← Back

Privacy Policy

Last updated 24 August 2026

This policy explains what NKB Growth Consultancy Private Limited collects when you talk to Shanti, why, and what you can ask us to do about it. It is written to comply with India's Digital Personal Data Protection Act, 2023.

What we collect

  • Your WhatsApp number and profile name, so we can reply to you.
  • What you tell her about what is going on — the situations, the people involved, how you have been feeling. This is the most sensitive thing we hold, and it is treated that way everywhere in this policy.
  • Your messages to Shanti and her replies, so the conversation makes sense and she remembers what you discussed.
  • Things you say about other people — a partner, a parent, a colleague — only because you chose to mention them while describing your own situation.
  • The ad you came from — the identifier Meta created for that tap, and the ad's own headline and text — which is how Shanti knows which language to greet you in.
  • Payment records — amount, date and a payment reference. We never receive your card number, CVV, UPI PIN or bank credentials.
  • If you message us on Instagram or Facebook Messenger instead — your message reaches us, along with an identifier that platform creates for you. Not your phone number; neither platform gives us one. What we do and do not keep is set out below, and it is less than you might assume.

Why we collect it

Only to give you the service you asked for: to understand what is actually driving the anger, to answer your questions, to remember earlier conversations so you do not have to repeat yourself, and to process payments.

One thing beyond that, and only if you found us through an ad: we measure which of our ads bring people we can actually help. What that involves is set out below, and it never includes anything you have told Shanti.

Who we share it with

We do not sell your data. We share the minimum necessary with:

  • Meta (WhatsApp) — messages travel over the WhatsApp Business Platform to reach you.
  • Meta (Instagram and Messenger) — if you write to us on either instead, your messages travel over that platform to reach us, and ours travel back the same way.
  • Meta (advertising measurement) — only if you first reached us from one of our ads or posts. See below.
  • Google Cloud (Vertex AI) — used to write Shanti’s replies. That means the model receives what you have written and the conversation so far, so it can answer the thing you actually asked. Under Google Cloud’s terms, none of it is used to train their models.
  • OpenAI — a second model provider, used only when Google’s cannot answer at all. When that happens, the same information that would have gone to Google — what you have written and the conversation so far — goes to OpenAI instead, so that Shanti can still reply rather than going silent on you. Under OpenAI’s API terms it is not used to train their models. On an ordinary day this provider is not called at all.
  • Razorpay and Dodo Payments — payment processing. Razorpay receives your name and phone number so the payment page is not a form you have to fill in; Dodo receives your phone number and our own internal reference for your session.
  • Google Ads (measuring which ads lead to a purchase) — if you arrived from a Google ad and later pay, we tell Google that a purchase happened: the identifier Google itself created for your click, the amount, the time, and our own reference number for the session. We do not send your phone number, your name, or anything you have written to Shanti, and we send nothing at all about people who did not arrive from a Google ad.
  • Google Ads — only on the page our Google ads link to. If you arrive from a Google ad, that page loads Google’s measurement tag, and tapping the WhatsApp button tells Google that somebody who clicked that ad chose to open the chat. Google receives the identifier it created for your click, your IP address and your browser. It is not told your number, your name, or anything you write to Shanti. If you did not arrive from a Google ad, the tag is not loaded at all.
  • Google Fonts — every page on this site, including this one, loads its typefaces from Google. That means Google sees your IP address and which browser you are using whenever you read these pages. Nothing else about you is sent, and it happens whether or not you ever message Shanti.
  • Railway — hosting and database.

We may also disclose data where the law requires it — and because that sentence on its own tells you nothing, here is what it means in practice. Every request from a police force, court or other public authority is reviewed before anything is handed over: we check that it comes from a body with the power to compel disclosure, that it reaches an Indian company registered in Odisha, that it cites the provision it is issued under, and that it names the people and the data it seeks. A request that does not meet those tests is refused in writing, and we say why.

One exception we would rather state than bury: where there is a credible and immediate risk to someone's life, we may act faster than the paragraph above describes. Even then we give only what is needed to address that specific risk, we write down that we did it, and we review it properly afterwards. Urgency asserted by whoever is asking is not the same thing.

When a request does meet them, we disclose only the specific fields named, only for the people named, only for the period named. We do not hand over bulk data about people who are not named in the order, and we never send an export because it is easier than a narrow answer. What you have written to Shanti is the most sensitive thing we hold, and it is disclosed only under an order that specifically compels it — never as part of "everything you hold on this person".

Where the law allows us to tell you, we will: what was asked for, by whom, and what we gave. Where an order forbids us from telling you, we record that and tell you once it lapses. We keep a record of every request we receive, including the ones we refuse.

If you came from one of our ads

When you tap one of our ads, or a link on one of our posts, on Facebook or Instagram, Meta creates an identifier for that tap and passes it to us with your first message. If that is how you found us, we report two events back to Meta: when your first conversation happened, and, if you pay, that you paid, how much, and in which currency. Each carries the time it happened and a reference number, so that a repeat is not counted twice.

This is how we learn which ads reach people we can actually help, so we can stop paying for the ones that do not. Meta also uses these events to decide who to show our ads to, including finding people who resemble those who paid. It is not only counting.

Along with each event we send a scrambled version of your phone number: not the number itself, but a fixed code derived from it. This is not anonymous. Anyone holding that code can work out the number it came from, and Meta can match it against numbers it already holds, which is the point of sending it — it lets Meta match the event to your tap when its own identifier has expired, which otherwise loses many of the matches.

With these events we never send Meta your name, anything about what you are dealing with, or anything you have written to Shanti. If you did not arrive from an ad or one of our posts, we report nothing about you to Meta at all.

Said plainly, because the sentence above could mislead otherwise: WhatsApp belongs to Meta. Your messages travel through Meta's platform to reach you — the way a phone company carries a call. There is no way to use WhatsApp otherwise. What this section is about is separate from that: the events we choose to report so we can measure our advertising.

If you would rather we did not do this, ask us to delete your data — see Your rights below. That removes the ad identifier we hold, and nothing further is reported. Meta processes what it has already received under its own policy.

If you message us on Instagram or Messenger

Some people write to us on Instagram, or to our Facebook page, rather than on WhatsApp. This section says what happens to those messages today, and what will change when Shanti starts answering there — because those are two different things and the difference is in your favour right now.

Today we do not keep them. Your message arrives, our system records that a message arrived and nothing more — not the words, not who sent it. Shanti does not read it and cannot reply. If you wrote to us on Instagram and got a short acknowledgement, that is a stock reply written into Instagram itself; it is not her, and it is the only thing that goes out on these platforms at all. We are asking Meta for permission to let Shanti answer there, and until that is granted this is the whole of it.

When she does start answering, we will keep your messages and that identifier the way we keep a WhatsApp conversation — so she remembers what you discussed and you do not have to start again — and the rest of this policy will apply to them exactly as it applies to WhatsApp. We will update this page when that happens rather than leave you to infer it.

She will only ever reply, and never message first. On both platforms she can answer only inside the twenty-four hours after you have written to her, and once that window closes she cannot reach you until you write again. No offers, no reminders, no announcements.

Both platforms give us less about you than WhatsApp does, and one consequence is worth stating rather than leaving you to discover it: we cannot see your phone number, your email, or where in the world you are. Neither provides them, and we do not ask a third party for them. Because we cannot tell which country you are writing from, prices are quoted in rupees. If that is the wrong currency for you, say so and we will sort it out rather than leave you paying the wrong thing.

The advertising measurement described in the section above does not happen for anyone who reaches us this way. Not because of anything clever: these conversations are not connected to a customer record or to that reporting at all. If that ever changes, this page changes first.

Said plainly, for the same reason it is said about WhatsApp above: Instagram and Messenger both belong to Meta. Your messages travel through Meta's platform to reach us and ours travel back through it to reach you, the way a phone company carries a call.

How long we keep it

We keep your conversation history so Shanti can remember you across sessions rather than making you start again each time. The ad identifier described above is kept for as long as we hold the rest of your data. Instagram and Messenger messages are not kept at all today; if that changes, the same rule and the same 30 days will apply to them. If you ask us to delete your data, we do so within 30 days.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it entirely. One thing we cannot delete, and would rather tell you now than when you ask: if a public authority ever made a request about you, the minimal record of that request and what we did about it stays. Being able to show that we handled it lawfully is the whole reason it exists, and it is kept apart from everything else we hold on you. Write to support@shanticoach.in — please use email for this rather than WhatsApp, because messages like "delete me" are read there as a request to stop messaging you, which is a different thing and will not delete anything. We reply within 7 working days.

Security

Your data is stored in an access-controlled database, and payment credentials never reach our servers. Messages and payments all travel over encrypted connections.

Children

This service is meant for people aged 18 and over. We do not knowingly collect data from children.

Grievance officer

Nissar Behera, Director, NKB Growth Consultancy Private Limited. For any privacy concern, or to raise one on behalf of someone else, contact support@shanticoach.in. We acknowledge within 2 working days and resolve within 30 days. The same person handles requests from public authorities, described above.

Home Payment Refunds Privacy Terms Contact
NKB Growth Consultancy Private Limited
Bhubaneswar, Odisha 751021, India
support@shanticoach.in