Legal
Privacy Policy
Last updated 3 October 2026
This Privacy Policy describes how Alpha Jungle ("Alpha Jungle", "the Company", "we", "us", or "our") collects, uses, discloses and safeguards personal data through:
- our website at alphajungle.co (the "Site"); and
- the Alpha Jungle Platform at app.alphajungle.co (the "Platform"), a dashboard that lets businesses send WhatsApp notifications to their customers using the WhatsApp Business Platform provided by Meta.
It applies to visitors of the Site, to prospective and existing clients, to businesses using the Platform, and to the customers of those businesses who receive WhatsApp messages sent through the Platform. Websites or software we build and hand over to a client to operate independently are governed by that client's own privacy policy.
1. Data Controller
Alpha Jungle is a software studio registered and operating in India. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023 and, where relevant, the EU/UK General Data Protection Regulation, Alpha Jungle is the data controller (data fiduciary) for personal data collected through the Site and for data we receive from Meta to operate the Platform.
Where a business uses the Platform to message its own customers, that business decides which customers to message and why, and Alpha Jungle processes those customers' data on the business's behalf to deliver the service.
2. Information We Collect Through the Site
- Contact information: name, email address, optional phone number and message content, submitted through the brief or booking forms on our Contact page or initiated via WhatsApp; for a booked call, also the date and time you chose.
- Payment information: for payments made through a /pay link, Razorpay (our third-party payment processor) collects and processes card, UPI or bank details on our behalf. We receive only the payer's name, email address and the transaction amount for invoicing purposes. We do not collect or store full card or bank account numbers.
- Technical preference data: a light/dark theme selection stored in your browser's local storage, and a coarse region cookie (aj-region, "EU/EEA/UK" or "elsewhere") derived from your IP address at the edge, used only to decide whether to show the cookie banner before Google Analytics runs. Neither value is transmitted to us or held as personal data.
- Usage and analytics data: only where Google Analytics is running (see Section 6): pages and sections viewed, time spent on them, buttons clicked, approximate location derived from IP address, device and browser type, and how you arrived at the Site. This is collected in aggregate and is not used by us to identify you individually.
3. Information We Process Through the Platform
When a business uses the Platform, we process the following data:
- Business account data: the business user's name, email address and login credentials for the Platform.
- WhatsApp Business account data: WhatsApp Business Account IDs, phone number IDs, message templates and access tokens received from Meta, used only to send messages on behalf of that business.
- Recipient data: the WhatsApp phone numbers of the business's customers, the content of messages sent to them (such as order confirmations, booking and payment reminders, and delivery updates), and message delivery status returned by Meta.
Messages are sent only to customers who have opted in by providing their WhatsApp number to the business, for example when placing an order or signing up on the business's website. Businesses using the Platform are responsible for obtaining that opt-in.
We use Platform data solely to provide the messaging service the business has requested. We do not sell it, use it for advertising, use it to build profiles of recipients, or share it with anyone other than the service providers listed in Section 8. Our use of data received from Meta complies with the Meta Platform Terms and WhatsApp Business policies.
4. How We Use Your Information
- To respond to enquiries and briefs submitted through the Contact page or WhatsApp, and to hold and confirm consultation calls you book.
- To provide the Platform, including sending WhatsApp messages on behalf of businesses and showing delivery status in their dashboard.
- To process payments and issue receipts or invoices for services rendered.
- To fulfil legal, tax and accounting obligations.
- To maintain the security and proper functioning of the Site and the Platform.
5. Legal Basis for Processing
Where the GDPR or an equivalent framework applies, we process personal data on the following legal bases: your consent, given by voluntarily submitting a form, initiating contact via WhatsApp, or opting in to receive messages from a business; the performance of a contract, where processing is necessary to deliver a quoted service, provide the Platform or process a payment; and our legitimate interests in operating, securing and improving the Site and Platform, provided those interests do not override your own rights and freedoms.
6. Cookies and Similar Technologies
If you are visiting from the EU, the EEA or the UK, the Site asks before Google Analytics runs. A banner on your first visit asks you to accept or reject analytics cookies, and Google Analytics is not loaded, and no analytics cookie is set, unless you choose Accept. Elsewhere, including India, a pre-consent banner is not legally required, so Google Analytics runs by default. Wherever you are visiting from, you can accept, reject or change your choice at any time using the "Cookie Preferences" link in the footer of any page.
Where Google Analytics is running, it helps us understand how the Site is used. It sets cookies (including _ga and _ga_*) to distinguish one visit from another. These are set by Google and governed by Google's own privacy policy. No advertising cookies or other third-party tracking pixels are used.
The Site also sets one small cookie (aj-region) recording only a coarse region, derived from your IP address at the edge and never a precise location. Separately, the Site stores two local-storage entries, your theme preference and your cookie choice, which stay on your device and are never transmitted to us or any third party.
The Platform uses only essential cookies needed to keep business users signed in. It does not use analytics or advertising cookies.
Typefaces on the Site are self-hosted, so no request is made to an external font service.
7. The Contact Form
The brief and booking forms on our Contact page have no database of their own. Submitting one sends its contents once, from our server to our inbox, as an email (with a copy to the address you entered), through our email delivery provider, Resend. Nothing is stored on the Site's server after that email is sent. From then on it is held as ordinary email correspondence.
8. Third-Party Service Providers
We engage a limited number of service providers. Each processes personal data under its own privacy policy and, where applicable, a data processing agreement with us:
- Meta Platforms, Inc. (WhatsApp Business Platform): transmits WhatsApp messages sent to our number and messages sent through the Platform.
- Vercel Inc.: hosts the Site and the Platform, and generates standard server logs (IP address, timestamp and requested resource) for security and operational purposes.
- [Database provider, e.g. MongoDB, Inc.]: stores Platform account data, WhatsApp configuration and message records.
- Resend, Inc.: delivers emails generated by our Contact page.
- Razorpay Software Private Limited: processes payments made through a /pay link, under its own privacy policy and PCI-DSS obligations.
- Google LLC (Google Analytics): collects the Site usage data described in Section 2.
9. Disclosure of Your Information
We do not sell, rent or trade personal data. It is disclosed only to the service providers named above, only as necessary to deliver the service, and, where legally required, to a court, regulator or public authority as described in Section 10.
10. Requests From Public Authorities
If we receive a request from a public authority for personal data, including data received through the WhatsApp Business Platform, we:
- review the request to confirm it is lawful and properly authorised;
- challenge requests we consider unlawful, overly broad or inconsistent with applicable law;
- disclose only the minimum data strictly necessary to comply; and
- keep a record of each request, our response, the legal basis and the parties involved.
11. International Data Transfers
Alpha Jungle is based in India. Some service providers named in this policy, including Meta, Vercel, Google, Resend and our database provider, may process data outside India. Those transfers are governed by each provider's compliance framework and contractual safeguards.
12. Data Retention
- Site contact and correspondence data: retained for the duration of the engagement plus a reasonable period afterwards for follow-up work, and deleted on request where we are not legally required to keep it.
- Payment and invoicing records: retained for the period required by Indian tax and accounting law.
- Platform message records and recipient phone numbers: retained for [90 days] to show delivery history to the business, then deleted, unless the business deletes them sooner.
- Platform account data and WhatsApp configuration: retained while the business account is active, and deleted within 30 days of account closure or a verified deletion request.
13. Data Security
We apply reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access to production systems, storing access tokens only on the server and never exposing them in the browser, and relying on established processors such as Meta and Razorpay for messaging and payment infrastructure. No method of transmission or storage is completely secure, and no guarantee of absolute security can be given.
14. Your Rights
Subject to applicable law, you may have the right to: request confirmation of whether we hold personal data about you and access to it; request correction of inaccurate or incomplete data; request erasure of your data; restrict or object to certain processing; request a portable copy of data you provided; and withdraw consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.
If you received a WhatsApp message from a business through the Platform, you can stop further messages by replying STOP or contacting that business directly. You can also contact us and we will pass your request to the business and remove your number from our records where we are able to.
15. Data Deletion Instructions
To request deletion of your personal data, including any data received through Meta or WhatsApp:
- Email us at hari@alphajungle.co with the subject line "Data Deletion Request".
- Include the email address or WhatsApp number associated with your data.
- We will verify the request and delete the data within 30 days, except where we are legally required to keep it, and confirm by email once it is done.
Businesses using the Platform can also delete their account and associated data by contacting us at the same address.
16. Children's Privacy
The Site and Platform are directed at business owners and organisations, not children. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete it.
17. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. The "Last updated" date at the top shows when it was last revised. Continued use of the Site or Platform after a revision constitutes acceptance of the updated policy.
18. Contact Us
For any question, request or complaint about this Privacy Policy or our handling of personal data, contact us at hari@alphajungle.co or on the WhatsApp number shown in the footer of this page.
