApp message or anything rendered in your browser, and they are never passed to any other company. Our logs mask anything credential-shaped before a line is written, so a token cannot escape through an error message.
Access is limited and fails closed. Only the people who operate AdSaathi can reach production systems. Our administrative endpoints reject any request that does not carry a valid key rather than allowing it through when no key is configured.
No passwords to steal. You sign in to the dashboard with a one-time code sent to your WhatsApp number, or a single-use link. We do not ask you to create a password, so there is no password of yours for anyone to guess, reuse or leak.
The narrowest access that works. We request only the Google Ads scope, which is the least access that lets us run your campaigns, and no scope that could reach your Gmail, Drive, Contacts or Calendar. You can revoke our access at any time from your Google Account permissions, and revoking stops our access immediately.
If we ever become aware of a breach affecting your data, we will tell you on WhatsApp and at your registered contact, say what happened, and say what we are doing about it.
How long we keep it, and deleting it
Revoking our access from your Google Account permissions, or from your Meta settings, stops us reaching your account the moment you do it. The credential we hold stops working immediately and campaign management stops with it. To have that credential erased from our systems as well, write to privacy@adsaathi.in and we will remove it. Closing your account removes it along with everything else.
If you close your account, we delete your business profile, your photos, your campaign history and the rest of what we hold about you within 90 days. The one exception is the invoice and payment record that Indian accounting and tax law requires us to keep. We retain that for the period the law sets and use it for nothing else.
Data we received from Google APIs is never kept beyond what the service needs. We do not use it to develop, improve or train generalised artificial intelligence or machine learning models.
You can ask us to delete your account at any time by writing to privacy@adsaathi.in from your registered contact.
Your rights
Ask us anytime to show you the data we hold about your business, correct it, or delete your account and its data. Write to privacy@adsaathi.in from your registered contact and we respond within 30 days. This policy is written to respect the Digital Personal Data Protection Act, 2023.
Changes
If this policy changes in a way that matters, we tell you on WhatsApp before it takes effect. The latest version always lives at this address.