Privacy Policy

NotifyTechAI ("we", "our", or "us") is a WhatsApp Business API platform designed for Indian small and medium businesses. We operate at notifytechai.com and provide tools for managing WhatsApp conversations, running broadcast campaigns, and tracking customer engagement.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have. By using our platform, you agree to the practices described here. If you do not agree, please discontinue use and contact us to delete your account.

We collect data in three ways: data you provide directly, data generated by using our platform, and technical data from your device and browser.

Data you provide directly:

• Account registration details — name, business name, email address, and password
• WhatsApp number(s) you connect to our platform
• Contact and CRM data you import or create — names, phone numbers, tags, and notes
• Campaign content — message templates and media files you upload
• Billing and payment details processed via our payment partner

Data generated by platform use:

• WhatsApp message history for conversations handled through our inbox
• Campaign delivery metrics — sent, delivered, read, and failed counts
• Agent activity — response times, conversations handled, and team assignments
• Session events — when a WhatsApp number connects, disconnects, or syncs

Technical data:

• IP address, browser type, and operating system
• Pages visited within the dashboard and time spent
• Error logs and performance diagnostics

We use collected data solely to operate and improve the NotifyTechAI platform. Specifically:

• Service delivery — routing incoming and outgoing WhatsApp messages, processing campaign sends, and maintaining your inbox
• Account management — authentication, tenant provisioning, role-based access control, and team invitations
• Analytics — generating your dashboard metrics and campaign performance reports. We do not sell or share these analytics with third parties
• Support — diagnosing issues you report and responding to support requests sent to our team
• Billing — managing your subscription plan, usage limits, and payment records
• Platform improvement— aggregated, anonymised usage patterns to guide product decisions. No individual user's data is used for this without anonymisation

All data is stored on servers located in India or within jurisdictions compliant with applicable Indian data protection law. We apply the following measures to protect your data:

• Encryption in transit via TLS 1.2+ for all API and dashboard traffic
• Encryption at rest for database volumes and file storage
• Strict multi-tenant isolation — each business's data, contacts, conversations, and sessions are logically separated and inaccessible to other tenants
• Role-based access control — team members only access the data their assigned role permits
• Refresh token rotation and httpOnly cookie auth to prevent session hijacking
• Regular security reviews and dependency audits

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@notifytechai.com.

NotifyTechAI connects your WhatsApp number using a session-based integration. We act as a data processor for WhatsApp messages on your behalf — you remain the data controller responsible for the contacts you communicate with.

Message content, delivery receipts, and read acknowledgements are stored within your tenant's isolated environment and are not shared with Meta or any third party beyond what is inherent in transmitting messages through WhatsApp's network.

You are solely responsible for ensuring that all contacts you message through our platform have opted in to receive WhatsApp communications from your business, in accordance with WhatsApp's Business Policy and applicable Indian regulations. NotifyTechAI does not validate contact opt-in status on your behalf.

We do not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

• Infrastructure providers — cloud hosting, database, and caching services necessary to run the platform, bound by data processing agreements
• Payment processors — your billing information is handled by our payment partner; we do not store raw card details on our servers
• Legal obligation — if required by Indian law, court order, or a government authority with lawful jurisdiction
• Business transfer — in the event of a merger or acquisition, data may transfer to the successor entity under the same protective terms

We retain your account data for as long as your account is active. When you delete your account:

• Account and profile data is deleted within 30 days of the deletion request
• Message history and campaign records within your workspace are deleted in the same 30-day window
• Billing records are retained for 7 years as required under the Indian Accounting Standards and GST regulations
• Anonymised, aggregated usage metrics that cannot be linked back to you may be retained indefinitely for platform analytics

To request account deletion, email support@notifytechai.comwith the subject line "Account Deletion Request".

You have the following rights over the personal data we hold about you:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request erasure of your personal data, subject to legal retention obligations
• Portability — receive your account data in a machine-readable format
• Objection — object to processing carried out on the basis of legitimate interest

To exercise any of these rights, contact us at support@notifytechai.com. We will respond within 30 days.

NotifyTechAI uses a minimal set of cookies necessary to operate the platform:

• Session cookie — an httpOnly, Secure cookie storing your refresh token. This is essential for keeping you signed in and cannot be disabled while using the dashboard
• Theme preference — a local-storage entry recording your light/dark mode choice. No personal data is stored here

We do not use advertising cookies, third-party tracking pixels, or cross-site analytics. We do not run ads on our platform and our cookie footprint reflects that.

NotifyTechAI is a business platform and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at support@notifytechai.com and we will promptly delete the account.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via:

• An email to the address registered on your account
• An in-app banner visible at your next login

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, reach out to us: