Privacy &
Data Policy

1. Introduction

MessagesWave provides Communications Platform as a Service (CPaaS) solutions to businesses across India and internationally. As part of delivering these Services, we process information belonging to our business clients ("Clients") as well as, on their behalf, information relating to Clients' end customers ("End Users").

This Policy applies to information collected through our website, client dashboards, APIs, and any related services operated by MessagesWave.

2. Information We Collect

a) Information you provide to us:

• Business/account details: company name, GST number, billing address, authorized contact person.
• Login credentials, API keys, and account security information.
• Communication content submitted for delivery (e.g., SMS/WhatsApp/voice/email message content and recipient contact details).
• Payment and billing information processed via our payment partners.
• Support requests, feedback, and correspondence with our team.

b) Information collected automatically:

• Log data such as IP address, browser type, device information, and pages visited.
• Cookies and similar tracking technologies (see Section 5).
• API usage metrics, delivery reports, and message status data (e.g., sent, delivered, failed, read receipts where available).

c) Information relating to End Users:

Where our Clients use our Services to send messages or calls to their own customers, we may process End User data (such as phone numbers or email addresses) strictly as instructed by the Client, acting as a data processor / service provider on the Client's behalf.

3. How We Use Your Information

• To provide, operate, and maintain our Services, including message/call routing and delivery.
• To create and manage your account, process payments, and provide billing support.
• To verify Sender ID/Template registrations for DLT and regulatory compliance.
• To monitor for fraud, abuse, spam, and violations of our Acceptable Use Policy.
• To respond to support requests and communicate service updates.
• To improve our website, platform performance, and develop new features.
• To comply with applicable legal, regulatory, and law enforcement obligations.

4. Legal Basis & Consent (DLT/TRAI)

For SMS and other regulated communication channels, applicable Indian telecom regulations (including TRAI's DLT framework) require that Clients obtain and maintain valid consent from End Users before sending commercial communications. MessagesWave relies on Clients to secure such consent, and Clients are responsible for the accuracy of any Sender ID, Template, and consent records submitted through our platform.

Where we act as a data controller (e.g., for our own website visitors and Client account holders), we process personal data based on contractual necessity, legitimate business interests, consent, or compliance with legal obligations, as applicable.

5. Cookies & Tracking Technologies

• We use cookies and similar technologies to operate our website, remember preferences, and analyze traffic.
• Essential cookies are required for core website functionality and cannot be disabled.
• Analytics cookies help us understand how visitors use our website so we can improve it.
• You can control or disable cookies through your browser settings; disabling some cookies may affect website functionality.

6. How We Share Your Information

We do not sell personal information. We may share information with:

• Telecom operators and carriers — to route and deliver SMS, voice, and RCS messages.
• Meta/WhatsApp — for delivery of WhatsApp Business API messages, subject to Meta's own policies.
• Cloud hosting and infrastructure providers — to operate our platform securely and reliably.
• Payment processors — to process billing and subscription payments.
• Regulatory authorities — where required for DLT compliance, tax, or legal obligations.
• Professional advisors (legal, audit, compliance) — under confidentiality obligations.
• Law enforcement or government authorities — where required by applicable law, court order, or to protect our rights and users.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular security reviews.

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security of information transmitted to or through our Services.

8. Data Retention

• We retain account and billing information for as long as your account is active and as required to comply with legal, tax, and regulatory obligations.
• Message content and delivery logs are retained only as long as necessary for service delivery, dispute resolution, and regulatory compliance, after which they are securely deleted or anonymized.
• You may request earlier deletion of certain data, subject to our legal and operational retention requirements.

9. Your Rights & Choices

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal exceptions.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time.

To exercise any of these rights, please contact us using the details in Section 14 below.

10. Children's Privacy

Our Services are intended for use by businesses and individuals aged 18 and above. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

11. International Data Transfers

As a platform serving businesses with global messaging reach, your information may be transferred to, stored, and processed in countries other than your own, including where our cloud infrastructure or sub-processors (such as Meta/WhatsApp) operate. Where such transfers occur, we take reasonable steps to ensure information receives an adequate level of protection consistent with this Policy and applicable law.

12. Third-Party Links & Services

Our website and Services may contain links to third-party websites or integrate with third-party platforms (e.g., Meta/WhatsApp, payment gateways, telecom carriers). We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be indicated by a revised "Last Updated" date. Continued use of our website or Services after such changes constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: