Privacy Policy

Effective date: 30 October 2026

This Privacy Policy explains how Anii Techspace Private Limited (“Anii”, “we”, “us”) collects, uses, shares and protects personal data when you use Reach, available at reach.anii.in and in the Reach web app (the “Service”).

Reach helps businesses send and receive messages on WhatsApp, SMS, Instagram and Facebook, publish posts, and manage customers and enquiries. We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under it.

1. Who is responsible for your data

Account data of businesses using Reach. For the details of the businesses that sign up and of their team members, Anii is the data fiduciary.
Data of a business’s own customers. When a business uses Reach to message its customers, that business is the data fiduciary for its customers’ data. Anii processes this data on the business’s behalf, only to provide the Service and only as the business instructs. If you are a customer of a business that uses Reach, please contact that business first. We will help it respond to you.

2. Data we collect

From businesses and their team members

Account and login details: name, mobile number (used for OTP login), email address and role.
Business details: business name, address, GST number (if given), sender IDs and templates.
Payment records: wallet top-ups, invoices, plan and transaction references. Card and UPI details are handled by our payment gateway; we do not store full card numbers or UPI PINs.

Data a business brings into Reach

Customer contacts the business imports or adds: names, phone numbers, tags, notes and similar fields.
Messages, media and delivery status for WhatsApp messages sent and received through the official WhatsApp Business Platform (Cloud API) from Meta Platforms.
Instagram and Facebook data received through Meta’s official APIs for the accounts and Pages a business connects: direct messages, comments, the sender’s name, username and profile photo, and post and Page insights.
SMS messages sent through DLT-registered SMS providers, with their delivery status.

Collected automatically

Usage data: pages and features used, device and browser type, IP address, approximate location from IP, and error logs.
Cookies and similar storage: essential cookies to keep you signed in and secure. The public website at reach.anii.in does not use advertising cookies.

3. Why we use data, and our legal basis

Purpose	Legal basis under the DPDP Act
Create and secure accounts, log you in with OTP	Consent, and legitimate use to provide a service you asked for
Send and receive messages, publish posts and show inboxes and reports for the business	Performance of the service the business requested; the business’s consent and instructions for its customers’ data
Run the prepaid wallet, bill message charges and plans, issue invoices	Legitimate use; compliance with tax and accounting law
Keep the Service safe, prevent fraud and spam, and fix errors	Legitimate use; compliance with law
Meet legal duties, such as TRAI/DLT rules, tax law and lawful requests from authorities	Compliance with law
Send service notices, such as low-balance or security alerts	Legitimate use for the service you use

We do not use your data, or your customers’ data, for advertising, and we do not sell it.

4. Meta Platform Data

Data we receive from Meta Platforms (WhatsApp, Instagram and Facebook) is used only to provide the Service to the business that connected the account: to show and send messages, comments and posts, and to show the business its own insights. We do not sell Meta Platform Data, use it for advertising, build profiles from it for other purposes, or share it except as described in section 5. We follow Meta’s Platform Terms and Developer Policies, the WhatsApp Business Messaging Policy and the WhatsApp Commerce Policy. You can stop this access at any time by disconnecting the account in Reach’s Settings or in your Facebook or Instagram settings (see our Data Deletion page).

We share data only with service providers who help us run Reach, under contracts that require them to protect it and use it only for us:

Meta Platforms, as the provider of the WhatsApp Business Platform and the Instagram and Facebook APIs, so messages and posts can be delivered.
SMS providers registered on the TRAI DLT platform, to deliver SMS.
Payment gateway, to process wallet top-ups and plan payments.
Cloud hosting, storage and email providers, to host the Service, store data and send service emails.
Authorities, when the law requires it, or to protect the rights, safety and property of our users, the public or Anii.

If Anii is merged or acquired, data may move to the new owner under this policy. We never sell personal data.

6. Where data is stored

Data is stored on secure cloud servers. Some providers, such as Meta, may process data outside India. When this happens we rely on the safeguards the DPDP Act allows and on our contracts with those providers.

7. How long we keep data

Account and business data: for as long as the account is active, then up to 90 days to allow recovery, after which it is deleted.
Messages, contacts and Meta Platform Data: for as long as the business keeps them in Reach. They are deleted when the business deletes them, disconnects the channel (for data from that channel, as described on the Data Deletion page) or closes its account.
Payment and invoice records: for as long as tax and accounting law requires (usually 8 years).
Logs: up to 180 days, unless needed longer to investigate a security issue.

8. Security

We use encryption in transit (HTTPS), access controls, OTP login, role-based permissions for team members, and regular backups. Access tokens for connected accounts are stored encrypted. No system is perfectly secure; if a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

9. Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how it is used;
ask us to correct, complete or update it;
ask us to erase it, where we no longer need it or the law does not require us to keep it;
withdraw consent at any time (this does not affect processing already done);
nominate another person to exercise your rights if you die or cannot act;
raise a grievance with us, and then with the Data Protection Board of India.

Write to info@anii.in. We reply within 30 days. If you are a customer of a business that uses Reach, we may pass your request to that business, since it controls your data.

10. Children

Reach is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

11. Grievance Officer

In line with the IT Act and the DPDP Act:

Name: Vignesh Kumar Korakki
Email: info@anii.in
Phone: +91 93428 53538
Address: Anii Techspace Private Limited, C/o. IITM Research Park, 1 FA I Floor, Kanagam Road, TTTI Taramani, Chennai City Corporation, Chennai 600113, Tamil Nadu, India

We acknowledge grievances within 48 hours and resolve them within 30 days.

12. Changes to this policy

We may update this policy. We will change the effective date above, and for important changes we will tell account owners by email or in the app before they take effect.

13. Contact

Anii Techspace Private Limited, C/o. IITM Research Park, 1 FA I Floor, Kanagam Road, TTTI Taramani, Chennai City Corporation, Chennai 600113, Tamil Nadu, India. Email: info@anii.in. Phone: +91 93428 53538.