Privacy Policy

Your privacy is important to us. This Privacy Policy explains how BrandMist Solutions ("Company," "We," "Us," "Our"), operator of WhatsFlow (whatsflow.brandmistsolutions.com), collects, uses, shares, and protects your information when you use our Service. 1. Introduction BrandMist Solutions ("Company," "We," "Us," or "Our") is committed to protecting the privacy of individuals who visit our website whatsflow.brandmistsolutions.com ("Website") and use our bulk WhatsApp messaging services ("Service" or "WhatsFlow"). This Privacy Policy outlines our practices concerning the collection, use, and disclosure of personal information. By accessing our Website or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Website or Service. This Privacy Policy should be read in conjunction with our User Terms and Conditions. 2. Definitions Personal Data: Any information relating to an identified or identifiable natural person. This can include name, email address, phone number, IP address, etc. Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit). Cookies: Small files stored on your device (computer or mobile device). Data Controller: The natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data. Data Processor (or Service Provider): Any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively. Data Subject: Any living individual who is using our Service and is the subject of Personal Data. User: The individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data. 3. Information We Collect We collect several different types of information for various purposes to provide and improve our Service to you. 3.1. Personal Data You Provide to Us: While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to: Full Name Email Address Phone Number (especially your WhatsApp number for service provision) Company Name Billing Information (e.g., credit card details, billing address - processed by our third-party payment processors) Account Credentials (username, password) Any other information you voluntarily provide through contact forms, support requests, or surveys. 3.2. Information Collected Automatically (Usage Data): When you access the Website or use our Service, we may collect certain information automatically, including: Internet Protocol (IP) address Browser type and version Pages of our Website that you visit, the time and date of your visit, the time spent on those pages Referring/exit pages Operating system Device information (e.g., device type, unique device identifiers) Information about your interaction with our Service, such as features used and messages sent (metadata, not content of messages you send to your end-users through our platform unless required for support or troubleshooting with your consent). 3.3. Tracking & Cookies Data: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Examples of Cookies we use: Session Cookies: We use Session Cookies to operate our Service. Preference Cookies: We use Preference Cookies to remember your preferences and various settings. Security Cookies: We use Security Cookies for security purposes. Analytics Cookies: We may use third-party Service Providers to monitor and analyze the use of our Service (e.g., Google Analytics). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. For more information, please see our [Link to Cookie Policy, if separate]. 3.4. Information Regarding Your End-Users (Recipients of Your Messages): When you use WhatsFlow to send messages to your end-users (contacts), you are responsible for the data you provide to us for this purpose, primarily their phone numbers and any message content. We act as a Data Processor for this information. Phone Numbers of Your Contacts: We process the phone numbers you upload or provide to send messages on your behalf. Message Content: We transmit the content of the messages you create. We do not typically store the content of your messages long-term, except as necessary for transmission, compliance with WhatsApp policies, or as required by law. You are responsible for ensuring the content complies with all applicable laws and WhatsApp policies. Delivery Status: We collect information about the delivery status of messages (e.g., sent, delivered, read, failed). You, as the User of WhatsFlow, are the Data Controller for the personal data of your end-users. You are responsible for obtaining necessary consents and complying with all applicable data protection laws regarding the collection and use of your end-users' data. 4. How We Use Your Information BrandMist Solutions uses the collected data for various purposes: To provide and maintain our Service, including to monitor the usage of our Service. To manage your account and your registration as a user of the Service. To process your transactions and manage your subscriptions. For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items, or services you have purchased or of any other contract with Us through the Service. To contact you by email, telephone calls, SMS, WhatsApp messages, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including security updates, when necessary or reasonable for their implementation. To provide you with news, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information. To attend and manage your requests to Us (e.g., customer support). To improve our Service, for example, by analyzing usage patterns. For business transfers: We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets. For legal compliance: To comply with applicable laws, regulations, legal processes, or governmental requests. To enforce our Terms and Conditions and other policies. For fraud prevention and security purposes. 5. How We Share Your Information We may share your personal information in the following situations: With Service Providers: We may share your personal information with third-party Service Providers to monitor and analyze the use of our Service, for payment processing, to provide IT and system administration services, data hosting, marketing, and other services on our behalf. These Service Providers are obligated not to disclose or use your information for any other purpose. With WhatsApp (Meta Platforms, Inc.): As our Service facilitates messaging via WhatsApp, certain information (e.g., your registered phone number, message metadata) is inherently shared with WhatsApp as part of the service delivery and to comply with their policies. For Business Transfers: If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy. With Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. With Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions. With Your Consent: We may disclose your personal information for any other purpose with your explicit consent. For Legal Requirements: We may disclose your Personal Data in the good faith belief that such action is necessary to: Comply with a legal obligation (e.g., a subpoena, court order). Protect and defend the rights or property of the Company. Prevent or investigate possible wrongdoing in connection with the Service. Protect the personal safety of users of the Service or the public. Protect against legal liability. 6. Data Retention We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods. For data related to your end-users processed on your behalf, we retain it according to your instructions or as needed to provide the Service to you, and as required by applicable law or WhatsApp policies. 7. Data Security The security of your data is important to us. We strive to use commercially acceptable means to protect your Personal Data, including appropriate technical and organizational measures. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security. Measures we take include [e.g., encryption, access controls, secure servers, regular security assessments - Be specific about your actual measures]. 8. Your Data Protection Rights Depending on your location and applicable laws (such as GDPR for individuals in the EEA, or the Indian Digital Personal Data Protection Act for individuals in India), you may have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us. Your rights may include: The right to access, update or to delete the information we have on you. The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete. The right to object. You have the right to object to our processing of your Personal Data. The right of restriction. You have the right to request that we restrict the processing of your personal information. The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format. The right to withdraw consent. You also have the right to withdraw your consent at any time where BrandMist Solutions relied on your consent to process your personal information. The right to lodge a complaint with a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority. (In India, this would be the Data Protection Board of India once established under the DPDP Act). Please note that we may ask you to verify your identity before responding to such requests. We will respond to your request within a reasonable timeframe, in accordance with applicable law. 9. International Data Transfers Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. If you are located outside India and choose to provide information to us, please note that we transfer the data, including Personal Data, to India and process it there. Our servers are located in [Specify Server Location(s), e.g., India, Singapore, USA]. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. BrandMist Solutions will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. [If transferring to countries without adequacy decisions, mention safeguards like Standard Contractual Clauses]. 10. Children's Privacy Our Service does not address anyone under the age of 18 ("Children"). [Confirm this age - it might be lower in some jurisdictions, e.g., 13 or 16. Adjust if your service is specifically not for minors or if you have different age restrictions]. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. 11. Links to Other Websites Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. 12. Changes to This Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. For material changes, we may also provide notice through email or a prominent notice on our Service, prior to the change becoming effective. 13. Contact Us If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us: By Email:info@brandmistsolutions.com By Visiting Our Website: https://whatsflow.brandmistsolutions.com/