01Introduction

Digi1xprt ("Digi1xprt", "we", "us" or "our") provides a marketing and customer engagement platform that helps small businesses reach their customers over WhatsApp. Through our dashboard, businesses (our "Clients") upload their contact lists, send approved template messages such as promotional offers and alerts, and view analytics on how their campaigns perform.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights available to you. It applies to our website, our dashboard and our messaging services (together, the "Services").

By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

02Our Role: Who Controls Your Data

How we handle your information depends on how you interact with us:

• Clients and website visitors: For account, billing and website data, Digi1xprt decides how and why the data is used, and acts as the data controller (or "Data Fiduciary" under Indian law).
• Recipients of our Clients' messages: When a business uses our platform to message you, that business decides who to contact and what to send. The business is the data controller, and Digi1xprt processes your data only on its behalf and on its instructions, as a data processor.

03Information We Collect

a) Information provided by our Clients

• Account details such as business name, contact person, email address, phone number and login credentials.
• Billing details such as GST number, billing address and payment records. Card payments are handled by our payment partners, and we do not store full card numbers.
• Contact lists uploaded to the dashboard, which may include recipients' names, phone numbers and any custom fields the Client chooses to add.
• Message templates, campaign settings and media files.

b) WhatsApp Platform Data

To deliver messages through the WhatsApp Business Platform operated by Meta, we process the following "Platform Data":

• Phone numbers of message recipients and of the Client's WhatsApp Business account.
• Message content of the approved template messages sent, and any replies recipients send back.
• Delivery and read receipts, meaning whether a message was sent, delivered, read or failed, and when.
• Opt-in and opt-out status and message timestamps.

c) Information collected automatically

• Device and usage information such as IP address, browser type, pages visited and actions taken in the dashboard.
• Cookies and similar technologies used to keep you signed in, remember your preferences and understand how our website is used.

d) Information you send us

When you fill in our contact form, email us or speak with our team, we collect the details you share, such as your name, email, phone number and message.

04How We Use Information

We use the information we collect only to:

• Send messages: deliver approved WhatsApp template messages, such as promotional offers and alerts, to the contacts our Clients choose.
• Measure campaigns: use delivery and read receipts to show Clients analytics such as how many messages were delivered and opened.
• Manage consent: record opt-outs so that recipients who ask to stop receiving messages are not contacted again.
• Run the platform: create and manage Client accounts, provide support, process payments and send service notices.
• Keep things secure: prevent spam, fraud and abuse, and enforce our terms and WhatsApp's policies.
• Improve the Services: fix problems and develop new features, using aggregated or de-identified data where we can.
• Meet legal obligations: comply with applicable laws, regulations and lawful requests.

05Consent & Legal Basis

We process personal data on the basis of consent, performance of our contract with Clients, compliance with law, and our legitimate interest in operating a secure and reliable service.

Client responsibility for opt-in: Clients must obtain valid opt-in consent from every person they message through our platform, as required by WhatsApp's Business Messaging Policy and applicable law. They must also honour opt-out requests promptly. Clients must not upload contacts who have not agreed to be contacted.

06How We Share Information

We share information only in the following cases:

• Meta / WhatsApp: Phone numbers and message content are sent to Meta Platforms, Inc. and WhatsApp LLC so the WhatsApp Business Platform can deliver messages. Meta handles that data under its own terms and privacy policy.
• Service providers: We use trusted vendors for cloud hosting, data storage, email delivery, payment processing and analytics. They act on our instructions and are bound by confidentiality and data protection obligations.
• Our Clients: Clients can see campaign results, delivery and read status, and replies for the messages they send.
• Legal reasons: We may disclose information when required by law, court order or a government authority, or when needed to protect the rights, safety or property of Digi1xprt, our users or the public.
• Business transfers: If we are involved in a merger, acquisition or sale of assets, information may be transferred, and it will remain subject to this policy.

07Data Retention

We keep personal data only as long as we need it for the purposes in this policy:

• Contact lists and message data are kept while the Client's account is active, or until the Client deletes them.
• Delivery and read receipts are kept for campaign reporting and then deleted or anonymised.
• Opt-out records are kept for as long as needed to make sure an opted-out person is not messaged again.
• Billing records are kept for as long as tax and accounting laws require.

When a Client closes their account, we delete or anonymise their contact lists and Platform Data within a reasonable period, except where the law requires us to keep it longer.

08Data Security

We use reasonable technical and organisational safeguards to protect personal data, including:

• Encryption of data in transit (HTTPS/TLS).
• Role-based access controls, so only authorised staff can reach the data they need for their work.
• Secure cloud hosting, monitoring and regular backups.
• Separation of each Client's data from other Clients.

No method of transmission or storage is completely secure. If a data breach affects your personal data, we will notify the affected Clients and the relevant authorities as required by law.

09Your Rights & Choices

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request that we delete your data.
• Withdraw your consent at any time.
• Nominate another person to exercise your rights.
• Raise a grievance with us, and then with the relevant authority.

Stop receiving WhatsApp messages: Reply STOP to the message, use the opt-out button where one is shown, or block the business in WhatsApp.

To exercise any of these rights, email us at Director@digi1xprt.com. We may need to verify your identity before we act on a request.

10Data Deletion Requests

You can ask us to delete your data at any time:

1. Email Director@digi1xprt.com with the subject line "Data Deletion Request".
2. Include the phone number or email address linked to your data and, if you know it, the name of the business that messaged you.
3. We will confirm we have received your request and complete it within 30 days, unless the law requires us to keep certain records.

Clients can also delete contacts, campaigns and their whole account from the dashboard settings, or by contacting our support team.

11Cookies

We use essential cookies to run our website and dashboard, and analytics cookies to understand how they are used. You can block or delete cookies in your browser settings. Some features, such as staying signed in, may not work without them.

12International Data Transfers

We are based in India. Our service providers, including Meta, may process data on servers in other countries. When data is transferred outside India, we take reasonable steps to protect it as this policy and applicable law require.

13Children's Privacy

Our Services are meant for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. Clients must not use our platform to send marketing messages to children. If you believe a child's data has reached us, please contact us and we will delete it.

14Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are significant, we will also notify Clients by email or through the dashboard. Continuing to use the Services after an update means you accept the revised policy.

15Contact & Grievance Officer

If you have questions or concerns about this policy or your data, please contact our Grievance Officer:

We aim to acknowledge complaints within 48 hours and resolve them within 30 days.