Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Your name, email address, and hashed password when you register for an account.
• WhatsApp Numbers: Phone numbers you register with our platform for use with the Meta WhatsApp Business API.
• Message Content: Message templates you create and the content of messages you send through the platform.
• Payment Information: Transaction details processed via Razorpay. We do not store full card numbers or sensitive payment credentials — these are handled directly by Razorpay.
• Usage Data: Logs of actions you perform on the platform, such as sending messages or managing numbers, for security and auditing purposes.

2. How We Use Your Information

We use the collected information to:

• Authenticate you and manage your account securely.
• Enable you to register and verify WhatsApp numbers via the Meta WhatsApp Business API.
• Process and deliver messages to recipients through Meta's API on your behalf.
• Manage your message templates and submission to Meta for approval.
• Process payments and track your credit balance.
• Maintain platform security and detect fraudulent or abusive activity.
• Communicate important service updates, security alerts, or support responses.

3. Third-Party Services

Our platform integrates with the following third-party services. Your use of these services is subject to their respective privacy policies:

• Meta (Facebook) WhatsApp Business API: Used to send and receive WhatsApp messages and manage number registration. Data is processed according to Meta's Data Policy.
• Razorpay: Used to process payments for platform credits. Razorpay processes your payment information in accordance with their Privacy Policy.

4. Data Storage and Security

Your data is stored in a secure database. We take the following measures to protect your information:

• Passwords are hashed using bcrypt and are never stored in plain text.
• Authentication is managed via secure, server-side sessions (NextAuth).
• API credentials (Meta access tokens, Razorpay keys) are stored as environment variables and never exposed to the client.
• Access to your data is restricted — you can only view and manage records associated with your own account.

5. Message Recipients

When you send messages through our platform, you are responsible for ensuring you have the appropriate consent from message recipients as required by Meta's WhatsApp Business Policy and applicable laws (including GDPR and India's PDPB). We act only as a conduit to the Meta API and do not independently contact your message recipients.

6. Data Retention

We retain your account data for as long as your account is active. Message records and templates are retained to allow you to manage your sending history. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Object to or restrict certain processing of your data.
• Withdraw consent at any time where processing is based on consent (e.g., marketing communications).

To exercise any of these rights, please contact us using the details below.

8. Cookies

We use a single session cookie to keep you logged in. This cookie is essential for the platform to function and does not track you across other websites. We do not use advertising or analytics cookies.

9. Children's Privacy

This platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. We encourage you to review this page periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: