Privacy Policy

1 Information We Collect

1.1 Account Information

When you register or use our platform, we collect:

• Business name and contact details
• Email address and phone number
• Username and encrypted password
• WhatsApp Business Account (WABA) credentials and phone number IDs

1.2 Message Data

To provide our messaging services, we process and store:

• Phone numbers of message recipients
• Message content (text messages and templates sent through our platform)
• Message delivery status (sent, delivered, read, failed)
• Timestamps of message activity
• Incoming messages received from WhatsApp users

1.3 Template Data

• WhatsApp message templates you create or manage
• Template approval status from Meta
• Variables and example content within templates

1.4 Technical Data

• IP address and browser information (for security)
• Session data for authentication
• API usage logs

1.5 Uploaded Files

• Media files (images, videos, documents) uploaded for use in templates
• CSV files uploaded for bulk messaging campaigns

2 How We Use Your Information

We use the information we collect to:

• Deliver our service — Send WhatsApp messages on your behalf via Meta's Cloud API
• Manage templates — Create, sync, and manage WhatsApp message templates
• Track delivery — Show delivery status (sent, delivered, read, failed) for your messages
• Authenticate users — Verify your identity with OTP-based two-factor authentication
• Provide reporting — Generate delivery reports and analytics for your messaging campaigns
• Security — Detect and prevent fraud, abuse, and unauthorized access
• Improve our platform — Understand how features are used to improve the service
• Customer support — Respond to your queries and resolve issues

We do not use your data for advertising or sell it to third parties.

3 WhatsApp & Meta Data

Our platform operates as a WhatsApp Business API client. This means:

3.1 Meta's Role

• All messages are transmitted through Meta's WhatsApp Business Cloud API
• Meta processes message data according to their own Privacy Policy
• Meta may retain message metadata as per their data practices

3.2 Webhook Data

• Meta sends delivery status updates (delivered, read, failed) to our servers via webhooks
• Incoming messages from WhatsApp users are received via webhooks and stored in our system
• This data is used solely to display message status in your dashboard

3.3 Access Tokens

• Your WhatsApp Business API access tokens are stored securely in our configuration
• Tokens are used only to make authorized API calls on your behalf
• We recommend rotating tokens regularly for security

4 Data Sharing & Third Parties

We share your data only in the following limited circumstances:

4.1 Meta Platforms Inc.

Message content and recipient phone numbers are transmitted to Meta's WhatsApp Business API to deliver messages. This is fundamental to how our service works.

4.2 Hosting Provider

Our platform is hosted on secure web hosting infrastructure. The hosting provider has access to server data but is contractually bound by confidentiality obligations.

4.3 SMS OTP Provider

We use a third-party SMS gateway (Softanic) solely to send one-time passwords (OTPs) for two-factor authentication. Only the phone number and OTP text are shared.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, safety, and property of OneClickMsg or others.

5 Data Storage & Security

5.1 Storage Location

Your data is stored on servers located in India. We take reasonable steps to ensure data is protected in transit and at rest.

5.2 Security Measures

• Encryption — Passwords are hashed using bcrypt (never stored in plain text)
• HTTPS — All data transmitted between your browser and our servers is encrypted via SSL/TLS
• Authentication — Two-factor authentication (OTP) required for admin access
• Access control — Admin panel protected; API endpoints require authenticated sessions
• File protection — Configuration files are protected from direct web access

5.3 Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law.

6 Data Retention

• Message logs — Retained for 12 months from the date of sending, then automatically deleted
• Account data — Retained for as long as your account is active
• Uploaded media — Retained for 6 months; you can delete files at any time
• CSV files — Retained until you delete them from the CSV Library
• Template data — Retained as long as templates exist in your Meta account

Upon termination of your account, all personal data is deleted within 30 days, except where retention is required by law.

7 Your Rights

You have the following rights regarding your personal data:

• Right to Access — Request a copy of the personal data we hold about you
• Right to Correction — Request correction of inaccurate or incomplete data
• Right to Deletion — Request deletion of your personal data (subject to legal obligations)
• Right to Portability — Request your data in a structured, machine-readable format
• Right to Withdraw Consent — Withdraw consent for data processing at any time
• Right to Object — Object to processing of your data in certain circumstances

To exercise any of these rights, contact us at support@oneclickmsg.com. We will respond within 30 days.

8 Cookies

Our platform uses only essential session cookies required for authentication and security. We do not use:

• Advertising or tracking cookies
• Third-party analytics cookies
• Cross-site tracking

Session cookies are automatically deleted when you close your browser or log out.

9 Children's Privacy

Our platform is a B2B service intended for businesses and professionals aged 18 and over. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you believe we may have collected information from a child, please contact us.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• The "Last Updated" date at the top of this page will be revised
• We will notify registered users via email or in-platform notification
• Continued use of our platform after the effective date constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: OneClickMsg
• Website: oneclickmsg.com
• Email: support@oneclickmsg.com
• Address: Maharashtra, India