Privacy Policy

1. Information We Collect

We collect information that you provide directly, information collected automatically when you use the Services, and information processed on your behalf as part of your messaging activity.

1.1 Personal Information

Information that identifies you as an individual, provided when you register or manage your account, including your name, email address, password, and contact details.

1.2 Business Information

Information about your organization, including business name, GSTIN or tax identifiers, billing address, WhatsApp Business Account details, display name, and phone numbers registered with the Services.

1.3 Device & Technical Information

We automatically collect certain technical data, such as your IP address, browser type, operating system, device identifiers, and referring pages, for security, debugging, and analytics.

1.4 Log Files

Our servers automatically record information ("log data") created by your use of the Services, including access times, pages viewed, API requests, and error logs, which help us maintain security and diagnose issues.

1.5 Cookies & Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage. For full details, see our Cookie Policy.

1.6 Analytics

We use analytics tools (such as Google Analytics) to understand how the Services are used and to improve them. These tools may collect information such as pages visited, session duration, and general geographic location.

1.7 Payment Information

When you make a payment, your card or payment details are collected and processed directly by our third-party payment processors (such as Razorpay and/or Stripe). We do not store full card numbers on our servers; we retain only limited transaction records necessary for billing and accounting.

1.8 Messaging & Customer Data

To provide the Services, we process message content, recipient phone numbers, delivery and read status, and related metadata that you transmit through the WhatsApp Business API. This data is processed on your behalf as described in our Data Processing Agreement; you are the controller of your customers' data, and we act as your processor.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, maintain, and improve the Services, including processing transactions and managing API performance.
• Authenticate users, secure accounts, and prevent fraud, abuse, and unauthorized access.
• Communicate with you about service updates, security alerts, billing, and administrative messages.
• Provide customer support and respond to your requests.
• Monitor and analyze usage and trends to enhance user experience and develop new features.
• Comply with legal obligations and enforce our Terms & Conditions and policies.

3. Legal Basis for Processing

Where applicable data protection law requires it, we rely on one or more of the following legal bases to process your personal information: (a) your consent; (b) performance of a contract with you; (c) compliance with a legal obligation; and (d) our legitimate interests in operating and securing the Services, provided these are not overridden by your rights.

4. Data Retention

We retain your information for as long as your account is active and as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we securely delete or anonymize it. Certain records (such as invoices and transaction logs) may be retained for longer periods where required by tax, accounting, or other laws.

5. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using SSL/TLS and encryption of sensitive data at rest.
• Role-based access controls and the principle of least privilege for internal access.
• Regular review of our collection, storage, and processing practices.
• Monitoring, logging, and incident-response procedures, as described in our Security Policy.

While we work hard to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Sharing & Disclosure

We do not sell or rent your personal information. We share information only in the following circumstances:

6.1 Meta / WhatsApp

To deliver messages, we share necessary data with Meta Platforms, Inc. through the Official WhatsApp Business API. Meta's processing of that data is governed by Meta's own terms and privacy policies. WhatsApp and Meta are trademarks of Meta Platforms, Inc., and OTSWP is not endorsed by or affiliated with WhatsApp or Meta.

6.2 Payment Processors

We share billing information with payment providers such as Razorpay and/or Stripe to process your payments. Their handling of your data is governed by their respective privacy policies.

6.3 Analytics Providers

We share limited usage data with analytics providers such as Google Analytics to help us understand and improve the Services.

6.4 Service Providers & Sub-processors

We engage trusted third-party vendors (for hosting, email delivery, and infrastructure) who process data on our behalf under confidentiality and data-protection obligations. A list of sub-processors is available in our Data Processing Agreement.

6.5 Legal & Business Transfers

We may disclose information if required by law, regulation, legal process, or governmental request, or in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred subject to this Policy.

7. Your Rights & Choices

Subject to applicable law, you have control over your information:

• Access & Update: You can access, correct, or delete your account information at any time from your dashboard settings.
• Communications: You can opt out of promotional emails using the unsubscribe link; we may still send essential service and transactional messages.
• Cookies: You can control cookies through your browser or our consent manager, as described in our Cookie Policy.
• Deletion: You may request deletion of your personal data, subject to legal retention requirements, by contacting us.

8. GDPR (EU/UK Users)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation, including the rights to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority. Where we rely on consent, you may withdraw it at any time.

9. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, the right to request deletion, the right to opt out of the "sale" of personal information (we do not sell your data), and the right not to be discriminated against for exercising your rights.

10. Children's Privacy

The Services are intended for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.

11. International Data Transfers

We are based in India, and your information may be processed and stored in India or in other countries where we or our service providers operate. Where we transfer personal data across borders, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by other means, such as email, and update the "Last Updated" date above. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: