Privacy policy
Last updated 16 October 2026
This policy explains how SO MANY THOUGHTS (“CraftTint”, “we”), a business registered in Haryana, India (GSTIN 06AENPA2479J2ZB), handles personal data when it provides automation services, including the TGOA Messaging app that connects to the WhatsApp Business Platform operated by Meta.
Who this covers
- Client businesses: the retailers who connect their accounts (for example a WhatsApp Business Account, Shopify store or payment gateway) to our systems.
- Their customers: people who message a client business on WhatsApp or place an order with it.
- Visitors to crafttint.com.
For the customers of a client business, that business is the data controller and we process data on its behalf and on its instructions.
What we collect
| Source | Data | Why |
|---|---|---|
| WhatsApp Business Platform | Phone number and WhatsApp profile name of people who message the business; message content and media they send; delivery and read statuses; payment status for in-chat orders | To reply, send the order and shipping updates the customer asked for, and process in-chat payments |
| Embedded Signup (client business) | WhatsApp Business Account ID, phone number ID, business portfolio ID, an access token granted by the business, and, if the business chooses, a one-time sync of contacts and the last 180 days of one-to-one chats | To operate the business's number on its behalf and keep the WhatsApp Business app and the API in step (coexistence) |
| Order forms in WhatsApp Flows | Name, delivery address, product choices | To create and deliver the order |
| Client's store and gateway | Order and payment references (never full card or bank details) | To turn a confirmed payment into a store order |
| crafttint.com | What you send us on WhatsApp or by email | To reply to you |
We do not buy contact lists, sell personal data, or use WhatsApp data to build advertising profiles. We do not use data received from Meta's platform for any purpose other than providing the service to the business it belongs to.
How we use it
- Answering customer enquiries on behalf of the client business, including by automated replies and by the business's staff.
- Sending utility messages the customer expects: order confirmations, payment reminders and shipping updates.
- Creating orders in the client business's own store after a payment is confirmed.
- Keeping logs needed to run, secure and troubleshoot the service.
Customers can stop messages from a business at any time by replying “stop” or by blocking the number in WhatsApp.
Where it is stored and who can see it
Data is stored in our accounts with Cloudflare (Workers and D1 database), protected by access controls and with webhook signatures verified on every message received from Meta. Access tokens are stored as encrypted secrets or in restricted tables. Only the client business and the CraftTint staff who operate its account can see its data.
We share data only with the services needed to deliver the service: Meta (WhatsApp), the client business's own store platform (such as Shopify) and payment gateway (such as Razorpay), and Cloudflare as our hosting provider. We may disclose data if Indian law requires it.
How long we keep it
- Message and status records: while the business uses the service, then deleted within 30 days after it disconnects.
- Access tokens: deleted as soon as a business disconnects or asks us to remove them.
- Order and payment references: kept as long as tax and accounting law requires.
Your choices and rights
You can ask us to access, correct or delete personal data we hold about you. If you are a customer of one of our client businesses, you can also contact that business directly. See data deletion for how to make a request.
Security
We use HTTPS everywhere, verify Meta's webhook signatures, keep secrets out of source code, and limit access to the people who need it. No system is perfectly secure. If a breach affects your data, we will tell the affected business and you as Indian law requires.
Children
Our services are for businesses and are not aimed at children under 18.
Changes
We will post any changes on this page and update the date above.
Contact
SO MANY THOUGHTS (CraftTint), Nirman Kunj, Sector 16A, Faridabad, Haryana 121002, India
Email hello@crafttint.com · WhatsApp or call +91 88007 52126