BroadReach Privacy Policy

Last updated: 21 October 2026

BroadReach is a business messaging tool. Businesses use it to talk to their customers on WhatsApp, send campaigns, manage contacts and templates, run an AI assistant for replies, and create Meta ads. This policy covers the BroadReach Android app and the BroadReach web console.

The service is operated by Robust Results Private Limited, W-123, Regency Park-II, DLF City Phase-IV, Gurgaon, Haryana 122002, India ("we", "us"). Contact us about privacy or your data at prachigarg@robustresults.com.

BroadReach is meant for businesses and their staff, aged 18 or over. It is not directed at children.

1. Who this applies to

Account holders and their team members ("agents") who sign in to BroadReach.
The business's customers, whose WhatsApp messages and contact details the business handles through BroadReach. For that data the business decides why and how it is used, and we process it on the business's behalf. Customers with questions should contact the business they message first; we will help that business answer.

2. What we collect and why

Data	Examples	Why
Account and profile	Name, email address, WhatsApp phone number, password (stored only as a hash), an optional two-factor phone number, company name, industry, company size, country	To create and secure your account, sign you in, send sign-in and verification codes, and set up your business workspace
Contacts	Names and phone numbers of customers you add, import from a file, or upload with "Sync phone contacts" (that reads your phone's address book only when you tap it and allow the contacts permission)	So you can message, tag, group and run campaigns for those contacts
Messages	WhatsApp messages you send and receive through BroadReach, with their time, delivery and read status; attached images, videos, audio and documents; templates, canned replies, campaign drafts, away messages	To deliver and show your conversations, run your campaigns and keep your chat history
AI assistant content	If you turn on the AI agent: the customer's message, recent conversation context and the knowledge you give the agent (FAQs, documents, web pages)	To draft or send the agent's reply and to hand the conversation to a person when needed
Billing	Your plan, credit balance and purchase history. Card and bank details are entered on the payment provider's own page, not in BroadReach.	To run your subscription and credits
Device push token	A Firebase Cloud Messaging token and a device name you can edit, when you turn on notifications	To notify you of new messages and finished campaigns
Technical logs	Request times, error records and request ids on our servers	To keep the service running, secure it and fix problems

The Android app has no advertising or analytics SDK, does not read your location, and does not use the Android advertising id.

3. Who receives it

We do not sell personal data. We send data only to the providers that make the features you use work:

Meta (WhatsApp Business Platform, Meta Ads): your messages, templates and the recipients' phone numbers when you send them; ad drafts when you publish an ad.
Payment providers: Razorpay or Chargebee for your BroadReach subscription and credits; for payment links you send to customers, the gateway you choose (Razorpay, PayU or Stripe).
AI provider: when the AI agent is on, the conversation context and your knowledge snippets go to the AI model provider we use (OpenRouter, which routes to models such as OpenAI's) to produce the reply.
Cloud storage and hosting: attachments, imported contact files and exports are stored with Amazon Web Services (S3); our servers and databases are hosted by Amazon Web Services.
Messaging for codes: Twilio (SMS and voice) and SendGrid (email) deliver sign-in, verification and password-reset codes.
Notifications: Google Firebase Cloud Messaging delivers push notifications to your device.
The law: where we are legally required to.

Data is encrypted in transit (HTTPS / TLS) between the app, the web console and our servers. The app keeps your session token sealed in the Android Keystore and removes it when you sign out.

4. How long we keep it

Account, contacts, conversations and campaigns: while your account is active, and deleted within 30 days after your account is deleted.
Sign-in and verification codes: minutes, until they expire.
Server logs: 30 days.
Billing records: as long as tax and accounting law requires.

5. Your choices and deleting your data

You can edit your profile and remove contacts, templates and other content in the app or the web console.
"Sync phone contacts" only runs when you tap it, and you can deny or later revoke the contacts permission in Android settings.
To delete your account and its data, or to ask for a copy of your data, email prachigarg@robustresults.com from the email address on the account (or name the account). We confirm the request and complete it within 30 days. You do not need to install the app to ask.
Customers of a business that uses BroadReach can ask that business, or us, to delete their messages and contact details.

6. Changes

We will post any change to this policy on this page and update the date above. If a change is significant we will tell account holders by email or in the app.

7. Contact

Robust Results Private Limited
W-123, Regency Park-II, DLF City Phase-IV, Gurgaon, Haryana 122002, India
prachigarg@robustresults.com