Privacy Policy

1 Introduction

SWSWA Multi device version ("we", "us", or "our") respects the privacy of our users, developers, and businesses. This Privacy Policy explains our practices regarding the collection, storage, and processing of your personal information when you use our multi-device gateway, API tools, and web interface.

By accessing our Service, you consent to the data collection and usage practices described in this Privacy Policy.

2 Information We Collect

We collect information in three ways:

• Account Details: When registering, you provide your name, username, email address, password (stored hashed), and optional company details.
• Device & Session Data: Unique WhatsApp instance identifiers, device operating system version, connection status, IP addresses, and user-agent string.
• API & Billing Data: Transaction references, Razorpay Order IDs, payment timestamps, and API authentication tokens. We never store credit card numbers or banking passwords.
• Transmission Metadata: Timestamps of messages sent/received, delivery statuses (Sent, Delivered, Read, Failed), and recipient phone numbers for dispatch verification.

3 How We Use Your Information

The information collected is strictly utilized to operate and improve our services, including:

• Authenticating user sessions and verifying API request authorizations.
• Routing message payloads to connected WhatsApp devices via secure socket channels.
• Processing monthly subscription renewals and generating tax-compliant billing invoices.
• Detecting automated abuse, spam patterns, and security anomalies.
• Delivering critical service notifications, security alerts, and system status updates.

4 Message Content & Privacy Standards

Message payloads are treated as confidential transient data. WhatsApp itself provides end-to-end encryption between devices and recipient terminals. Our role is strictly limited to gateway routing between your software application and your linked phone instance.

5 Third-Party Service Processors

We may share minimal data with trusted infrastructure providers who assist in service delivery:

• Razorpay: Handles checkout payments and recurring subscriptions under strict PCI-DSS Level 1 compliance.
• Cloud Infrastructure: High-security data center providers for application hosting, database redundancy, and SSL termination.
• Legal Obligations: We may disclose information if legally required by valid court order, subpoena, or government regulation.

6 Data Security Safeguards

We implement industry-standard administrative, physical, and technological safeguards to prevent unauthorized access or disclosure:

• All client-to-server communications utilize TLS/HTTPS 256-bit encryption.
• Passwords are protected using cryptographic Bcrypt hashing.
• Personal API tokens are masked and stored securely in dedicated relational databases.
• Two-factor authentication (2FA) is available to protect user dashboard sessions from unauthorized takeovers.

7 Data Retention & Log Pruning

We retain your account profile and active subscription details for as long as your account remains active. Operational message delivery logs and gateway transaction records are systematically purged or archived after 90 days to minimize data exposure.

8 Your Rights & Control

You have full autonomy over your personal information:

• Access & Export: You can view and export your profile details, device sessions, and message history directly from your dashboard.
• Rectification: You can update inaccurate account data or regenerate compromised API keys anytime.
• Erasure (Account Deletion): You may request complete erasure of your account, API keys, and device pairings by contacting our support desk.

9 Cookies & Local Storage

We use essential HTTP cookies and local storage tokens solely to maintain your authenticated login session, preserve your UI theme preference (Light/Dark mode), and remember your selected language.