WhatsApp Messaging Policy

This policy describes how Pramanak sends WhatsApp messages on behalf of organizations using our platform. It supplements our Privacy Policy and Terms of Service. We operate in full compliance with Meta's WhatsApp Business Policy and Commerce Policy.

1. What messages we send

Pramanak uses WhatsApp to send transactional and utility messages only. Typical use cases:

• Photo upload links — parent receives a link to upload a student's photo for ID card generation.
• Registration confirmations — participant receives confirmation after registering for an event or tournament.
• ID card / certificate ready — notification when a document is generated and ready to download or collect.
• Event reminders and schedule changes — fixture updates and venue announcements.
• One-time passwords (OTPs) — for account verification where configured.

All outbound messages use pre-approved Meta message templates. Templates must be approved by Meta before they can be used.

2. Opt-in consent

We only message recipients who have given valid opt-in consent. Consent is usually obtained by the organization operating the Pramanak account (for example, a school collecting parent phone numbers during enrolment). Acceptable opt-in methods include:

• A signed enrolment or registration form that mentions WhatsApp communication.
• An explicit checkbox (not pre-ticked) on a digital form agreeing to WhatsApp messages.
• A verbal or written confirmation logged by the organization.
• An inbound message from the recipient to the organization's WhatsApp number.

Organizations are required to retain evidence of consent and must provide it on request. Uploading phone numbers you are not authorised to contact is a violation of our Terms.

3. Opt-out — how to stop messages

You can also opt out by contacting the organization directly, or by emailing privacy@pramanak.com with your phone number in E.164 format.

4. What we will never do

5. Message frequency

Frequency is determined by the sending organization. Typical organizations send 1 to 5 messages per recipient per event or enrolment cycle. There are no daily broadcast blasts. If you feel you are receiving too many messages, reply STOP to opt out or contact the organization.

6. Data we process

For each WhatsApp message, the following data is processed:

• Recipient phone number (in E.164 format, e.g., +919876543210).
• Template name and parameter values (such as recipient name, student name, event name).
• Delivery status from Meta (sent, delivered, read, failed).
• Any inbound reply, stored for review by the sending organization.

Access tokens we hold on behalf of organizations are encrypted at rest using AES-GCM. Webhook events from Meta are verified using HMAC-SHA256 signatures before processing.

7. Retention

• Message records: 180 days from the send date, then automatically purged.
• Webhook events: 30 days.
• Suppression list entries (opted-out numbers): retained indefinitely to prevent re-contact.
• Aggregate delivery statistics may be retained in de-identified form for quality and abuse-detection purposes.

8. Phone number safety

Before any message is sent, the platform validates the phone number through three layers:

1. Format validation: must be valid E.164 format.
2. Pattern checks: numbers with repeating digits (e.g., +11111111111) or sequential digits (e.g., +1234567890) are rejected.
3. Safety registry: numbers marked as TEST_DATA or BLOCKED in our registry are suppressed.

9. Reporting abuse

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified on the platform and via the "Last updated" date at the top of this page.

11. Questions

For questions about our WhatsApp messaging, contact privacy@pramanak.com or see the Contact page.