Privacy Policy

Who we are

Ohanvi ("we", "us") provides a marketing and messaging platform that businesses use to run WhatsApp Business API campaigns, email marketing, social publishing and the shared inbox behind them. This policy covers ohanvi.com and the Ohanvi application at https://app.ohanvi.com.

For data our customers upload and send through the platform, they are the data controller and we act as their processor. For data you give us directly — a contact form, a demo request, an account — we are the controller.

What we collect

We collect three kinds of data, and no more than we need for each.

• Information you give us directly: your name, email address, phone number and whatever you write in a contact, demo or partner form. The website form sends exactly these four fields and nothing else.
• Information from your use of the platform: account and billing details, the campaigns and templates you create, delivery and read receipts returned by Meta, and audit logs of who did what.
• Contact data you upload: the customer lists, phone numbers and attributes you import in order to message your own audience. This is your data. We store and process it to deliver the service and for no independent purpose of our own.
• Technical data: IP address, browser and device type, and pages visited, used to keep the service secure and working.

What we do not do

• We do not sell personal data, and we never have.
• We do not use the contact lists you upload to market to those people on our own behalf.
• We do not share your data with other customers of the platform.

Why we are allowed to process it

We process personal data to perform the contract you have with us, to meet legal and tax obligations, and for our legitimate interest in keeping the service secure and improving it. Where the law requires consent — for example, marketing email to a prospect who is not a customer — we ask for it and honour a withdrawal.

If you message a business through WhatsApp, that business is responsible for having your opt-in. Meta requires it, and so do we.

Meta, WhatsApp and connected platforms

Ohanvi is built on the WhatsApp Business Platform and connects to Facebook, Instagram, LinkedIn, Threads and X when you choose to link those accounts. It also connects to Shopify, and to Google Sheets, Google Calendar, Google Meet, Google Forms and Google Contacts, where you choose to link them.

When you connect an account, we receive the access tokens and the account, page and profile identifiers needed to publish and to read back performance data. We use them only to provide the features you asked for. Disconnecting the account in Ohanvi revokes our token and stops that access. Message content sent over WhatsApp is additionally processed by Meta under Meta’s own terms and privacy policy.

Instagram insights we read

If you connect an Instagram professional account with Instagram login and allow insights, Ohanvi reads the performance data Instagram provides for that account. We read it once a day, every 4 hours for stories that are still live, once a week for audience data, and when you ask for a refresh.

We keep daily figures and the figures for each post, so you can compare periods and see trends after Instagram stops showing them. With each post we keep the first 500 characters of its caption, its link and a link to its thumbnail.

• Account figures: views, reach, accounts engaged, interactions, likes, comments, saves, shares, replies, profile link taps, follows and unfollows, follower count, and the hours your followers are online.
• Post, carousel, reel and story figures: views, reach, likes, comments, saves, shares, interactions, follows, profile visits, replies, story taps and exits, and reel watch time.
• Audience: how your followers divide by age group, gender, country and city. Instagram gives us totals for each group only, never the individual followers.

How we use Instagram insights

We use Instagram insights only to show you your results in Ohanvi (Social Insights, Social Home and the business dashboard), to find your best times to post, and to run the flows you build, such as a weekly summary sent to you on WhatsApp. We never post, comment or change anything on Instagram with this permission.

If you ask one of your Ohanvi AI agents about your Instagram results, the figures it reads are sent to the AI provider that runs it, only to answer you. When you ask Ohanvi to write a post for Instagram, up to 3 captions from your best-performing posts may be sent with the request as examples. We do not sell this data, use it for advertising, or use it to train AI models.

Disconnecting Instagram in Ohanvi stops any further reading. Figures already stored stay in your account until you delete the account or ask us to delete them, as described in the User Data Deletion policy.

Google user data we access

If you connect a Google account, Ohanvi accesses only the Google services you turn on, and asks Google for permission for each one separately. Each service has its own card under Integrations → Google Workspace in the app, where you can connect or disconnect it.

Every connection also gives us the Google account’s email address and account ID, so we know which Google account each service belongs to.

• Google Sheets: we can open only the spreadsheets you pick for Ohanvi in Google’s file picker and the spreadsheets Ohanvi creates when you ask — never the rest of your Google Drive. In those spreadsheets we read rows and add or overwrite rows. If you set up an import or an export, we copy rows into your Ohanvi CRM or write CRM records to the sheet you picked.
• Google Calendar: we list your calendars and the events in them, check when people are free or busy, and create, update and cancel events, with a Google Meet link and invitations to attendees when you choose.
• Google Meet: we create Google Meet links. We can see only the meetings Ohanvi created, not your other meetings, recordings, transcripts or participant lists.
• Google Forms: we can open only the forms you pick for Ohanvi in Google’s file picker. We read their questions and responses, and check the forms you choose to watch for new responses. We never change a form.
• Google Contacts: we read your Google contacts so you can choose which ones to import into your Ohanvi CRM and WhatsApp contacts, and so a flow can find a contact by email or phone number. If you start flows from new contacts, we check for newly added contacts every 5 minutes. We add or update a contact in Google only when a flow step you built saves one.
• Google Search Console: we read search performance (clicks, impressions, click-through rate and average position, and the searches and pages behind them), sitemap status and page index status for the sites you link, and only for sites your Google account can already see in Search Console. We never add, remove or change a site or a sitemap. If you ask Ohanvi’s AI assistant about your search traffic, the numbers it reads are sent to the AI provider that runs it, only to answer you.
• Google Analytics: we read reports for the Google Analytics 4 properties you link, and only for properties your Google account can already see in Google Analytics: visitors (users and sessions), traffic sources, pages, key events (conversions) and revenue totals. Our access is read-only, and we use it only to show your business its own reports, summaries and alerts, such as your Analytics dashboard, a weekly website summary, an alert when visitors or conversions drop, and, if you connect an online store, a comparison of the revenue Analytics recorded with your store’s own orders. We never create or change a property, an event or any other Analytics setting. If you ask Ohanvi’s AI assistant about your website traffic, the numbers it reads are sent to the AI provider that runs it, only to answer you.
• Sign in with Google: if you sign in to Ohanvi with your Google account, we receive your name, email address and profile picture, and use them only to sign you in.

How we use, keep and share Google user data

We use Google user data only to provide the features you set up in Ohanvi: the screens where you manage these services, and the flows you build, such as adding a row to your sheet when a customer messages you on WhatsApp or booking a call on your calendar. Flows run on our servers when nobody is signed in, which is why a connection keeps its access until you disconnect it.

We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalised artificial intelligence or machine-learning models. We transfer it only where a feature you use requires it, such as a flow you built that sends a form response to someone on WhatsApp, or where it is needed for security or to comply with the law.

If a flow you build includes an AI step, the data that step uses, which can include Google data such as a form response, is sent to the AI provider that runs the step: the provider you connected with your own key (OpenAI, Anthropic or Google Gemini), or otherwise the provider Ohanvi uses by default. It is sent only to produce that step’s output, and we do not use it to train AI or machine-learning models.

Our staff do not read your Google data unless you ask us to look into a specific problem and agree to it, or it is needed for security or to comply with the law.

Google access tokens are encrypted at rest and held only on our servers. Contacts you fetch from Google are kept in your Ohanvi account, with a record of which ones match your CRM, so you can choose what to import. Contacts and rows you import, and the forms you watch, are kept as part of those features. We do not keep our own copy of your calendar: events are read from Google when you open them or a flow needs them. For each Search Console site you link we keep its daily totals, so you can compare trends after Google’s own 16 months have passed; other Search Console figures are read from Google when you open them. Unlinking a site stops this, and you can choose to delete its saved totals when you unlink it. For each Google Analytics property you link we keep its daily Analytics totals, so trends, summaries and alerts load quickly; other Analytics figures are read from Google when you open them. These totals are kept until you unlink the property and choose to delete them, or delete your account. Flow run history can include Google data a flow read or wrote, such as a form response or a sheet row, and is deleted after 90 days by default.

You can disconnect a single Google service, or the whole Google account, at any time under Integrations → Google Workspace. Disconnecting a single service stops Ohanvi using it straight away, while Google keeps the permission you granted until you disconnect the whole account. Disconnecting the account revokes our access at Google and deletes the tokens we held. You can also remove Ohanvi’s access at myaccount.google.com/permissions. Data already brought into Ohanvi stays in your account until you delete it, ask us to delete it, or close your account, as described in User data deletion.

Ohanvi’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Sub-processors

We use a small number of vendors to run the service: Meta for WhatsApp and social delivery, our cloud hosting and CDN providers, an email delivery provider, a payment processor, the AI model provider that runs AI features when you have not connected your own key, and Google Analytics for website traffic measurement. Each is bound by contract to protect the data and to use it only on our instructions.

How long we keep it

Account and billing records are kept for as long as you are a customer and then for the period Indian tax and company law requires. Campaign and message logs are retained while your account is active so you can audit what was sent. Contact form submissions are kept for two years unless you ask us to delete them sooner.

When you close your account we delete or irreversibly anonymise your data within 90 days, except where we are legally required to keep a record.

Security

Data is encrypted in transit with TLS and at rest. Access inside Ohanvi is role-based and logged. Credentials for upstream APIs are held server-side and are never exposed to a browser — the website’s own contact form posts to a same-origin function precisely so that the upstream key never reaches the client bundle.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or object to that use. Under India’s Digital Personal Data Protection Act you may also nominate someone to exercise these rights on your behalf.

To make a request, write to [email protected] or call +91 99718 05789. Our office is in Gurugram, Haryana, India. We answer within 30 days. If the data was uploaded to Ohanvi by a business you deal with, we will pass your request to that business, who controls it.

Cookies and analytics

The marketing site sets what it needs to function and to remember your motion preference.

It also runs Google Analytics 4, which we use to see how the site is used in aggregate — which pages are read, roughly where visitors arrive from, and which links get followed. It sets cookies (`_ga` and `_ga_<id>`) that identify a browser rather than a person, and we do not use it to try to identify individual visitors. Analytics runs on ohanvi.com only; our staging and preview environments send nothing.

You can block it in your browser settings, with any tracker-blocking extension, or with Google’s official opt-out add-on. Nothing on the site depends on analytics working, so blocking it changes nothing about how the site behaves for you.

Children

Ohanvi is a business product and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes and contact

We will post any material change to this policy here and update the effective date. Questions, complaints or requests go to our grievance contact:

Write to [email protected] or call +91 99718 05789. Our office is in Gurugram, Haryana, India.