Privacy Policy

We only collect and process categories of information that are strictly necessary to deliver, operate, and secure our software services. Depending on how you interact with VartalApp, we process the following types of information:

* We do not collect extraneous sensitive categories of data such as biometric identifiers, political opinions, or religious beliefs.

KelvionTech processes collected information exclusively for legitimate, defined business purposes related to operating and maintaining VartalApp:

When users or customers interact with a business through VartalApp on WhatsApp, our platform receives and processes webhook events and messaging payloads from Meta APIs. This data includes:

• User WhatsApp Phone Number (used solely as the message destination identifier).
• Message text, interactive quick-reply button selections, and list selections.
• Message metadata (such as delivery timestamps, message IDs, and delivery status receipts).
• WhatsApp Business Account (WABA) identifiers and phone number IDs required to authenticate API calls.

Purpose & Compliance Standards

All WhatsApp and Meta platform data processed by VartalApp is utilized strictly and solely for legitimate purposes related to executing, operating, maintaining, securing, and improving the requested messaging workflows on behalf of our business clients, in full adherence to:

• Meta Developer Terms and Meta Platform Terms
• WhatsApp Business Messaging Policy and Commerce Policy
• Applicable data privacy and telecommunication regulations

We do not sell, rent, or trade your personal information. Information is disclosed only under strict, limited circumstances:

KelvionTech retains personal information and communication records only for as long as is reasonably necessary to fulfill the purposes outlined in this Privacy Policy:

• Providing ongoing messaging automation and customer communication workflows.
• Maintaining customer relationship records, active orders, and booking records requested by the business.
• Fulfilling statutory tax, accounting, and legal audit requirements.
• Detecting and resolving fraud, security incidents, or dispute resolutions.

When data is no longer required for these legitimate business or legal purposes, it is securely deleted, purged, or anonymized in accordance with standard data management procedures.

We implement reasonable technical, administrative, and physical safeguards designed to protect personal data from unauthorized access, alteration, disclosure, loss, or destruction:

* Please note that while we implement reasonable security measures, no method of transmission over the internet or method of electronic storage can be guaranteed to be 100% secure.

Our public website utilizes only strictly essential cookies and local session state necessary to deliver basic site navigation, theme preferences, and form submission security:

• Essential Technical Cookies: Used to maintain web session state and prevent cross-site request forgery.
• No Invasive Advertising Trackers: We do not deploy third-party advertising tracking cookies, behavioral tracking pixels, or data broker scripts on our legal and marketing web pages.

VartalApp integrates with select third-party service providers to deliver essential infrastructure:

KelvionTech is not responsible for the independent data handling practices of third-party platforms outside our direct control.

Depending on your jurisdiction and applicable data protection laws, you may hold the following rights regarding your personal information:

To submit a privacy inquiry or exercise any of these rights, please contact KelvionTech directly at kelviontech@gmail.com. We will process your request promptly in accordance with applicable legal requirements.

VartalApp is an enterprise commercial application designed for businesses and adults. Our service is not intentionally directed toward or designed to collect personal information from children under the age of 18 (or the applicable age of majority in your jurisdiction). If we become aware that personal information of a child has been inadvertently collected without verifiable parental consent, we will take prompt steps to permanently delete such information from our records.

We may revise this Privacy Policy from time to time to reflect changes in our service features, Meta platform requirements, or statutory legal obligations. When changes are published, the revised policy will be posted on this page with an updated "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically.