FABTEXS AI Back to FABTEXS

FABTEXS AI Privacy Policy

Last updated: 18 February 2026

This Privacy Policy explains how FABTEXS – India’s Wholesale Fabric Hub ("FABTEXS", "we", "us", or "our") collects, uses, stores, discloses, and protects information when you ("seller", "vendor", or "you") sign up for or use FABTEXS AI, our WhatsApp commerce automation platform for Indian textile wholesalers, available at app.fabtexs.com and www.fabtexs.com (collectively, the "Platform").

FABTEXS AI is designed for B2B textile sellers who use WhatsApp Business to message their buyers. We act as a data processor for the customer data sellers bring into the Platform (buyer phone numbers, names, conversation history) and as a data fiduciary / controller for the account data sellers provide about themselves (email, business name, payment information).

1. Information we collect

1.1 Information you provide as a seller

  • Account data: name, business name, email address, mobile number, password (stored as a one-way bcrypt hash, never in plaintext), business address, GSTIN (optional), and plan selection.
  • Catalog data: product images, product codes, descriptions, prices, sizes, categories, stock quantities, and other inventory you upload to FABTEXS.
  • Customer data you import: phone numbers, contact names, optional city / tags / category interests of the buyers you choose to manage through FABTEXS — supplied by you via CSV, Excel, paste-text, or screenshot OCR.
  • Order & payment data: order details, invoice amounts, payment confirmations, and shipping addresses generated by you or your buyers through the Platform.
  • Support correspondence: messages you send us via in-product support or email.

1.2 Information we receive from Meta (WhatsApp Business)

When you connect a WhatsApp Business number — either by pasting Meta Cloud API credentials or via Facebook Login for Business (Embedded Signup) — we receive from Meta on your behalf:

  • Your WhatsApp Business Account (WABA) ID, phone number ID, verified business name, display phone number, and quality rating.
  • An access token that is encrypted at rest using AES-256 and used only to send messages on your behalf and to receive inbound webhooks from Meta.
  • Incoming WhatsApp messages, message status events (sent / delivered / read), and media you or your buyers exchange through the connected number.

We do not receive your Facebook personal profile, friend lists, ads data, or any information about Facebook pages you don't connect to FABTEXS.

1.3 Information we collect automatically

  • Technical & usage data: IP address, browser type, device type, OS, pages visited, session duration, and feature usage, gathered through standard server logs and first-party cookies.
  • Diagnostic data: error stack traces, latency metrics, and broadcast / webhook delivery statistics needed to keep the Platform reliable.

2. How we use your information

We use the information described above to:

  • Provide, operate, and improve the Platform — including AI-assisted reply drafting (Claude Sonnet 4.5 / Haiku 4.5), broadcast scheduling, screenshot OCR (Claude Vision), and analytics.
  • Send and receive WhatsApp messages between you and your buyers strictly through your connected WhatsApp Business number.
  • Authenticate your account, prevent fraud, enforce rate limits, and protect the Platform from abuse.
  • Process subscription payments through PCI-DSS compliant payment processors (Razorpay).
  • Send service emails (e.g. activation confirmation, billing receipts, security alerts). We do not use your data for unrelated marketing without your separate, explicit opt-in.
  • Comply with applicable laws and lawful requests from regulators or courts.

3. Legal basis (under India's DPDP Act 2023 and similar laws)

We process personal data on the following legal bases:

  • Performance of a contract: to deliver the Platform features you signed up for.
  • Legitimate interest: to keep the Platform secure, reliable, and free of abuse.
  • Consent: where required (e.g., optional marketing communications). You can withdraw consent at any time via your account settings or by emailing us.
  • Legal obligation: tax, accounting, and lawful regulatory requirements.

4. Sharing of information

We share data only when necessary, and never sell personal data. Specifically:

  • Meta Platforms Inc. / WhatsApp LLC — to deliver messages your business sends through your own WhatsApp Business number, per Meta's WhatsApp Business Solution Terms.
  • Anthropic, PBC — content you submit to the AI assistant (product descriptions, conversation snippets, screenshots) is sent to Claude models for processing under Anthropic's data protection terms. Anthropic does not train its models on your data.
  • Razorpay Software Pvt Ltd — to process subscription payments. Card details are handled directly by Razorpay; we never store full card numbers, CVVs, or PINs.
  • Cloud infrastructure — MongoDB Atlas (encrypted at rest), AWS / Emergent-managed servers in Mumbai or Singapore regions for hosting.
  • Professional advisors — accountants, auditors, and legal counsel under strict confidentiality.
  • Government and law enforcement — only where compelled by valid Indian legal process.
  • Successors — in a merger, acquisition, or asset sale, your information may be transferred to the successor entity under the same protections set out here.

5. Your customers' data — your responsibility

When you import customer phone numbers and broadcast to them through FABTEXS, you are the data fiduciary / controller for those buyers. You confirm and warrant that:

  • You have lawful basis (typically consent) to message every buyer you import.
  • You comply with WhatsApp's Business Messaging Policy, including its prohibition on unsolicited messages.
  • You will honor opt-out requests within a reasonable timeframe.
  • You will not import phone lists scraped from third parties or otherwise obtained without consent.

FABTEXS will, at your direction, delete customer records and stop messaging on request. Buyers who wish to exercise rights over their data should first contact you as the seller; we will support reasonable buyer requests forwarded by you.

6. Data retention

  • Account & catalog data: retained for as long as your account is active, and for up to 18 months after closure for tax / audit purposes, then deleted.
  • WhatsApp messages & media: retained for 90 days by default to power the inbox and AI history features. You can shorten this in Settings.
  • Encrypted access tokens: deleted within 7 days of you disconnecting a number.
  • Backups: rolling 30-day encrypted backups, then permanent deletion.

7. Security

  • TLS 1.2+ for all data in transit.
  • AES-256 encryption at rest for sensitive fields including WhatsApp access tokens.
  • Bcrypt password hashing with per-user salts.
  • Role-based access controls inside FABTEXS — production database access is restricted to a small set of authorized engineers under written confidentiality agreements.
  • Automated webhook signature verification (Meta X-Hub-Signature-256) and rate limiting on all sensitive endpoints.
  • Quarterly security review of dependencies and configuration.

No system is 100% secure. If we become aware of a data breach affecting your personal data, we will notify you and the Indian Data Protection Board within the timeframe required by law.

8. Your rights

Subject to applicable law (India DPDP Act 2023, GDPR where applicable), you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Erase personal data we are not legally required to retain.
  • Withdraw consent for any processing based on consent.
  • Receive a copy of your data in a portable format (CSV / JSON).
  • Lodge a complaint with the Indian Data Protection Board.

To exercise these rights, email us at fabtexswholesale@gmail.com with the subject "Data Rights Request". We will respond within 30 days.

9. Cookies

FABTEXS uses first-party cookies only — strictly for authentication (storing your signed JWT session token) and for remembering UI preferences. We do not set third-party advertising cookies on the SaaS application. The public marketing website may use privacy-preserving analytics (e.g. server-side page-view counts).

10. Children

FABTEXS is a B2B platform intended for textile businesses run by adults. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, email us and we will delete the account.

11. International transfers

Your data is stored primarily on servers located in India and Singapore. Where data is processed by our sub-processors (Meta, Anthropic, Razorpay) it may transit through servers located outside India. We rely on Standard Contractual Clauses and the sub-processor's own privacy commitments to safeguard such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email and a banner inside the Platform at least 7 days before the new version takes effect. The "Last updated" date at the top of this page reflects the current version.

13. Contact & Grievance Officer

For any questions about this Privacy Policy, to exercise your data rights, or to raise a grievance under the DPDP Act, please contact:

Grievance Officer — FABTEXS AI
FABTEXS – India’s Wholesale Fabric Hub
Email: fabtexswholesale@gmail.com
Subject line: "Grievance — FABTEXS AI"

We are committed to resolving any grievance within 30 days of receipt.