Privacy Policy

1. Who We Are

Tropicore (“we”, “us”, “our”) is a digital product studio based in Kerala, India. Our website is tropicore.in. For privacy matters, contact us at contact@tropicore.in.

2. Information We Collect

Information you provide directly:

• Contact form: Name, email address, phone number, service interest, and project details.
• Email communications: Any information you include when you email us.
• Project engagements: Business details, project requirements, and payment information (processed via third-party payment providers).
• Meta Platform Data: When clients connect their WhatsApp Business Accounts to our application, we process WhatsApp User Data. This includes customer phone numbers, WhatsApp profile names, and the content of inbound and outbound messages.

Information collected automatically:

• Basic server logs (IP address, browser type, referring URL) — retained for up to 30 days for security purposes.
• We do not use third-party analytics tracking or advertising cookies on this website.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and communicate about projects.
• Provide, manage, and improve our services.
• Send service-related communications (invoices, project updates).
• Comply with legal obligations.
• WhatsApp API Integration: We process Meta Platform Data strictly to provide our clients with automated messaging workflows, transactional updates, and customer support routing.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Meta Platform Data & WhatsApp Business API

What Meta Platform Data we access:

• Customer phone numbers linked to WhatsApp accounts
• WhatsApp display names (profile names)
• Content of messages sent and received via the Business API
• Message delivery and read status metadata

How we use Meta Platform Data:

• Purpose-limited use only: We use Meta Platform Data exclusively to deliver the messaging service the client has contracted us to provide. We do not use it for any secondary purpose.
• No data selling: We never sell, license, or monetise Meta Platform Data in any form.
• No advertising use: Meta Platform Data is never used to target advertisements or build advertising profiles.
• No unauthorised sharing: We do not share Meta Platform Data with third parties except sub-processors who are contractually bound to equivalent privacy protections and only process data on our instruction.

Data retention for WhatsApp data:

Message content is retained only for as long as necessary to deliver and confirm the service, and for no longer than the period agreed with the client. Upon contract termination, all Meta Platform Data is securely deleted within 30 days unless a longer period is required by law.

5. Legal Basis for Processing (GDPR)

Where applicable, we process personal data on the following lawful bases:

• Contractual necessity: To provide services you have engaged us for.
• Legitimate interests: To respond to enquiries and improve our services.
• Consent: Where you have given explicit consent (e.g., subscribing to updates).
• Legal obligation: To comply with applicable laws and regulations.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Project-related data is retained for 5 years after project completion for accounting and legal purposes. Enquiry data from non-clients is deleted after 12 months if no engagement follows. For Meta Platform Data retention, see Section 4 above.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/ TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

8. Your Rights & Data Deletion

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure:Request deletion of your data (“right to be forgotten”).
• Portability: Request your data in a portable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any other rights listed above, contact us at contact@tropicore.in. We will respond within 30 days.

9. Third-Party Services

Our website and services may use the following third-party services. Each has its own privacy policy:

• Meta / WhatsApp Business Cloud API(messaging): facebook.com/privacy/policy
• Vercel(hosting): vercel.com/legal/privacy-policy
• Resend(email delivery, if configured): resend.com/legal/privacy-policy

10. Cookies

This website uses only essential cookies necessary for operation (e.g., session management). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect site functionality.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Significant changes will be communicated to active clients via email.

13. Contact & Complaints

For privacy enquiries or to exercise your rights, contact: contact@tropicore.in. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

For data deletion requests specifically, see Section 8 — Data Deletion above.