1. Overview
Ntechzy RCS Messaging ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.
2. Information We Collect
2.1 Information You Provide
- Business Account Info: Name, email address, phone number, business name, GST number, company address
- Payment Info: Transaction details (we do NOT store full payment card numbers – Razorpay handles this)
- Support Communications: Any information you provide when contacting support
2.2 Information We Automatically Collect
- Usage Data: IP address, browser type, device info, pages visited, time spent
- Message Data: Recipient phone numbers, message content, delivery status, timestamps
2.3 Information from End-Users (Recipients)
- When an end-user opts in to receive messages from our clients, we collect their phone number, consent timestamp, and IP address
- When a client sends an RCS message, we process the recipient's phone number and message status (delivered/read/failed)
3. How We Use Your Information
- To provide and maintain our RCS messaging service
- To process credit purchases and payments
- To enforce compliance with Terms & Conditions (anti-spam)
- To improve our Platform (analytics, feature development)
- To communicate with you about service updates, billing, and support
- To comply with legal obligations (IT Act, DPDP Act, carrier requirements)
4. Legal Basis for Processing (for GDPR/DPDP Act)
- Contract performance: To deliver RCS messages you request
- Legitimate interests: To prevent fraud, enforce terms, improve service
- Legal obligation: To comply with carrier and government requirements
- Consent: For marketing communications (you can opt out anytime)
5. Data Sharing and Disclosure
5.1 Third-Party Service Providers
- RCS Supplier/CPaaS Provider: To deliver messages via RCS network
- Mobile Carriers (Jio, Airtel, Vi): To transmit messages on their networks
- Google RBM Platform: As required for RCS agent operation
- Razorpay: To process credit purchases (they are PCI compliant)
- Cloud Hosting: To store data securely
5.2 Business Transfers
If Ntechzy is involved in a merger, acquisition, or asset sale, your data may be transferred.
5.3 Legal Requirements
We may disclose your data if required by law, court order, or government request.
5.4 With Your Consent
We will not sell your personal data to third parties for their marketing purposes.
6. Data Retention
- Message logs: 90 days from sending date
- Consent records (opt-in): 2 years from last message sent, or as required by law
- Account information: Until you close your account, plus 30 days for backup
- Transaction records: 7 years (for tax and accounting compliance)
7. Data Security
- Encryption: HTTPS/TLS for all data in transit
- Access control: Row Level Security (RLS) ensures users see only their own data
- Regular backups: Daily automated backups
- Employee access: Limited to authorized personnel only
8. Your Rights (Under DPDP Act, India)
- Access: Request a copy of your data
- Correction: Correct inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Grievance Redressal: Contact our Data Protection Officer (details below)
To exercise these rights, email privacy@rcs.ntechzy.com
9. Children's Privacy
Our Platform is not intended for individuals under 18. We do not knowingly collect data from minors.
10. International Data Transfers
Your data may be transferred to and processed in countries where our suppliers operate (e.g., Google's servers). We ensure appropriate safeguards are in place.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification.
12. Grievance Officer (as required by Indian law)
13. Contact Us
For privacy-related questions: privacy@rcs.ntechzy.com
For general support: support@rcs.ntechzy.com