DukanChat · dukanchat.in · Last updated 25 July 2026
DukanChat ("we", "us") operates https://dukanchat.in, a software platform that lets a business connect its own WhatsApp Business account and its own online store, and manage customer conversations and orders in one place.
We act as a data processor for our business customers. The shop that signed up is the data controller of the conversations and orders belonging to its own customers.
From the business that signs up: business name, owner name, email address, phone number, store website, and the API credentials it chooses to connect (WhatsApp access token, phone number ID, WhatsApp Business Account ID, store API keys).
From that business's customers, on its behalf: WhatsApp phone number, WhatsApp profile name, the content of messages exchanged with that business (text, images, documents, audio), delivery and read status, and order details received from the connected store (name, phone, email, address, items, amount, status).
Technical: log entries such as IP address and timestamp, kept for security and abuse prevention.
We do not collect payment card numbers, bank details, government ID numbers, biometric data, or precise location.
We do not sell personal data. We do not use message content for advertising. We do not use it to train machine-learning models.
We process data to perform our contract with the business that signed up, on the basis of our legitimate interest in operating and securing the service, and — where the business has obtained it — on the consent that business's customers gave to be contacted on WhatsApp. Businesses using this platform are responsible for obtaining opt-in from their own customers as required by the WhatsApp Business Messaging Policy.
We share data only with the infrastructure and platform providers needed to run the service:
We may disclose data if required by law, a court order, or a valid request from a public authority.
Conversations and orders are retained for as long as the business's account is active, because the business needs its own history. When an account is deleted, its entire database is dropped and its media files removed. Backups are retained for 14 days and then overwritten. Security logs are retained for up to 90 days.
Under India's Digital Personal Data Protection Act, 2023 — and, where applicable, the GDPR — you may request access to your personal data, correction of inaccurate data, deletion, a copy in portable form, or that we restrict processing. You may also withdraw consent at any time.
If you are a customer of a shop using this platform, please contact that shop first, as they control your data. You can also reply STOP on WhatsApp to opt out of that shop's messages. If you cannot reach them, write to us at the address below and we will help.
We respond to requests within 30 days.
This service is for businesses. It is not directed at children under 18 and we do not knowingly collect their data.
If we change this policy materially we will update the date at the top of this page and notify account holders by email.
As required by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:
Grievance Officer, DukanChat
Email: support@dukanchat.in
We acknowledge grievances within 24 hours and resolve them within 15 days.