Privacy Policy
Last updated: September 12, 2026
TL;DR: We collect only what we need, we never sell your data, and you can delete your account anytime.
1. Information We Collect
Account Information
When you register, we collect:
- Name, email address, and phone number
- Company/business name (optional)
- Password (stored securely hashed)
Usage Data
- IP address and browser/device information
- Pages visited and features used
- Campaign performance metrics (delivery, open, click rates)
Contact Data
Contacts you upload or import into the CRM are stored securely and used only to deliver your campaigns.
2. How We Use Your Data
- Provide the service: Send messages, manage contacts, run campaigns
- Improve the platform: Analytics and usage patterns to enhance features
- Communication: Service updates, security alerts, billing notifications
- Security: Fraud prevention and abuse detection
3. Data Sharing
We never sell your personal data or contact lists to third parties.
We may share data with:
- Meta/WhatsApp: Phone numbers and template content when using Official WhatsApp API (required by Meta)
- Email providers: Email addresses when sending campaigns via SMTP
- Payment processors: Payment information for billing (e.g., Razorpay)
- Law enforcement: If required by law or valid legal process
4. Data Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- Password hashing using bcrypt
- CSRF protection on all forms
- Rate limiting on authentication endpoints
- Regular security reviews and updates
5. Data Retention
We retain your data for as long as your account is active. Upon deletion:
- Account data is deleted within 30 days
- Campaign logs are anonymized after 90 days
- Backup copies are purged within 60 days
6. Your Rights
You have the right to:
- Access: View all data we hold about you
- Correct: Update inaccurate personal information
- Delete: Request deletion of your account and data (see our User Data Deletion Instructions)
- Export: Download your contacts and campaign data
- Object: Opt out of non-essential communications
7. Meta WhatsApp Business Platform Compliance
For accounts integrating with the Meta WhatsApp Cloud API and Embedded Signup:
- Data Handling: We process WhatsApp Business Account (WABA) IDs, Phone Number IDs, System User Tokens, and customer messages strictly to provide live chat communication, customer service, and template messaging on your behalf.
- Privacy & Security: We do not sell, rent, or repurpose your customer phone numbers or message contents for any advertising or third-party purposes. All communication credentials and webhook tokens are encrypted in transit via HTTPS/TLS and stored in protected databases.
- Customer Consent: You represent and warrant that you have obtained required opt-in consent from your recipients in accordance with the Meta WhatsApp Business Policy.
- Revocation & Deletion: You can disconnect your WhatsApp integration at any time or submit an automated/manual data purge request via our Data Deletion Page.
8. Cookies
We use essential session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies.
9. Third-Party Services
Our platform integrates with:
- Meta / WhatsApp Business API
- SMTP email services (Hostinger, etc.)
- Font Awesome (icons)
Each has their own privacy policy. We recommend reviewing them.
9. Children's Privacy
BYM Digital is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.
11. Contact Us
For privacy-related questions or data requests, contact us at:
