SMSPort is a multi-tenant WhatsApp business messaging platform. Customer businesses may use SMSPort to onboard WhatsApp assets, manage conversations, create templates, run campaigns, and operate integrations. By using the service, you acknowledge that certain data required for these operations may be processed by SMSPort and by Meta platforms connected through the service.
1. Information We Collect
- Workspace and account details such as business name, contact name, phone number, email address, and billing information.
- Meta Platform Data: Metadata, usage data, and messaging records (WhatsApp message content, templates, webhooks) obtained via Meta APIs, processed strictly according to client direction.
- Mobile App Permissions: When using the SMSPort mobile application, we request access to your device's camera, microphone, and local storage strictly to allow you to capture photos, record voice notes, and attach files within conversations.
- Technical data such as API requests, audit logs, and device details needed to operate and secure the platform.
2. How We Use Information
- To provide and manage services related to Meta platform integrations, onboard WhatsApp assets, and deliver core features (inbox, campaigns, chatbots).
- We process data exclusively for the client's purposes and never for our own, complying fully with Meta's Developer Policy obligations.
- To secure the platform, prevent abuse, investigate incidents, and comply with legal obligations.
3. Meta Platform Data Handling
- As a Tech Provider, we process Platform Data on behalf of clients only, keep data separated per client, and maintain a client registry for inspection.
- We ensure confidentiality via contractual binding and do not disclose any Meta Platform Data unless directed by Meta or required by law.
- Customer businesses remain responsible for ensuring their use of WhatsApp complies with Meta policies and applicable law.
4. Data Sharing & Service Providers
- We do not sell personal data.
- We only engage Service Providers and Subprocessors who agree in writing to adhere to strict confidentiality and data protection standards.
- We may disclose information if required to comply with law, enforce platform terms, or respond to legitimate regulatory requests.
5. Data Security & Incident Response
- We implement robust administrative and technical safeguards, including encryption in transit and at rest using TLS 1.2+ and industry-standard encryption.
- Audit logs record access to Platform Data and are protected from tampering. Data flows are mapped and monitored to detect anomalous activity.
- Incident Reporting: We maintain a tested incident response plan and will promptly notify Meta within 48 hours upon detection of unauthorized data processing or security incidents.
6. User Rights & Minors
- Customers may request access, correction, deletion, or account-related assistance by contacting us.
- Where required by law, we will support privacy rights requests. Requests relating to WhatsApp or Meta platform data may require coordination with the customer business that controls that data.
- Our services do not knowingly target minors. We comply with COPPA, GDPR, and other applicable laws regarding age verification and parental consent.
7. Data Retention
- Account and workspace data is retained as long as your account is active. Upon account deletion, data is purged within 30 days unless legally required otherwise.
- Message logs and audit records may be retained for up to 12 months for security and compliance purposes.
8. Changes to This Policy
- We may update this Privacy Policy periodically. We will notify active users via email or in-app notice when material changes are made.
- Continued use of the platform after changes take effect constitutes acceptance of the revised policy.
9. Data Controller & Operating Company
- Data Controller: The company that contracts and uses SMSPort (our B2B client) is the primary data controller for their customer conversations and business data.
- Data Processor: DOMINARK DIGITAL PRIVATE LIMITED acts as a SaaS provider and processes data on behalf of our clients as a data processor.
- Operating Company: DOMINARK DIGITAL PRIVATE LIMITED, C/O Jawhar Singh, Baishakhi, Hardia, Siwan, Siwan-841226, Bihar, India.
- Privacy Contact: info@smsport.in | Phone: +91 9546333144
10. Subprocessors
- Google Cloud Platform (GCP) — Cloud infrastructure, compute, and data hosting. All SMSPort data is stored and processed on GCP servers.
- Meta Platforms Inc. (WhatsApp Cloud API) — WhatsApp messaging, template management, and automation services.
- Hostinger — Transactional email delivery (SMTP) for account notifications, password resets, and system alerts.
- Razorpay / Payment Gateway — Payment processing for subscription billing. Financial data is handled directly by the payment provider under PCI DSS compliance.
- Our customers always maintain control over their data. You may request the full list of active subprocessors at any time by contacting info@smsport.in.
12. AI & Automation
- SMSPort incorporates AI-powered chatbot and automation features. These systems can automate customer service tasks such as auto-replies, lead qualification, and conversation routing.
- AI automations do not replace human supervision. Customers retain full control and can configure, review, pause, or disable any automation at any time from within the platform.
- AI-generated responses are based on rules and flows defined by the customer business. SMSPort does not use your message content to train AI models.
- Human handoff: Any automated conversation can be escalated to a human agent at any point during the interaction.