How we handle the personal data processed through TarkApp’s WhatsApp-native ordering service — on behalf of the businesses you order from.
Last updated: 23 June 2026
TarkApp (“TarkApp”, “we”, “us”) is a software-as-a-service platform operated by Shweta Gupta (sole proprietor; a dedicated company is being incorporated), with its principal place of business at 495/9, Sector 12, Gurugram, Haryana 122001. TarkApp provides a WhatsApp-native ordering and customer-service tool to wholesale and distribution businesses (each a “Merchant”).
In most of our processing, TarkApp is a Data Processor acting only on the documented instructions of the Merchant you are transacting with. The Merchant is the Data Fiduciary (controller) of your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). For example, when you message a Merchant’s business number on WhatsApp to place an order, that Merchant decides why your data is collected, and TarkApp processes it on their behalf to deliver the service. For our own platform operations (billing, security, service improvement on de-identified data) we act as a Data Fiduciary.
When you interact with a Merchant through TarkApp, we may process:
We do not seek special-category personal data, and we ask you not to send it. TarkApp’s service is intended for business (B2B) ordering and is not directed at children under 18.
To interpret your messages, TarkApp uses automated and AI/ML processing. Any third-party AI service we use operates under contractual terms that prohibit using your data to train their general models. We do not sell your personal data, and we do not use the intelligence derived from one Merchant’s data to disclose another Merchant’s confidential information.
TarkApp hosts personal data on infrastructure located in India (Mumbai region) to support data residency. Where any processing occurs outside India, it is done in accordance with the DPDP Act and applicable law.
We retain personal data only for as long as needed to provide the service to the Merchant, and thereafter as required to meet legal, tax, and accounting obligations, after which it is deleted or de-identified. When a Merchant ends their relationship with TarkApp, their account data is deleted or returned per our agreement with them.
Under the DPDP Act you have the right to access, correct, complete, update, and erase your personal data, to grievance redressal, and to nominate another person to exercise your rights. Because the Merchant is the Data Fiduciary, the quickest route is usually to contact the Merchant directly; you may also contact us using the details below and we will assist and, where needed, route your request to the Merchant.
You can stop receiving messages at any time by replying STOP on WhatsApp; reply START to resume. To request deletion of your personal data, see our Data Deletion instructions.
We protect personal data with encryption in transit and at rest, strict per-Merchant data isolation, access controls, and audit logging.
We may update this policy from time to time. The “Last updated” date above reflects the latest version.
For any privacy question or to exercise your rights, contact our Grievance Officer:
We will acknowledge and respond to grievances within the timelines required by the DPDP Act.