Marketing automation in India starts with consent, not software

Short answer: Marketing automation in India means a small set of triggered WhatsApp, SMS and email messages, such as order confirmations, payment reminders and festival offers, that send themselves. Start with WhatsApp because that is where customers reply, and settle DPDP Act 2023 consent before the first message goes out. Add SMS only after your TRAI DLT registration is in place, because unregistered SMS is dropped without an error. A small business can often run this for roughly ₹15,000 to ₹50,000 a month all-in, before 18 percent GST, though you should check current pricing.

Ask an Indian shop owner what “marketing automation” means and you will hear one of two answers. A bulk WhatsApp blast from a personal phone to a list bought at a trade fair. Or a tool a cousin in Bengaluru swears by that nobody has logged into since March. Neither is automation in the useful sense.

Useful automation is smaller and duller. A cash-on-delivery order arrives and a message asks the customer to confirm the address. Someone enquires on Monday and hears from you again on Thursday, in their own language, without anyone remembering. A regular customer’s buying season comes round and a message reaches them a week before Diwali, not a week after.

India makes this harder and more rewarding than most markets. Two sets of rules sit over it: the Digital Personal Data Protection Act 2023 over the data, and TRAI’s telecom rules over SMS. But WhatsApp is where customers actually answer, and the festival calendar hands you reasons to write. This guide is not legal advice, so confirm current rules with a qualified adviser and check the official text. For how enquiries reach you in the first place, see SEO, AEO and GEO in India.

Five messages worth automating before anything clever

Most small businesses need five sequences, in this order. An instant reply to a new enquiry, covered in our guide to AI lead generation in India. A confirmation after a purchase or booking. A payment reminder with a UPI link. A review request a few days after delivery or the visit. And a reactivation message to people who bought once and went quiet.

Notice what is missing: ten-step journeys with branching logic. They look impressive in a vendor demo and rarely survive a real customer list. Build the confirmation first, because it is transactional, needs the least consent argument and shows results fastest.

The test is simple. Does the message respond to something the customer just did? Then it is low risk and usually welcome. A cold offer to someone you have not messaged in a year needs the work below first.

Sequence by where Indian customers reply: WhatsApp, SMS, then email

Western guides start with email. In India, order the channels by what people open and answer. WhatsApp first for almost every consumer business: it is already on the phone and a reply is one tap. SMS second, useful for delivery alerts and people not on WhatsApp, but it carries the TRAI registration burden. Email third for most small businesses, though it matters more for B2B buyers, invoices and anyone who wants a record.

A practical pattern is WhatsApp first with a fallback: if a template goes undelivered, try SMS, then email. Each step needs its own consent basis and approved template, which is why the next sections matter more than the choice of software.

Tier matters too. In metros, customers skim many automated messages, so fewer and sharper wins. In tier-2 and tier-3 towns a well-timed message is still noticed, but expect more voice notes and Roman-script replies.

DPDP consent comes before the first message, not after the first complaint

The Digital Personal Data Protection Act 2023 is India’s first general data protection law. You are the Data Fiduciary; the customer is the Data Principal. For marketing, the rules that matter are these.

Consent must be free, specific, informed, unconditional and unambiguous, given by a clear action and tied to a stated purpose. Ask only for data you need. A plain-language notice should say what you collect, why, how to withdraw and how to complain. Withdrawal must be as easy as giving consent, so if someone opted in by replying YES, replying STOP has to work as simply. Registered consent managers exist to help people manage consent across businesses, but a small business need not build one.

The Act also lists narrow “legitimate uses” where consent is not needed, such as processing data a person volunteered for a specific purpose. Do not stretch that into blanket permission to market. Children’s data has its own rule: under 18 generally means verifiable parental consent, and tracking or targeted advertising aimed at children is restricted. A coaching institute should think hard before messaging students directly.

The most serious breach, failing to take reasonable security safeguards, can attract a penalty of up to ₹250 crore, with lower caps for other breaches. A five-person business is unlikely to see that figure, but the Data Protection Board looks at the seriousness of a breach, not only company size.

One warning on timing. The Act passed in 2023, the Rules followed, and obligations commence in phases. Check current MeitY notifications for what is in force today, and ask an adviser how to treat older contacts. Our guide to the DPDP Act for marketing sets out the dates and the job list.

Writing an opt-in line that survives a withdrawal request

Consent is a record, not a feeling. For each contact, store when they opted in, through which channel, the exact wording they saw and what they agreed to receive. Store withdrawals just as carefully, and let a STOP on one channel stop the others.

A workable line reads: “Reply YES to get order updates and occasional offers from [Business name] on WhatsApp. Reply STOP any time to stop.” It names you, says what is coming and gives the exit in the same breath. Adapt it with an adviser rather than copying it, and offer it in the languages your customers use.

Three shortcuts to avoid. Pre-ticked boxes are not a clear affirmative action. Bundling marketing consent into an order form the customer cannot complete without agreeing makes it conditional. And a list bought or borrowed carries no consent from your side, whatever the seller claims.

Keep purposes separate: a customer who agreed to order updates has not agreed to Diwali promotions.

DLT for sequence builders: one template per step, one header per purpose

Our guide to AI lead generation in India explains why unregistered SMS vanishes, so that ground is not repeated. For the registration steps and what gets a sender blocked, see our guide to DLT rules for SMS marketing in India. What matters here is how DLT shapes sequence design.

Under TRAI’s Telecom Commercial Communications Customer Preference Regulations, 2018, you register as an entity, register sender IDs (headers) and register each message template, with consent records and scrubbing against the preference register alongside. Messages fall into broad categories, transactional, service and promotional, and the category decides the header and when you may send. Promotional messages are restricted to a permitted window, commonly understood as 9am to 9pm, so check the current rule before scheduling anything.

Design consequences follow. Every step is a separate template with fixed text and variable slots, so a five-step sequence needs five approvals, and each language needs its own. Draft them before building the flow. Keep promotional content out of transactional templates: slipping an offer into an order alert is what operators act against. And your DPDP consent record and your DLT consent record are different things. The person who agreed to offers on WhatsApp is not automatically registered for promotional SMS. Confirm the mechanics for numbers on the preference register with your operator or aggregator.

WhatsApp templates, the 24-hour window and the language question

WhatsApp Business Platform messaging has its own rules, separate from DLT. You need a clear opt-in naming your business and the kind of messages coming. Anything sent outside a conversation the customer started must be a pre-approved template. Meta groups templates as marketing, utility and authentication, and the category affects approval and price. Replies you send inside a conversation the customer started, without a template, are what Meta calls service messages.

The 24-hour window shapes design. When a customer messages you, a 24-hour customer service window opens, and inside it you can reply without a template. After it closes, only approved templates can be sent. A reactivation message is a marketing template, while an out-for-delivery update tied to an order is utility.

Meta moved to per-message pricing in July 2025, charged on delivered messages. Since 1 October 2026 it charges for service messages again, after they were free from 1 November 2024. Each business phone number gets 1,000 free service messages a month, with no roll-over. From the same date, utility templates sent inside an open customer service window are charged too. If the customer arrived from a click-to-WhatsApp ad and you reply inside the window, a free entry point window opens that Meta says may remain open for up to 7 days, and messages inside it are not charged.

Meta raised its India marketing rate on 1 January 2026, and India accounts must move to rupee (INR) billing by 31 December 2026. Accounts not moved stop delivering messages from 1 January 2027. Meta publishes rupee rates only in its rate-card files, so check them, and your provider’s markup, before budgeting. The full charging detail is in our guide to what AI automation costs in India.

Watch quality as well as cost. Customers can block or report a business, and a poor rating can lower your sending limits. Templates are approved per language. Roman-script Hinglish is common in chat, but test wording on a low-end Android phone, and build voice-note handling, because a text-only flow misses the reply that matters.

Email still earns its place, and Gmail’s rules apply to you

India has no single anti-spam statute mirroring CAN-SPAM or CASL. In practice, DPDP consent and the general Information Technology Act framework govern email addresses, so treat consent as required and keep a working unsubscribe link in every message.

Deliverability is separate and applies to Indian senders. Gmail and Yahoo set bulk sender requirements from 2024: authenticate your domain with SPF, DKIM and DMARC, offer one-click unsubscribe, and keep spam complaints low. Send from your own domain, not a free Gmail address. Email suits receipts, invoices and B2B follow-ups, and is the supporting channel for most Indian small businesses.

Let the festival calendar decide what you build

India’s automation calendar is the festival calendar. Diwali and the run-up through Dhanteras, Navratri, Eid, Pongal, Onam, Akshaya Tritiya, Raksha Bandhan and the end-of-season sales each pull demand into a short window. Regional festivals matter as much as national ones: Pongal means a great deal in Tamil Nadu and little in Punjab, and Onam is a Kerala moment.

Build once and reuse. Draft a template pack about six weeks ahead, because approvals and DLT take time. A simple pack has a teaser to past buyers, the offer, and a last-chance reminder. Segment by region and language, not one greeting for everyone.

Keep consent in view. A festival offer is marketing, so only contacts who opted in to offers should get it. Send one strong message, not five. A daily countdown gets you blocked, and blocks hurt your WhatsApp quality rating long after the festival. If you are reading this in late September, check your consent records now.

UPI links and COD confirmation: the two automations Western guides skip

The first is the payment reminder with a UPI link. Tie it to an invoice: a polite utility message a few days before, one on the day, one after, each with the amount, reference and a gateway payment link. Stop the sequence the moment payment lands, which means connecting it to your payment records. Never ask customers to share PINs or card details in chat.

The second is COD confirmation for online sellers. COD is where returns to origin (RTO) hurt most, since you pay shipping both ways for a parcel nobody accepted. After ordering, a message asks the customer to reply 1 to confirm or 2 to change the address, with an optional UPI link to prepay. Unconfirmed orders can be held or called before dispatch. RTO on COD is often noticeably higher than on prepaid orders, and confirmation is one of the cheapest ways to narrow the gap. Measure your own rate before and after, rather than trusting anyone’s benchmark.

Zoho, a WhatsApp provider or something heavier?

Choose by the job, not the brand.

Zoho is popular in India because it is built by an Indian company, bills in rupees and connects CRM, email campaigns and workflows. Bigin suits very small teams, and it often suits service businesses and B2B sellers wanting one system.

WhatsApp providers such as WATI, Interakt and AiSensy give you templates, broadcasts, a shared inbox and simple flows. For a consumer business this is usually the centre of the setup. Compare template approval help, inbox seats, message markups and store or CRM connections.

Brevo and HubSpot suit businesses wanting email, some SMS and a CRM at a manageable price, though HubSpot climbs sharply as contacts grow. Klaviyo suits D2C stores, since purchase behaviour drives the triggers, but it is priced in dollars, so the rupee cost moves.

At the top, MoEngage, CleverTap and WebEngage serve app-heavy, high-volume brands, usually on annual quotes. A small business rarely needs them yet. Whatever you shortlist, check current pricing and confirm it records consent and honours withdrawals. The tool enforces what you configure, not what the law requires. For the full shortlist, see how to choose a marketing automation platform in India.

A Surat ethnic-wear seller, worked through (hypothetical)

This is an illustration with assumed numbers, not a client result. A Surat online seller does 1,200 orders a month, 60 percent cash on delivery, so 720 COD orders.

Assume 20 percent of COD orders come back as RTO, and each costs about ₹250 in shipping both ways and handling. A WhatsApp confirmation with a UPI prepay option cuts RTO to 15 percent. That is 720 × 5 percent = 36 fewer returns, saving 36 × ₹250 = ₹9,000 a month.

The seller also has 6,000 customers who opted in to offers, and sends one broadcast a month. Assume ₹1 per marketing message, a round number and not a rate quote: ₹6,000. If 1.5 percent order, that is 90 orders. At ₹1,400 average, sales are ₹1,26,000, and at an assumed 25 percent margin, ₹31,500. Monthly benefit: ₹9,000 plus ₹31,500, or ₹40,500.

Costs before GST: messaging ₹7,000 (the ₹6,000 broadcast plus about ₹1,000 of utility messages), a WhatsApp provider plan ₹3,000, an email and CRM plan ₹2,000, and a freelancer maintaining flows ₹12,000. Total ₹24,000, or ₹28,320 with 18 percent GST. Net gain is ₹16,500 with input credit, ₹12,180 without.

The confirmations themselves are utility templates, counted in that ₹1,000. If a customer answers one and you reply without a template, your reply is a service message, and at this volume (720 confirmations, one reply each) those replies sit inside the 1,000 free a month on one number.

An assumed ₹30,000 set-up cost is recovered in roughly two to three months. The caveats are big: the conversion rate is the weakest number, and festival months differ from quiet ones. Test on a small segment first.

What it costs in rupees once GST is added

These are planning bands, so check current pricing. Email and CRM tools run from free tiers to a few thousand rupees a month for a few thousand contacts. A WhatsApp provider plan often starts in the low thousands monthly, with Meta’s message charges on top and sometimes a provider markup. SMS costs a fraction of a rupee each, plus DLT registration fees that vary by operator. Freelancer set-up commonly runs ₹15,000 to ₹50,000 one-off, with ongoing help around ₹8,000 to ₹25,000 a month. An agency running this alongside other channels sits in the ₹25,000 to ₹80,000 retainer band in our guide to digital marketing costs in India. Enterprise engagement platforms are quote-based and can run into lakhs a year.

Then GST. Software and agency fees generally attract 18 percent, so a ₹30,000 monthly bill becomes ₹35,400. If you are registered and the invoice carries your GSTIN, you can generally claim the credit, making it a cash-flow matter. If you are unregistered, or under the composition scheme, it is a real 18 percent addition.

Dollar-billed tools add a layer: GST may appear on the invoice or you may account for it under reverse charge, and cards often add a forex markup of a few percent. Ask your accountant first.

What to measure so you know it is paying for itself

Count rupees, not opens. Revenue per message sent shows whether a sequence earns more than it costs, and it is simple division. Track it per sequence.

Then the guardrails. Opt-out and block rate tells you whether you are over-sending. Template quality rating and rejection rate show whether Meta is losing patience. SMS delivery rate, checked against provider reports, shows whether DLT is working. For ecommerce, track RTO on COD against prepaid. For services, track replies, bookings and no-shows.

Watch how long a person takes to reply after a bot hands over. For wider market context, see our AI marketing statistics for India, but your own numbers matter more than anyone’s average.

Mistakes that get numbers blocked or customers annoyed

Messaging a bought or borrowed list. No consent on your side, and WhatsApp may restrict the account.

Sending offers through a transactional SMS header because it delivers more reliably. It is misuse, and the route can be closed.

Withdrawal that works on one channel only. STOP on WhatsApp followed by an SMS next day is a consent problem and an annoyed customer.

Daily sends in festival week. Frequency is the fastest route to blocks.

Ignoring voice notes and regional replies, so automation answers the wrong question or nothing.

Expecting the software to handle compliance. It records what you tell it. The opt-in wording, template categories and consent mapping are yours.

Who should start now, and who should wait

Start now with a few hundred customers who clearly opted in and a repeat pattern: COD-heavy online sellers, coaching institutes with fee cycles and new batches, clinics with recall visits, jewellers and textile sellers with festival buying, distributors with regular reorders. Tier-2 businesses often see gains first, because fewer rivals reply quickly or in the customer’s language.

Wait, or fix foundations first, if you have under about a hundred consented contacts (a personal message will do better), never captured numbers with consent, or nobody can answer the replies automation generates. Sort the consent record, then build one sequence. If AI will draft the messages, read AI marketing for Indian small business first for the labelling and disclosure rules that apply.

When you want help, Nexiiom builds these flows as part of AI automation. To see where you stand first, get a free audit.

Frequently asked questions

Does a WhatsApp opt-in have to follow the DPDP Act, and what should it say? Yes, if it collects a phone number you will use for marketing. It should say who you are, what the person will receive, on which channel, and how to stop. It must be a clear action by the customer, such as replying YES, not a pre-ticked box or silence treated as agreement. Have a qualified adviser check the wording against the current Rules.

Is a Zoho plan enough, or do I also need a separate WhatsApp provider? For email, CRM and simple workflows, a Zoho plan is often enough for a small business. WhatsApp marketing usually needs a Business Platform provider on top, because messaging runs through Meta-approved access. Check whether your Zoho edition connects natively or through an add-on, and what that costs at your message volume.

If I already have DLT approval for order alerts, can I reuse it for offers? Not automatically. Order alerts and offers are different categories, and each needs its own registered header and content template. Sending offers through a transactional header is the misuse operators filter for. Register the promotional route separately and check current TRAI rules on hours and consent before the first send.

What does GST do to the total cost of marketing automation? It adds 18 percent to software subscriptions and to agency or freelancer invoices. If you are GST-registered and the invoice carries your GSTIN, you can generally claim it back as input tax credit. If you are unregistered or on the composition scheme, it is a genuine 18 percent extra, so budget for it.

Do festival campaigns need separate consent? Only if the original opt-in did not cover them. If the customer agreed to offers and updates, a Diwali offer falls inside that purpose. If they agreed only to order updates, a festival promotion is a new purpose and needs a fresh, specific opt-in. Under DPDP, the wording you used at capture decides what you can send.

Should a tier-2 business automate differently from a metro one? The tools are the same, but the sequence is not. Tier-2 customers more often reply by voice note or in Roman-script Hindi, Marathi or Tamil, so build a clean handoff to a person and approve templates in the languages people use. Metro customers tolerate less frequency, so send fewer messages and lead with the offer.

When should I hire an agency and when should I do it myself? Do it yourself if you have one channel, a few hundred consented contacts and someone with a few hours a week. Hire help when WhatsApp, SMS and email must work together with DLT and consent handled correctly, or when nobody can own it. A freelancer suits a one-off build; an agency suits ongoing testing.

How long until marketing automation pays back in India? With an existing consented list and an obvious repeat pattern, first triggered messages can show revenue within a month, and recovering set-up costs commonly takes a few months. If the list or the consent records must be rebuilt first, expect longer, and treat any promised payback date with caution.

---

Not sure whether your current list and WhatsApp opt-ins would stand up to the DPDP Act? Get a free marketing audit and we will tell you plainly what to fix first.