Who we are
Continuum Core Private Limited (“Continuum Core”, “we”, “us”) is based at 903, Vipul Square, Sushant Lok Phase I, Sector 43, Gurugram, Haryana, India. We build custom enterprise software and AI systems. We also build and operate solutions on the WhatsApp Business Platform provided by Meta Platforms, Inc. (“Meta”) for businesses, including onboarding businesses to the platform as a technology provider.
Continuum Core is an independent company. WhatsApp and Meta are trademarks of Meta Platforms, Inc., and our use of the WhatsApp Business Platform does not mean Meta endorses our services.
What this policy covers
This policy applies to personal data about:
- visitors to www.continuumcore.io;
- people who contact us, and people at organisations we work with or are discussing work with;
- people who exchange messages with businesses that use WhatsApp solutions we provide (“end users”).
It does not cover how Meta and WhatsApp process data for their own purposes, which their own privacy policies describe, or how our clients use data for their own purposes, which their privacy policies describe.
Our role, our clients' and Meta's
- Our website, enquiries and business relationships. We decide how and why this personal data is used, so we are its controller (a “data fiduciary” under India’s Digital Personal Data Protection Act, 2023).
- Services we provide to clients. When we run WhatsApp solutions or build and operate systems for a client, the client decides how and why its customers’ data is used. The client is the controller. We process that data on its behalf, only on its instructions and under our agreement with it.
- Meta. Meta operates the WhatsApp Business Platform. When a business sends or receives messages through it, Meta processes that data under the WhatsApp Business Terms of Service and its own policies, including the WhatsApp Privacy Policy and the Meta Privacy Policy.
Information we collect
Information you give us
- Contact form: your name, work email, company, an optional phone number, and your message.
- Emails, calls and WhatsApp messages you send to our published contact details, and what you share in meetings with us.
- Business contact and billing details when we work together.
Information collected automatically
- When you visit the website, our hosting provider (Vercel) and our network and security provider (Cloudflare) process technical data needed to deliver and protect the site: your IP address, browser and device type, the pages you request and when.
- We don’t use analytics, advertising or tracking cookies on the website, and we don’t build profiles of visitors.
WhatsApp Business Platform data
When a business uses a WhatsApp solution we provide, we may process the following on that business’s behalf:
- Account information: WhatsApp Business Account and phone number identifiers, the business’s display name, its message templates, and the access permissions it grants us through Meta’s onboarding flow.
- End user information: the WhatsApp phone numbers and profile names of people who message the business or have opted in to receive its messages.
- Messages: the content of messages and media exchanged with the business, and delivery information such as timestamps and sent, delivered and read status.
- Conversation records the business chooses to keep, for example in support or CRM tools we connect for it.
We use this data only to provide the service the business has asked for: sending and receiving its messages, routing them to its systems and staff, running automations it has set up, and keeping the service secure and working. We don’t sell it, use it for advertising, or use one client’s data for another client.
Encryption works differently for business messages. Chats between two WhatsApp users are end-to-end encrypted, so only they can read them. Messages to a business on the WhatsApp Business Platform are encrypted in transit, but Meta hosts the business’s messaging endpoint on the business’s behalf. That means the content of those messages is accessible to the business, to Meta, and to the service providers the business uses, including us. They do not have the same end-to-end protection as a chat between two people.
How we use information
- To reply to your enquiry, including sending a confirmation email when you use our form, and to follow up on it.
- To provide, operate, support and improve our services under our agreements with clients.
- To onboard businesses to the WhatsApp Business Platform and manage the permissions they grant us.
- To keep our website, our systems and our clients’ services secure, and to prevent spam, fraud and abuse.
- To comply with the law, respond to lawful requests, and meet the requirements of Meta’s platform terms and policies.
- To manage our business relationships, contracts and invoices.
Depending on where you are, we rely on your consent (for example, when you submit our form), on performing a contract with you or your organisation, on our legitimate interest in running and protecting our business, or on a legal obligation.
AI features
Some solutions we build use AI, for example an assistant that answers routine WhatsApp messages for a business, or summaries of conversations for its team. The client decides whether these features are used. When they are, message content may be processed by AI model providers we engage as sub-processors, only to deliver the feature.
We choose providers whose terms don’t allow them to use this data to train their general models. Where the law or Meta’s policies require it, businesses should tell their customers when they are talking to an automated assistant.
International transfers
We are based in India. Some of our providers, including Meta, Vercel, Cloudflare, Resend and Google, may process data in other countries, including the United States. When personal data moves across borders, we rely on the safeguards these providers offer and on the requirements of applicable law.
How long we keep information
- Enquiries and correspondence: as long as we need to respond and manage our relationship, and as long as the law requires for our legal, tax and accounting records. After that we delete or anonymise it.
- Email delivery logs: our email delivery provider keeps logs of emails sent from the website for about 30 days.
- Client and WhatsApp data: as long as the client’s agreement requires. When the service ends, we delete or return it, unless the law requires us to keep it.
- Access a business grants us through Meta: until the business removes it or the service ends.
Security
We use HTTPS encryption for the website and our integrations, limit access to the people who need it, store access tokens securely, and review the providers we rely on. No method of transmission or storage is completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
Your rights and choices
Depending on where you are, you can ask to access, correct, complete, update or delete your personal data, withdraw consent you have given, object to or restrict some processing, and, in India, nominate someone to exercise your rights if you cannot.
To use these rights, email info@continuumcore.io. We may need to verify your identity, and we will respond within a reasonable time and as the law requires.
If you are an end user of a business that uses our WhatsApp solutions, please contact that business first; we will help it respond. You can stop receiving a business’s WhatsApp messages at any time by using the opt-out option it offers, or by blocking or reporting the business in WhatsApp.
Data deletion instructions
To ask us to delete your personal data:
- Email info@continuumcore.io with the subject “Data deletion request”. If email isn’t convenient, use the form on our contact page or call +91 11 4118 6486.
- Include your name and the email address or WhatsApp phone number the request is about. If it concerns a business you messaged on WhatsApp, include that business’s name.
- We will confirm we have received your request, verify it where needed, and delete the data we hold within 30 days, or tell you why we must keep something, such as a record the law requires. For data we process for a client, we pass the request to that client and act on its instructions.
Businesses: to disconnect your WhatsApp Business Account from us, remove Continuum Core’s access in your Meta business settings, or email us and we will do it for you. Once access is removed, we stop accessing your account and delete the access tokens we hold. We delete the account data we store as your agreement sets out.
Children
Our services are for businesses, and the website is not aimed at children. We don’t knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as our services or the law change. We will update the date at the top of this page, and for significant changes we will tell our clients directly.
Contact and grievances
Continuum Core Private Limited, 903, Vipul Square, Sushant Lok Phase I, Sector 43, Gurugram, Haryana, India.
Email: info@continuumcore.io · Phone: +91 11 4118 6486
Grievance Officer
For privacy questions, requests or grievances, contact our Grievance Officer:
Pratul Tandon, CEO & Co-Founder
Continuum Core Private Limited, 903, Vipul Square, Sushant Lok Phase I, Sector 43, Gurugram, Haryana, India
Email: info@continuumcore.io (subject “Privacy”)
We will acknowledge your grievance and resolve it within the time the law requires. If you are in India and not satisfied with our response, you may complain to the Data Protection Board of India. See also our Terms of Service.
