Privacy Policy

At IT Spar, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, transfer, and safeguard information when you visit our website or use our services, including our CRM products (CRMDost and SalePro).

This Policy applies to website visitors, prospective customers, customers, and authorized users of our services. It does not apply to third-party websites, products, or services that we do not own or control.

Please read this Policy carefully. If you do not agree with the terms, please do not access or use our services.

We collect information in several ways when you interact with our websites and services:

2.1 Personal Data

We may collect personally identifiable information, such as:

• Name
• Email address
• Phone number
• Billing address
• Payment information
• Company information
• Job title

This information is collected when you:

• Register for an account
• Subscribe to our services
• Request information about our services
• Fill out a contact form
• Participate in surveys or feedback forms

2.2 Non-Personal Data

We may also collect non-personal information about your interaction with our websites and services, including:

• Browser type
• Operating system
• IP address
• Pages visited
• Time and date of visits
• Referring website
• Other anonymous usage data

2.3 Data in Our CRM Products

If you use our CRM products (CRMDost and SalePro), we process the data you input into these systems. This may include contact information, sales data, customer interactions, and other business-related information. You control this data and are responsible for ensuring you have the necessary rights to collect and process it.

2.4 Sensitive Data and Payment Data

We do not request unnecessary sensitive personal data. Payment data is processed by authorized payment processors according to their security and compliance obligations. We retain only the minimum payment-related records necessary for billing, reconciliation, fraud prevention, and legal compliance.

We use the information we collect for various purposes, including:

• Providing, operating, and maintaining our services
• Improving, personalizing, and expanding our services
• Understanding and analyzing how you use our services
• Developing new products, services, features, and functionality
• Communicating with you, either directly or through partners, for customer service, updates, and marketing
• Processing your transactions
• Finding and preventing fraud
• Compliance with legal obligations

We use cookies and similar tracking technologies to track activity on our websites and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use cookies for:

• Keeping you signed in
• Understanding how you use our website
• Personalizing your experience
• Analyzing the effectiveness of our marketing campaigns

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our services.

4.1 Cookie Choices

Where required by law, we seek consent before placing non-essential cookies. You can also adjust browser controls to delete or block cookies, though this may affect certain features.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

We maintain security measures including:

• Encryption of sensitive data
• Regular security assessments
• Access controls
• Secure data storage practices
• Employee training on data protection
• Incident response and data breach notification procedures, including notifying affected individuals and regulators within 72 hours when required by law.

We may share your information with third parties in certain situations:

• Business Partners: We may share your information with our business partners to offer you certain products, services or promotions.
• Service Providers: We may share your information with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf.
• Analytics Providers: We may share anonymized usage data with analytics providers such as Google Analytics to help us improve our services.
• Legal Requirements: We may disclose your information where legally required to comply with law, governmental requests, judicial proceedings, court orders, or legal processes.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition.

6.1 No Sale of Personal Data

We do not sell personal information. We also do not share personal information for unrelated third-party direct marketing.

We provide WhatsApp integration features using Meta's WhatsApp Business Platform. When a customer administrator chooses to connect WhatsApp, we process Meta Platform Data strictly to enable onboarding, account connection, messaging operations, and webhook delivery for that customer.

7.1 Categories of Meta Platform Data we process

• WhatsApp Business Account identifiers, such as WABA ID
• Phone number identifiers and display metadata
• Access scopes and integration status metadata
• Webhook event payloads required for message delivery, message status, and integration reliability

7.2 How and why we use this data

We use this data only to:

• complete Embedded Signup and account linking,
• subscribe the connected business account to required webhook events,
• enable inbound and outbound WhatsApp messaging features requested by the customer,
• monitor reliability, prevent abuse, and maintain security.

We do not use Meta Platform Data for unrelated advertising, resale, or personal profiling.

7.3 Roles and responsibility

For customer CRM data, the customer organization is generally the controller and IT Spar acts as processor or service provider. For platform and account operations, security, fraud prevention, billing, and legal compliance, IT Spar may act as an independent controller where required by law.

7.4 Data sharing

We share data only with:

• Meta entities as required for WhatsApp Platform operation,
• infrastructure and service providers acting on our instructions,
• authorities where legally required.

7.5 Retention for WhatsApp integration data

We retain integration metadata and logs only for as long as needed to provide the integration, support troubleshooting, meet legal obligations, and enforce security. When a customer disconnects WhatsApp or closes the account, we delete or anonymize data according to our retention schedule, except where continued retention is legally required.

7.6 Security controls

We apply technical and organizational safeguards including access controls, encryption in transit, least-privilege access, and monitoring of integration events.

7.7 Data subject and customer requests

To request access, correction, deletion, portability, or restriction related to personal data processed through our services, contact us using the details in the Contact section. We also support customer-admin deletion and disconnection workflows in-product where available.

7.8 Legal basis (where applicable)

Depending on jurisdiction, we process personal data under one or more legal bases including performance of contract, legitimate interests, legal obligations, and consent where required.

Depending on your location, you may have certain rights regarding your personal information:

• Access: You have the right to request copies of your personal data.
• Rectification: You have the right to request correction of inaccurate or incomplete information.
• Erasure: You have the right to request deletion of your personal data, under certain conditions.
• Restriction: You have the right to request restriction of processing, under certain conditions.
• Object: You have the right to object to processing, under certain conditions.
• Data Portability: You have the right to request transfer of data to another organization or to you, under certain conditions.
• California Residents (CCPA): Right to know, delete, correct your Personal Information, opt-out of sale, and nondiscrimination.
• European Residents (GDPR): Right to withdraw consent at any time, lodge a complaint with a supervisory authority, and other rights under the GDPR.

To exercise any of these rights, contact us using the information provided below.

We will keep your personal information only as long as necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law.

For customer account information, we typically retain this information for the duration of your use of our services and a reasonable period thereafter. For marketing data, we retain it for 3 years from your last interaction.

We also retain records of consents, data subject requests, and data processing activities as required by applicable law.

9.1 Core Retention Principles

• Data minimization: we keep only data needed for legitimate business and legal purposes.
• Retention schedules: we apply documented retention timelines by data category.
• Secure disposal: when retention expires, we delete or anonymize data using reasonable safeguards.

Our services are operated globally, and your information may be transferred to and maintained on computers located outside your state, province, country, or other jurisdiction where data protection laws may differ.

We use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure lawful transfers.

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

Our services are not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us so that we can delete such information.

We may update our Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.

If you have any questions about this Privacy Policy, please contact us at:

Meta/WhatsApp data deletion requests can be submitted by emailing info@itspar.com with subject line "Meta Platform Data Deletion Request". Please include your business name, app/account identifiers, and contact details so we can verify and process your request.

Email: info@itspar.com
Phone: +91-9625799600
Address: P No. 8B, Shri Ram Nagar, Golyawas Mansarovar, Mansarovar, Jaipur, Rajasthan, India - 302020