Trust & SecurityWhat we do, in plain language. No badges we have not earned.
Your customer data is encrypted in transit and at rest, stored in India, and isolated from every other business on the platform at the database level. It is never used to train AI models and never shared or sold. You can export everything or have it permanently deleted at any time. We process this data on your instructions as a Data Processor under the DPDP Act 2023 — you remain the Data Fiduciary.
In India. Your contacts, conversations, orders and catalogue are stored in India.
Two parts of the service involve other companies' systems by their nature. Every WhatsApp message travels through Meta's WhatsApp Business Platform, which Meta operates under its own terms. Replies are generated using a third-party AI model provider. Both are listed in the sub-processor table below.
If your procurement team needs the processing location of each sub-processor in writing, ask us for it
The mechanisms, not the adjectives. Four things are true of every account on the platform.
Data travelling to and from our servers — from Meta, from your store and to your dashboard — is encrypted on the way.
Stored data — contacts, conversations, orders and your catalogue — is encrypted where it sits, not only while it moves.
Your data is isolated from every other business on the platform at the database level, not just hidden by the screens you see.
Every conversation the agent has is logged against the customer, so you can check exactly what was said to anyone, and when.
You, and the team members you add. Every plan includes unlimited team members, so your whole team works from one shared inbox instead of passing a phone around. You decide who is on the account.
Every conversation is logged against the customer, so when a customer says "your agent told me…", you can check what was actually said.
If your security review needs to know which roles inside 3xRetention can reach customer data, and how that access is recorded, ask us before you sign
No. Your customer data is never used to train AI models.
The agent uses your catalogue, your prices and your rules to answer your customers. That information serves your account and nobody else's. It is not pooled with other businesses' data.
Replies are generated using a third-party AI model provider, which appears in the sub-processor table below.
The other companies that handle some of your data so the service can run. Security reviews ask for this list by name.
| Category | Provider | What it does | Where it processes data |
|---|---|---|---|
| Cloud hosting | Available on request | Stores your contacts, conversations, orders and catalogue | India |
| AI model provider | Available on request | Generates the agent's replies from your business information. Your data is not used to train its models. | Available on request |
| Messaging | Meta — WhatsApp Business Platform | Carries every WhatsApp message between you and your customers, through the official WhatsApp Business API | Meta's infrastructure, under Meta's terms |
| Payment gateway | Your own gateway | Takes the payment when a customer uses a payment link. You hold the account; we never hold the funds. | Under your agreement with your gateway |
| Available on request | Sends account and service emails to you and your team | Available on request |
It is your data. You keep control of it while you use 3xRetention and after you stop.
Take everything — contacts, conversations and orders — whenever you want, including after you leave.
Fix a record that is wrong. When one of your customers asks for their details to be corrected, it is done on your instruction.
Have your data permanently deleted at any time — one customer's record, or the whole account.
Monthly billing, no lock-in. Export first, then ask for permanent deletion — you do not have to wait for us to decide.
If a breach affects your data, we tell you. You get what happened, which data was affected, and what we have done about it.
That matters because under the DPDP Act the duty to inform the Data Protection Board of India and the affected customers sits with you, as the Data Fiduciary. Our job is to give you the facts quickly enough to meet it.
The steps and the legal timelines are set out on our DPDP compliance page
We do not display certification badges we have not earned. If certification work starts, this section will say so, with a target date.
No. Each business's data is isolated from every other business on the platform at the database level, and it is never shared or sold. Another 3xRetention customer cannot see your contacts, and your contacts are never added to anyone else's audience.
No. The agent sends a payment link from your own payment gateway. Your customer pays on that gateway's page, and the money settles into your gateway account. 3xRetention never holds your funds, and card or UPI details are entered with the gateway, not in the chat.
A sub-processor is another company that handles some of your data so that we can run the service — for example, the cloud provider that stores it, or Meta, which carries every WhatsApp message. Security reviews ask for the list by name, so we publish the categories here rather than making you ask for them.
Email contact@3xretention.com with "Security" in the subject line. Tell us what you found and how to reproduce it. Please do not test against another business's account or data.
Because we only show what we hold. A SOC 2 or ISO 27001 badge is a claim a security reviewer can check, and showing one we have not earned would be worse than showing none. If certification work starts, this page will say so, with a target date.
Send us your product list and we will set the agent up on it before the call. You will watch it answer questions about your own products, not a generic demo account.Thirty minutes. No obligation.
Pick a time that works. Share a catalogue, price list or website link when you book and we load it into the agent before we speak.
You send a catalogue, price list or website link. We set the agent up on it.
You ask it the questions your customers actually ask. We show you the segments and follow-ups it would run.
A written summary of what it would do for you, and what it would cost.
Can't see the calendar? Book here
Or email sandeep@3xretention.com