Amazon India Seller WhatsApp 2026: The DPDP Act, GST and UPI Reality

The five questions an Amazon.in seller actually asks a WhatsApp platform

Before comparing features, an Amazon.in seller in Mumbai, Delhi, Bengaluru, Chennai, Hyderabad or a Tier-2 town asks five compliance-plus-fit questions when selecting a WhatsApp automation platform:

1. Amazon Communication Guidelines and Marketplace Policy boundary. Does the team understand that Amazon prohibits using buyer contact details (name, phone, address obtained via Amazon order) for off-platform communication that circumvents Amazon Buyer-Seller Messaging for order-related contact? Amazon reserves the right to suspend a seller for using WhatsApp to complete an Amazon transaction outside the platform, or for unsolicited marketing to Amazon buyers. WhatsApp is appropriate for own-website D2C customers with lawful consent — not for Amazon buyers without independent opt-in.

2. DPDP Act 2023 grievance officer and Data Fiduciary duties. Does the platform allow the seller to display Grievance Officer contact details in the first WhatsApp interaction (required by Section 8 DPDP Act 2023 for Data Fiduciary + Consumer Protection E-Commerce Rules 2020 Rule 7)? Is there a documented consent capture flow per Section 6 DPDP Act with clear, plain-language purpose statement? Is the platform prepared for potential designation as Significant Data Fiduciary if the seller crosses the threshold?

3. Consumer Protection E-Commerce Rules 2020 Rule 7 seller duties on marketplace. Does the platform template stack include the mandated information: legal name, principal geographic address, name of the website, email, phone, GSTIN, return policy, refund policy, exchange policy, warranty and guarantee, payment methods, security procedures for payment methods, grievance redressal mechanism, name of the Grievance Officer and their contact details, country of origin — for products where the seller is on Amazon Marketplace?

4. GST e-invoice and e-Way Bill for D2C sales. For a seller with turnover above ₹5 crore, does the platform integrate with an IRP-integrated GST software (Tally Prime, Zoho Books India, Cleartax GST, Marg ERP, Busy Accounting, Vyapar, Refrens, MyBillBook) to generate e-invoice with IRN and QR code for own-website D2C sales? For goods movement > ₹50,000, does the software handle e-Way Bill? Note that Amazon Pay handles GST TCS 1% collection under Section 52 CGST Act for Amazon Marketplace sales — the seller is separately responsible for GST returns.

5. UPI, cards and D2C payment flow. Does the platform integrate with an RBI-licensed Payment Aggregator (Razorpay, Cashfree, PayU India, Paytm Business, PhonePe Merchant, BharatPe, Instamojo, PaySharp) for D2C sales outside Amazon? UPI as primary channel (via NPCI, mandatory to offer for merchant acceptance in India), UPI Lite for low-value, cards and net banking as fallback. For Amazon Marketplace sales, Amazon Pay is the settlement channel and the seller receives payout after GST TCS 1% and Income Tax TDS 1% under Section 194-O deducted.

What Amazon.in Marketplace policy actually allows and prohibits for WhatsApp

Amazon Communication Guidelines (published in Seller Central and updated periodically) set out what a seller can and cannot communicate to a buyer via Amazon Buyer-Seller Messaging and via external channels. Practical rules that shape WhatsApp use:

What Amazon Buyer-Seller Messaging is designed for: order-related communication only — confirming details of an order, addressing customer service issues that could not be resolved without contact, resolving return or refund questions. Amazon-generated permitted messages include shipment confirmations, review requests (via one 'Request a Review' button per order that sends Amazon's standard template), and warranty/product-related safety issues.

What Amazon prohibits:
* Unsolicited marketing messages to buyers via any channel using contact information obtained from Amazon.
* Attempts to divert future purchases off Amazon (linking to the seller's own website, other marketplaces, or offering off-Amazon prices).
* Requests for positive reviews or offers of incentives for reviews (violates Amazon Community Guidelines).
* Sharing buyer contact information with third parties.
* Direct requests for buyer to contact seller outside Amazon for order-related matters.

What sellers can lawfully do on WhatsApp:
* Operate own D2C brand website with independent WhatsApp customer support for customers who came via the D2C site (not via Amazon).
* Post-purchase warranty registration if the customer voluntarily provides WhatsApp number and independent consent for warranty/support contact.
* Handle grievance escalation that came in via Amazon Buyer-Seller Messaging by continuing on Amazon's channel and moving to phone/email only if the buyer requests it.

Consequence of violation: Amazon can suspend the seller's account with limited appeal window (typically 17 days for the seller to submit a Plan of Action). Repeat violations lead to permanent removal from selling on Amazon. Consumer Protection E-Commerce Rules 2020 Rule 5 also holds marketplace operators responsible for their sellers' compliance — Amazon has strong incentive to enforce.

DPDP Act 2023 and IT Rules 2011 — the data privacy layer for Indian sellers

The Digital Personal Data Protection Act 2023 (DPDP Act) was enacted in August 2023 as India's first comprehensive personal data protection law, superseding parts of the IT Act 2000. The Data Protection Board of India (DPBI) is being operationalised in phases through 2024-2026, and the DPDP Rules are being notified in stages. Key sections for an Amazon.in seller running WhatsApp:

Section 2 definitions. Data Fiduciary = the person who alone or in conjunction with other persons determines the purpose and means of processing of personal data (the seller). Data Processor = the person who processes personal data on behalf of a Data Fiduciary (the WhatsApp BSP). Data Principal = the individual to whom the personal data relates (the customer).

Section 4 grounds for processing. Only two grounds: (a) consent under Section 6, or (b) 'legitimate uses' under Section 7 (specified narrow purposes including employment, medical emergency, public interest as notified).

Section 5 notice at the time of collection. Clear and plain language, itemised description of personal data proposed to be processed, purpose, manner in which the Data Principal may exercise rights under Section 11-13.

Section 6 consent. Free, specific, informed, unconditional, unambiguous, with clear affirmative action. Withdrawal must be as easy as giving consent.

Section 8 general obligations of a Data Fiduciary. Ensure the completeness, accuracy and consistency of personal data. Implement appropriate technical and organisational measures. Publish contact details of a Data Protection Officer or a person who can answer queries. Provide an effective mechanism to redress the grievances of Data Principals.

Section 10 additional obligations for Significant Data Fiduciary (SDF). Central Government can designate an entity as SDF based on volume/sensitivity/risk factors. SDF must appoint a DPO located in India, an independent data auditor, and conduct periodic Data Protection Impact Assessments (DPIA).

Section 16 processing outside India. Central Government may notify countries to which transfer is restricted. Sectoral regulators can also impose restrictions.

Section 25 penalties. Up to ₹250 crore for breach of duty to protect personal data; up to ₹200 crore for failure to notify a personal data breach; other slabs at ₹150 crore, ₹50 crore, ₹10 crore. Adjudicated by the Data Protection Board of India.

IT Rules 2011 SPDI (still in force where DPDP has not notified). The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 apply for security practices under IT Act Section 43A. Categories of Sensitive Personal Data or Information include passwords, financial information, health information, biometric information. Sellers processing SPDI must obtain consent, use reasonable security practices (ISO/IEC 27001 is a recognised standard), and disclose the security practices in a privacy policy.

Consumer Protection Act 2019 and E-Commerce Rules 2020 — the e-commerce compliance layer

The Consumer Protection Act 2019 created the Central Consumer Protection Authority (CCPA) and updated India's consumer-rights framework for the digital era. The Consumer Protection (E-Commerce) Rules 2020 notified under Section 101 specifically address online sellers. Highlights for an Amazon.in seller:

Section 2(16) Consumer Protection Act 2019. E-commerce means buying or selling of goods or services including digital products over digital or electronic network.

Section 2(46). Unfair trade practice includes misleading advertisements, refusing to take back defective goods, failure to withdraw dangerous goods.

E-Commerce Rules 2020 Rule 4 — inventory model e-commerce entity duties. Applies primarily to marketplace's own inventory sales but the principles are also enforced for marketplace sellers indirectly through Amazon's policies.

E-Commerce Rules 2020 Rule 5 — marketplace e-commerce entity duties. Amazon as marketplace has obligations: appoint a Grievance Officer, respond to complaints within 48 hours and resolve within one month, ensure sellers provide the information required under Rule 7, disclose seller details, disclose the return/refund/warranty/exchange policies. This means Amazon enforces compliance on its sellers.

E-Commerce Rules 2020 Rule 6 — e-commerce entity duties. Display country of origin at the pre-purchase stage. No manipulation of price to gain unreasonable profit. No refusal to take back or withdraw goods that are defective, deficient or spurious.

E-Commerce Rules 2020 Rule 7 — sellers on marketplace duties (the seller's own obligations). Provide these details to marketplace (and Amazon requires the seller to display them in listings):
* Legal name, principal geographic address, name of the website, email, phone.
* GSTIN.
* Return policy, refund policy, exchange policy, warranty and guarantee, delivery and shipment policies.
* Payment methods, security procedures for payment.
* Grievance redressal mechanism, name and contact of Grievance Officer.
* Country of origin of goods.
* Best before or use before date for perishable products.
* Total price with a break-up (tax, delivery, etc.).

Legal Metrology (Packaged Commodities) Rules 2011 — apply additionally to packaged goods. Mandatory declarations: name and address of manufacturer/packer/importer, common or generic name, net quantity, month and year of manufacture, retail sale price (MRP) inclusive of all taxes, consumer care details. E-commerce listings must display these before order placement.

CCPA enforcement. Under Section 21 Consumer Protection Act 2019, CCPA can order recall, refund, discontinuation of unfair trade practices, and impose penalties. Section 89 penalties up to ₹10 lakh for false or misleading advertisements + imprisonment up to 2 years.

GST 2017, e-invoice, e-Way Bill, and Section 194-O TDS — the fiscal layer

Goods and Services Tax Act 2017 (CGST + SGST/UTGST + IGST). Central and State GST charged simultaneously (or IGST for inter-state and imports). Standard rates: 5%, 12%, 18%, 28% depending on product classification (HSN code) and category. Registration mandatory for aggregate turnover > ₹40 lakh for goods (₹20 lakh for services) in most states; lower for special category states.

GST e-Invoice. Mandatory for B2B sales for businesses with aggregate turnover above ₹5 crore since August 2023 (originally ₹500 crore in 2020, lowered progressively). Generated via GSTN's Invoice Registration Portal (IRP) with:
* IRN (Invoice Reference Number) — unique 64-character hash.
* QR code with essential invoice details for validation.
* Signed JSON with digital signature.
Software: Tally Prime, Zoho Books India, Cleartax GST, Marg ERP, Busy Accounting, Vyapar, Refrens, MyBillBook — with IRP integration.

GST e-Way Bill. Mandatory for movement of goods > ₹50,000 in value (may vary by state for intra-state movement). Generated via ewaybill.nic.in with vehicle details, consignor, consignee, HSN, value. Validity depends on distance.

GST TCS (Tax Collected at Source) Section 52 CGST Act. Amazon Pay as e-commerce operator collects 1% TCS on net value of taxable supplies made through the platform (0.5% CGST + 0.5% SGST, or 1% IGST for inter-state). Deposited with the government by the 10th of the following month. Seller can claim credit in GSTR-2A.

Income Tax Section 194-O. E-commerce operator (Amazon Pay) deducts 1% TDS on gross amount of sales/services made through e-commerce platform to Indian resident sellers. Deducted on gross amount before commission/fees. Deposited by 7th of next month.

Income Tax Section 194-Q. Buyer with turnover > ₹10 crore must deduct 0.1% TDS on purchase of goods > ₹50 lakh from a single seller in a financial year (applies to some B2B scenarios).

GST returns.
* GSTR-1 — outward supplies, monthly or quarterly under QRMP scheme.
* GSTR-3B — summary return, monthly.
* GSTR-2A/2B — auto-populated input tax credit statement.
* GSTR-9 — annual return.
* GSTR-8 — TCS return, filed by e-commerce operators (Amazon Pay files this for its sellers).

Combined tax on Amazon payout example. Seller sells item for ₹1,000 + 18% GST = ₹1,180 gross on Amazon. Amazon deducts: commission (~15% typical), FBA fees if applicable, referral fees, closing fees, shipping. On the pre-commission gross amount, Amazon Pay withholds GST TCS 1% (₹11.80) and Income Tax TDS under Section 194-O 1% (₹11.80). Both are credited to the seller's GST/Income Tax accounts and claimable as credit.

RBI, UPI, Payment Aggregators and the D2C payment layer for own-brand websites

For sales OUTSIDE Amazon (own D2C brand website), the seller needs a compliant payment layer regulated by the Reserve Bank of India (RBI):

UPI (Unified Payments Interface) — operated by NPCI (National Payments Corporation of India). Real-time payment system, free for P2P and merchant transactions typically no MDR (Merchant Discount Rate) for RuPay and UPI transactions up to ₹2,000 per government policy since January 2020. UPI apps include Google Pay India, PhonePe (Walmart), Paytm, BHIM, Amazon Pay, WhatsApp Pay India, Cred, MobiKwik, Freecharge, Bharat Interface for Money.

UPI Lite — for small-value payments up to ₹500 per transaction, wallet up to ₹4,000. Offline capability being rolled out.

Bharat QR — RBI's interoperable QR standard supporting all networks (Visa, Mastercard, RuPay, UPI).

BBPS (Bharat Bill Payment System) — for bill payments (utilities, insurance, education).

RBI Payment Aggregator (PA) Licence. Mandatory since 2020 for entities that provide the ability to accept online payments on behalf of merchants. Payment Aggregator license under RBI's 'Guidelines on Regulation of Payment Aggregators and Payment Gateways' March 2020. RBI-licensed PAs in India include:
* Razorpay (Bengaluru, licensed) — UPI + cards + net banking + wallets + EMI.
* Cashfree (Bengaluru, licensed) — similar full stack.
* PayU India (Naspers/Prosus, licensed) — full stack.
* Paytm Payments (Noida, group licensed) — Paytm ecosystem.
* PhonePe for Business (Bengaluru, Walmart-backed).
* BharatPe (New Delhi, merchant-first with lending).
* Instamojo (Bengaluru) — payment links focused.
* PaySharp, BillDesk, Juspay, Pine Labs — other licensed entities.

Real WhatsApp BSPs with Indian operations:

• Gupshup (Silicon Valley HQ, major Mumbai operations since Karix acquisition 2019, unicorn 2021) — full conversational AI + WhatsApp Business Platform + SMS + RCS + voice + email + AI chatbots. Rupee billing available. Strong presence in Indian enterprise.
• Karix Mobile (now part of Route Mobile Group, which Proximus acquired 2023) — WhatsApp Business Platform + SMS + RCS + voice.
• Kaleyra (Bengaluru operations, SUSE-backed) — CPaaS with WhatsApp + SMS + voice + email.
• Exotel (Bengaluru) — voice + SMS + WhatsApp with focus on customer experience.
• Netcore Cloud (Mumbai) — marketing automation + WhatsApp + email + push.
• ValueFirst (Gurgaon) — CPaaS with WhatsApp + SMS.
• Sinch India — India office of Sinch AB (Sweden).
• Twilio India — via Indian reseller partners.

International BSPs active in India: Wati (Hong Kong via Meta BSP), Respond.io (Malaysia), Sleekflow (Singapore/Hong Kong), Kommo (US/UK), BossBot (multichannel WhatsApp + Telegram + Viber, US$19/month entry plan with 7-day trial — product from the founder of this blog).

Meta pricing for India 2026. Per Meta public pricing (business.whatsapp.com/products/business-platform/pricing), India is one of the lowest-cost markets globally with approximately US$0.0032-0.0043 per marketing conversation and around US$0.0014-0.0021 per utility conversation on the 24-hour window. Utility templates (order confirmation for D2C, warranty registration, post-purchase support for D2C) are cheaper than marketing.

Amazon.in Marketplace specifics — Amazon Pay, FBA India, and Amazon-approved communication

Amazon Seller Services Private Limited (ASSPL) is the operator of Amazon.in Marketplace, headquartered in Bengaluru. Sellers register via Seller Central (sellercentral.amazon.in) and must provide:

• PAN and Aadhaar (or business PAN + authorised signatory Aadhaar).
• GSTIN (mandatory for taxable goods).
• Bank account for payouts (in India, current account typically required).
• Address proof and business proof as required.

Amazon Pay — RBI-licensed Prepaid Payment Instrument (PPI) since 2017 under Amazon Pay (India) Private Limited. Handles the collection and settlement for Marketplace sales, including:
* GST TCS 1% under CGST Section 52.
* Income Tax TDS 1% under Section 194-O.
* Seller settlement at 7-day cycles typically (individual, professional plan differs).

Fulfilment by Amazon (FBA) India — Amazon Warehousing and Logistics Services. Seller ships inventory to Amazon Fulfilment Centres in India; Amazon handles storage, pick-pack-ship, customer service, and returns for a per-unit fee based on size/weight and category. FBA sellers are typically 'Prime Eligible' with Prime delivery SLAs.

Amazon Business (B2B). Amazon.in Business platform for B2B sales, including GST invoice-eligible listings, bulk-order discounts, and business-only pricing. GST e-invoice compliance particularly relevant since Amazon Business tends to attract buyers above the ₹5 crore turnover threshold that requires e-invoice on their end.

Amazon Buyer-Seller Messaging. In-Seller-Central messaging system that Amazon provides for order-related communication. Amazon logs, monitors and can review all messages. Marketing content in these messages is prohibited.

'Request a Review' button. Amazon-provided button in Seller Central that sends Amazon's standard review-request template to the buyer (once per order). This is the sanctioned way to request reviews — sellers must NOT send their own review-request messages via WhatsApp to Amazon-obtained contacts.

A9 algorithm and seller policy consequences. Amazon's A9 search algorithm considers seller performance metrics (order defect rate, late shipment rate, cancellation rate, valid tracking rate, customer feedback). Policy violations (unauthorised off-platform contact, review manipulation, unfair reviews) can reduce Buy Box eligibility and organic ranking.

TRAI DND registry. The Telecom Regulatory Authority of India's Do Not Disturb (DND) registry applies to SMS marketing under TRAI Telecom Commercial Communications Customer Preference Regulations 2018 (TCCCPR 2018). WhatsApp is not directly under TRAI, but consent principles are similar. Sellers must respect DND registration status for SMS confirmation channels used alongside WhatsApp.

The defensible 2026 Indian Amazon-seller WhatsApp stack

Combining the layers above, the WhatsApp automation stack an Amazon.in seller can defend before DPBI, CCPA, GST authorities, and Amazon Seller Performance in 2026:

1. WhatsApp Business Platform via a BSP with Indian operations or an adequate DPA referencing DPDP Act 2023. Preference for Gupshup (Silicon Valley + Mumbai, rupee billing), Karix (Route Mobile), Kaleyra (Bengaluru), Exotel (Bengaluru), Netcore (Mumbai), ValueFirst (Gurgaon) or Sinch India — Indian-anchored BSPs with local support and DPA in English or Hindi. International BSPs (Wati, Respond.io, Sleekflow, Kommo) require DPDP Act 2023 Section 16 cross-border transfer safeguards and can be flagged by DPBI audits if the Central Government notifies restrictions.

2. Amazon Seller Central with proper use of Amazon Buyer-Seller Messaging — WhatsApp for D2C only, never for Amazon buyer contact. Hard boundary. Amazon-obtained buyer contacts stay on Amazon Buyer-Seller Messaging. Own D2C website WhatsApp is a separate universe with its own consent architecture.

3. GST e-invoice via IRP-integrated software for turnover above ₹5 crore + GST e-Way Bill for goods movement above ₹50,000. Tally Prime, Zoho Books India, Cleartax GST, Marg ERP, Busy Accounting, Vyapar, Refrens, MyBillBook. The software handles IRN + QR code generation for B2B invoices and integrates with GSTR-1/3B/9 filing. Amazon Pay handles GST TCS 1% for Marketplace sales; seller claims credit in GSTR-2B.

4. Meta-approved templates segmented for D2C brand (Amazon buyers OUT of scope) and reviewed under Consumer Protection Rules. Utility templates (D2C order confirmation, D2C shipment notification, warranty registration for own brand, post-purchase support for D2C) are the majority and Meta-priced lower. Marketing templates (own D2C brand promo, new product launch for own brand) go through review under Consumer Protection Rule 5 (marketplace-adjacent duties) and DPDP Act 2023 Section 5 (notice at collection) + Section 6 (consent for marketing).

5. Written internal policy on what is NOT automated. Unsolicited marketing to Amazon buyers is a hard-no (Amazon policy + Consumer Protection Rules). Grievance escalation to CCPA or DPBI needs human handling with the Grievance Officer per Rule 4/7 of E-Commerce Rules and Section 8 DPDP Act. Return or refund disputes need human with clear record. Legal notice or CCPA action → immediate legal counsel involvement.

Five documents that separate a compliant seller from those without an audit trail:

• GSTIN with valid GST registration and up-to-date GSTR filings, PAN, Aadhaar of authorised signatory, and Amazon Seller Central account in good standing.
• DPDP Act 2023 privacy notice at the time of collection on the D2C site and in the WhatsApp first-contact template, with Section 5 required items (data categories, purposes, means of exercising rights) and Grievance Officer contact per Section 8 and E-Commerce Rules Rule 7.
• Amazon-side listings meeting Consumer Protection E-Commerce Rules 2020 Rule 7 (legal name, GSTIN, return/refund/warranty, Grievance Officer, country of origin) and Legal Metrology (Packaged Commodities) Rules 2011 declarations (MRP, net quantity, manufacturer, best before).
• Written DPA with the WhatsApp BSP in English or Hindi referencing DPDP Act 2023 Section 8-9 duties, Section 16 cross-border transfer, IT Rules 2011 SPDI security practices, and Amazon Communication Guidelines compliance.
• Complete e-invoice records with IRN and QR code for all B2B sales above ₹5 crore aggregate turnover threshold + e-Way Bill records for goods movement above ₹50,000 + monthly GSTR-1/3B and annual GSTR-9 filings.

For a small Amazon.in seller (individual seller plan, less than ₹40 lakh annual turnover, own D2C site optional), a combination of Amazon Seller Central + free WhatsApp Business app (Meta) for the D2C site + Vyapar or MyBillBook for GST + Razorpay Payment Links for D2C sales covers most needs. A paid BSP platform (Gupshup, Wati, BossBot — approximately ₹1,500 to ₹8,000/month) justifies itself for professional sellers with own strong D2C brand, multiple product lines, and volume that needs broadcast templates with granular consent tracking under DPDP Act 2023.