Privacy First

Privacy Policy

Your data security is our top priority. We comply with GDPR, ISO 27001, and TRAI DLT regulations to protect your business communications — now and always.

AES-256

Encryption

GDPR

Compliant

30-Day

Data Retention

Zero

Data Selling

Data Protection

Our Data Protection Guarantee

We only collect what's necessary to deliver the service — and we protect it to the highest industry standard.

What We Protect

Customer phone numbers and message content

Business API keys and authentication tokens

Campaign data, analytics, and reporting

Contact lists and audience segments

Billing details and payment information

Account credentials and access logs

Our Security Standards

ISO 27001

GDPR Compliant

TRAI DLT

SOC 2 Type II

CCPA Ready

HIPAA Aligned

Enterprise customers can request a Data Processing Agreement (DPA) for GDPR compliance. Request a DPA →

Data Lifecycle

Your Data Lifecycle

Every stage of your data's journey — from collection to deletion — is governed by strict policies and automated controls.

Encrypted Storage

All data encrypted at rest using AES-256 with customer-managed keys via AWS KMS. Encryption keys are rotated automatically every 90 days.

Zero Retention Policy

Message content is deleted within 30 days unless explicitly retained by you. Metadata is anonymised after 90 days. You can trigger deletion at any time.

Full Audit Logs

Immutable audit trail of every data access, modification, and deletion. Logs are retained for 12 months and accessible from your dashboard.

Your Rights

Your Data Rights

Under GDPR and other applicable regulations, you have full control over your personal data.

Right to Access

Request a full copy of all personal data we hold about you, delivered within 30 days.

Right to Rectify

Correct any inaccurate or incomplete personal data we hold, at any time.

Right to Erasure

Request deletion of all your personal data. We'll confirm erasure within 30 days.

Right to Portability

Export your data in a machine-readable format (JSON or CSV) at any time.

Right to Object

Opt out of specific processing activities, including profiling and marketing.

Right to Restrict

Limit how we process your data while a dispute or review is in progress.

To exercise any of these rights, contact our Data Protection Officer at support@notifytechai.com

Data Sharing

Who We Share Data With

We never sell your data. We only share with trusted sub-processors necessary to deliver the service.

We Never Do This

Sell your data to third parties or advertisers

Share data with governments without legal process

Use your message content to train AI models

Transfer data to countries without adequate protection

Allow sub-processors to use data for their own purposes

Trusted Sub-processors

Cloud infrastructure providers (AWS, GCP) — hosting only

Payment processors (Stripe) — billing only, PCI-DSS compliant

Analytics tools — anonymised, aggregated data only

Customer support tools — limited to support context

Security vendors — threat detection and monitoring

Cookies

Cookies & Tracking

We use cookies to keep the platform working and to understand how it's being used — nothing more.

Essential

Required for login, security, and session management. Cannot be disabled.

Functional

Remember your preferences like language, theme, and dashboard layout.

Analytics

Anonymous usage data to improve the product. Opt out at any time.

Marketing

Used only with your consent. Opt in via cookie preferences.

Changes to This Policy: We may update this Privacy Policy periodically. We'll notify you by email at least 30 days before material changes take effect. Your continued use of the platform after that date constitutes acceptance of the revised policy.

Questions About Your Data?

Questions About Your Privacy?

Our security experts and Data Protection Officer are ready to discuss your compliance requirements and data protection needs. We respond within 1 business day.