Data & Security Policy

This policy applies to data processed through Networking Plus, which is developed and operated by Kreative Madari Pvt Ltd, based in Kolkata, India.

It does not cover third-party services you separately choose to use — such as WhatsApp, Google, or your device and network — which are governed by their own terms and security practices.

Account details, such as your WhatsApp number and, where you register, your name and email address.

The business cards and documents you upload, and the contact details extracted from them.

Content you create, such as notes, tags, reminders, and your digital profile.

Limited payment and billing records, and — only if you choose to connect Google — the Google data described below.

Usage and technical information needed to operate, secure, and improve the service.

The service operates over WhatsApp, which is provided by Meta. Messages, images, and documents you send to our WhatsApp number are received so that we can provide the features you request.

Your use of WhatsApp is also governed by Meta's own terms and security practices, which are separate from this policy.

When you upload a business card or document, the image is stored in our cloud storage and processed using OCR and AI to extract structured contact details.

The extracted contacts, along with your notes and tags, are stored in your account so you can search and manage them. You can edit or delete this content, and you can request deletion at any time.

Connecting a Google account is optional. We access your Google data only after you grant explicit permission, and only to provide the specific feature you request — such as exporting to Google Sheets or creating calendar reminders.

You can revoke this access at any time from your Google Account settings. Our handling of Google data is described in more detail on our Google API Data Usage page.

Paid plans are processed by Razorpay, our third-party payment provider. Your payment is handled on Razorpay's systems under its own terms and security practices.

We do not receive or store your full card, UPI, or bank details. We keep limited billing records — such as transaction status, invoice references, and plan status — to provide the paid service and meet tax and accounting requirements.

Your files (such as uploaded card and document images) are held in Microsoft Azure Blob Storage, and your structured data (such as accounts, contacts, and notes) is held in a PostgreSQL database.

We store your data for as long as your account is active and as needed to provide the service, subject to the retention practices described below and in our Privacy Policy.

The service is hosted on Microsoft Azure cloud infrastructure. We rely on Azure's platform security controls for the underlying data centres, network, and storage.

We do not publish internal infrastructure details, and this policy does not disclose specific system, credential, or configuration information.

We limit access to your data to the people who need it to operate and support the service, on a need-to-know basis.

Administrative access is restricted and protected, and internal tools are designed so that staff access is limited to what their role requires.

You access the service using your WhatsApp number, and — where relevant — a registered email for the web dashboard. When you connect Google, access is authorized through Google's standard OAuth consent flow.

You are responsible for keeping access to your WhatsApp account and any registered credentials secure.

Data exchanged with the service travels over secure, encrypted connections using industry-standard transport encryption (such as HTTPS/TLS). WhatsApp additionally applies its own encryption to messages in transit.

For data at rest, we rely on the storage and platform security features provided by Microsoft Azure. We do not claim that every piece of data is encrypted in every circumstance.

We work with trusted providers who process data on our behalf under appropriate confidentiality and security obligations: Meta (WhatsApp messaging), Microsoft Azure (hosting, storage, and OCR processing), and Razorpay (payments). Where you connect it, Google processes data to provide the features you request.

We share data with these providers only to the extent needed to operate the service, and we do not sell your personal data.

We keep operational logs and monitor the service to help keep it reliable, diagnose problems, prevent abuse, and support security.

Logs are used for these operational purposes and are retained for a limited period consistent with those purposes.

We take periodic backups so that we can recover data in the event of a technical failure. Backups are retained for a limited period and are then overwritten or removed on a rolling basis.

Because of how backups work, data you delete may persist in backups for a short time before it is cycled out.

We keep your information for as long as your account is active and for as long as needed to provide the service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements.

When information is no longer needed for these purposes, we delete it or take steps to anonymize it.

You can ask us to delete your account and associated data at any time. For the full process, see our Account & Data Deletion page.

Some limited records — for example, billing, invoice, or other information we are required to keep by law — may be retained after deletion.

We take reasonable steps to detect, investigate, and respond to security incidents. If an incident affects your personal data and the law requires it, we will notify affected users and the relevant authorities within the applicable timeframes.

No safeguards can eliminate all risk, and we cannot guarantee that an incident will never occur.

Keep your WhatsApp account and device secure, and do not share access to them.

Verify important details before relying on them, and make sure you have a proper, lawful basis to upload and process other people's information.

Review the permissions you grant — including any Google access — and revoke anything you no longer use.

No method of transmission over the internet or method of electronic storage is completely secure. While we use reasonable safeguards, we cannot guarantee absolute security.

We do not claim any specific security certification (such as ISO, SOC 2, HIPAA, or a formal GDPR certification). This policy describes the practical measures we take, not a warranty of any particular standard.

We may update this Data & Security Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page.

If you have any questions about how we store and protect your data, email us at support@networkingplus.ai or message us on WhatsApp at +91 79803 35088.

Networking Plus is developed and operated by Kreative Madari Pvt Ltd, Kolkata, India.