Privacy Policy

This Privacy Policy explains how Terrisage processes personal data on the Platform.

Terrisage is a B2B CRM. Customers may upload personal data of their leads/clients/owners and business contacts. In those cases, the Customer typically decides why and how that data is used, and Terrisage processes it to provide the Platform.

1. Personal data we may collect/process

A. Account and User data (CRM Users):

• name, email, phone (if provided), role, organisation name
• authentication and login records, access logs

B. Customer Data uploaded by Customers:

• lead/contact details (name, phone, email, preferences, notes), whether entered by the Customer or received through the Customer's web forms, public enquiry links, property portals, Google Forms and other integrations the Customer connects
• owner/representative contact details (if uploaded by Customer)
• listing/project documents and attachments (if uploaded by Customer)
• WhatsApp conversations between the Customer and its leads/clients conducted through the Platform (see Section 9)
• responses left on share links the Customer sends to a lead (the name the recipient gives, the projects or configurations they mark as liked, and any free-text comment)
• voice notes and pasted text that Users submit for transcription, transliteration or automatic field extraction

C. Device and technical data:

• device type, OS/app version, browser type
• IP address, security logs
• crash diagnostics and performance telemetry (where enabled)

D. Data received from Meta Platforms:

• lead form submissions from Meta Lead Ads connected by the Customer (name, phone, email and form answers)
• WhatsApp Business Platform data for the Customer's connected WhatsApp business number: the lead's phone number, WhatsApp profile name, message content (text, media, documents, voice notes), message delivery status, and opt-out signals
• Facebook Page and WhatsApp Business Account identifiers and access tokens needed to keep the connection working

2. Why we process personal data

We process personal data to:

• provide and operate the Platform (authentication, access control, CRM record management)
• maintain security, prevent fraud and abuse, and keep audit logs
• provide customer support and troubleshoot issues
• improve performance, reliability, and product features
• generate Aggregated Insights (aggregated and de-identified)

3. Legal basis / permitted use (India)

We process personal data as permitted under applicable Indian law (including the Digital Personal Data Protection Act, 2023), including to provide services requested by the Customer, maintain security, meet legal obligations, and for other lawful purposes. Where consent is required, it should be obtained by the relevant party (Customer and/or Terrisage, depending on the context).

4. Sharing of personal data

We may share personal data with:

• service providers under contractual obligations: hosting and file storage, error monitoring and crash diagnostics, email and push notification delivery, mapping and geocoding of addresses, payment processing (Razorpay, Stripe), security, analytics and support tooling
• Meta Platforms, Inc. and its affiliates, to send and receive WhatsApp messages and to receive Meta Lead Ads submissions on the Customer's behalf. Data shared with Meta is governed by Meta's own terms and privacy policy
• AI service providers, under contractual obligations, to transcribe voice notes, summarise conversations and suggest CRM field values. Conversation content is sent only for that purpose and is not used by those providers to train their models
• government or law enforcement where required by law/valid process
• professional advisers (legal, audit, compliance) where necessary

We do not sell personal data as such.

5. Data retention

We retain personal data as long as necessary to:

• provide the Platform during the subscription
• maintain security/audit logs
• comply with legal obligations and resolve disputes

After account expiry/termination, we may retain limited records and backups for a limited period as part of standard technical practices and compliance.

6. Security

We use reasonable administrative, technical and organisational safeguards to protect personal data. No system can guarantee absolute security.

7. Data Principal rights / requests

Depending on applicable law, individuals may request access, correction, or deletion of their personal data and raise grievances.

• If you are a Terrisage User: contact@terrisage.com
• If you are a lead/contact stored by a Customer: contact the Customer organisation that collected your data (they control that data); Terrisage will assist the Customer where appropriate.

8. Grievance redressal

9. WhatsApp Business messaging and Meta platform data

A. What the WhatsApp feature does

Customers may connect their own WhatsApp business number to the Platform through Meta's WhatsApp Business Platform. When connected, the Platform can:

• send an initial WhatsApp message to a lead who has enquired with the Customer, using a Meta-approved message template
• receive and display replies inside the Customer's CRM
• let the Customer's Users reply to the lead from the CRM
• run an automated assistant that asks the lead short qualifying questions (for example preferred size, budget and timeframe) and records the answers for a User to review

The automated assistant only proposes information. A User of the Customer decides whether to apply it to the lead's record. The assistant never changes the lead's status on its own.

B. Data we receive from WhatsApp

For each conversation we receive and store the lead's phone number, WhatsApp profile name, message content (text, images, documents, location and voice notes), timestamps, delivery and read status, and any opt-out request. Voice notes may be transcribed to text so that Users can read them.

C. Why we process it

• to deliver and display messages between the Customer and its leads
• to help the Customer respond faster through the automated assistant
• to keep a record of the conversation on the lead's CRM record
• to honour opt-out requests and keep the Customer within WhatsApp's messaging policies

D. Consent and opt-out

The Customer is responsible for having a lawful basis to message a lead, such as the lead's enquiry or consent. Every initial message includes a way to opt out (for example replying “STOP”). Once a lead opts out, the Platform blocks further business-initiated messages to that number for that Customer.

E. Retention

WhatsApp conversations are retained as part of the Customer's data for as long as the Customer's subscription is active, and are deleted or anonymised after termination in line with Section 5. Access tokens for Meta connections are stored encrypted and are no longer used once the Customer disconnects the integration.

F. Deleting data received from Meta

• Customers can disconnect WhatsApp or Meta Lead Ads at any time from Account → Integrations in the Platform. Disconnecting deactivates the connection, unsubscribes it from Meta and stops all further data exchange. Stored access tokens are deleted when a Meta data-deletion request is received or when the Customer's account is deleted.
• Anyone whose data Terrisage received from Meta, including individuals who removed the Terrisage Messaging app from their Meta account, can request deletion by emailing contact@terrisage.com with the subject line “Meta data deletion”. We confirm within 7 days and complete the deletion within 30 days, except where retention is required by law.
• Meta's automated data-deletion callback is also supported. A confirmation code and status link are returned to Meta when a deletion request is received.

G. Meta's role

Meta Platforms operates WhatsApp and the Meta Business tools. Meta's handling of the data that passes through WhatsApp is described in the WhatsApp Privacy Policy and Meta Privacy Policy. Terrisage does not sell Meta platform data and does not use it for advertising.

10. Updates to this Policy

We may update this Policy from time to time. The latest version will be available on the website or within the Platform.