Privacy Policy

Last updated 16 August 2026

This policy explains how Geom Global Solutions handles personal data in Geom Engage, our marketing and customer engagement platform. It covers our website, the application at engage.geomglobal.com, and every tenant workspace running on a subdomain of it.

Two different relationships. Geom Engage is used by businesses to communicate with their own customers, so personal data reaches us in two ways.

When a business signs up, we decide how their account data is handled — we are the data controller for that.

When that business uploads their customers' contact details and sends messages, they decide what happens — they are the controller, and we act as their data processor. If you are a customer of a business using Geom Engage, your relationship is with them, and any request about your data should go to them first.

1. Who we are

Geom Global Solutions, 17-1-391/S/467, Sai Ashirwad, Champapet, Hyderabad, Telangana, India. Contact us at support@geomglobal.com.

2. Data we collect as controller

This is data about the businesses and people who use Geom Engage directly.

Account information

  • Name, email address and phone number of each user
  • Organisation name and workspace subdomain
  • Password, stored only as a one-way hash — we never see or store it in readable form
  • Display preferences such as theme and light or dark mode

Integration credentials

  • WhatsApp Business API credentials, encrypted at rest
  • SMTP or email service credentials, encrypted at rest
  • Access tokens for connected social accounts, encrypted at rest

Usage and technical data

  • Records of messages sent, delivery status, and billing category
  • Server logs including IP address, browser type and timestamps
  • Error reports when something goes wrong

3. Data we process on behalf of our customers

When a business uses Geom Engage, they upload and generate data about their own customers. We store and process it strictly on their instructions:

  • Contact names, phone numbers and email addresses
  • Message history, including WhatsApp conversations and email campaigns
  • Form submissions, booking details and survey responses
  • Engagement signals such as opens, clicks, replies and opt-outs
  • Any custom fields or notes the business chooses to record

We do not sell this data, use it for our own marketing, or share it with anyone other than the sub-processors listed below.

4. Why we process data

PurposeLawful basis
Providing the service you signed up forPerformance of a contract
Sending messages you instruct us to sendPerformance of a contract
Billing and tax recordsLegal obligation
Security, fraud prevention and abuse monitoringLegitimate interest
Support and troubleshootingPerformance of a contract
Product improvement using aggregated statisticsLegitimate interest

5. Where your data is stored

All data is held on Amazon Web Services infrastructure in the Asia Pacific (Mumbai) region, ap-south-1. Data does not leave India except where a third-party service you have connected requires it — for example, sending a WhatsApp message necessarily transmits it to Meta, and sending an email transmits it to the recipient's mail provider.

6. Sub-processors

We rely on these services to operate Geom Engage:

ServicePurposeWhere
Amazon Web ServicesHosting, database, email deliveryMumbai, India
Meta PlatformsWhatsApp Business messagingGlobal
Your own SMTP providerEmail delivery, if you configure oneDepends on provider
Connected social platformsPublishing posts you scheduleGlobal

Where you connect your own provider, that provider's own privacy terms apply to data sent through it.

7. How long we keep data

DataRetained for
Account and contact data90 days after the account closes, then deleted
Message and campaign logs12 months
Billing and tax records8 years, as required by Indian law
BackupsPurged within 35 days
Server logs90 days

Deleting something in the application removes it from the live system immediately. It may persist in encrypted backups for up to 35 days before those expire.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023, you may:

  • Ask what personal data we hold about you and get a copy
  • Ask us to correct anything inaccurate or incomplete
  • Ask us to erase your data, subject to legal retention requirements
  • Withdraw consent where processing relies on it
  • Nominate someone to exercise these rights if you are unable to
  • Complain to the Data Protection Board of India

Write to support@geomglobal.com and we will respond within 30 days. If a business used Geom Engage to contact you, we will pass your request to them, because the data is theirs rather than ours.

9. Grievance Officer

Zaheer Syed
Geom Global Solutions
17-1-391/S/467, Sai Ashirwad, Champapet, Hyderabad, Telangana, India
support@geomglobal.com

Complaints about how we handle personal data are acknowledged within 48 hours and resolved within 30 days.

10. Security

  • All traffic is encrypted in transit using TLS
  • Integration credentials and passwords are encrypted or hashed at rest
  • Each tenant's data is isolated and scoped by organisation on every request
  • Access to production systems is limited to authorised personnel

No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the Data Protection Board of India as the law requires.

11. Messaging and consent

Businesses using Geom Engage are responsible for having a lawful basis to contact the people they message, and for honouring opt-outs. Geom Engage records opt-outs automatically — replying STOP on WhatsApp, or using the unsubscribe link in an email — and excludes those contacts from future campaigns.

Messages sent through WhatsApp are also governed by Meta's WhatsApp Business Messaging Policy.

12. Cookies

We use a small number of strictly necessary cookies and local storage entries to keep you signed in and remember your display preferences. We do not use advertising or third-party tracking cookies.

13. Children

Geom Engage is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

14. Changes

We will update this page when our practices change, and revise the date at the top. Material changes will be notified to account holders by email.