Privacy Policy

How DC Softek collects, uses, and protects your personal data.

Last Updated: June 15, 2024

1. Introduction

DC Softek ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform, website (dcsoftek.com), and services — including our WhatsApp Business Automation Platform, CRM, and AI Chatbot solutions.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. Please read it carefully.

2. Data Collection

We collect information in the following ways:

2.1 Information You Provide Directly

  • Account registration information (name, email, phone number, company name)
  • Payment and billing information (processed securely through third-party payment processors)
  • Support requests and communications
  • Feedback, surveys, and form submissions
  • WhatsApp Business API credentials and business information

2.2 Automatically Collected Information

  • Log data (IP address, browser type, pages visited, time spent)
  • Device information (operating system, device type, screen resolution)
  • Cookies and similar tracking technologies
  • Usage analytics (feature usage, click patterns, session data)

2.3 Data from Meta Platforms

  • WhatsApp Business Account information provided via Meta's API
  • Message delivery reports and status data from WhatsApp Business API
  • Contact lists and conversation data as authorized by you and your customers

2.4 Customer Data You Upload

  • Contact lists, CRM records, and customer information you import
  • Campaign content and message templates
  • Business configuration and workflow data

3. Data Usage

We use collected information to:

  • Provide, operate, and maintain our platform and services
  • Process transactions and send related communications
  • Send WhatsApp messages, notifications, and campaigns on your behalf
  • Improve and personalize our services based on usage patterns
  • Respond to your inquiries, support requests, and technical issues
  • Send product updates, security alerts, and administrative communications
  • Monitor platform usage for security, fraud prevention, and compliance
  • Comply with legal obligations and enforce our terms
  • Generate aggregated, anonymized analytics and reports

Important: DC Softek uses Meta Platform Data solely to provide communication, automation, customer engagement, and business workflow services on behalf of its clients. Meta Platform Data is never sold, shared with unauthorized third parties, or used for advertising purposes unrelated to the services we provide.

4. Data Storage

Your data is stored on secure cloud infrastructure hosted primarily in India and/or internationally recognized cloud providers (such as AWS or Google Cloud). We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption at rest and in transit (TLS 1.2+, AES-256)
  • Isolated storage environments for each client account
  • Regular backups with point-in-time recovery
  • Data retention aligned with your subscription and applicable legal requirements
  • Secure deletion of data upon account termination (within 90 days)

Conversation data, contact information, and campaign data are retained for the duration of your subscription plus 30 days after termination, unless earlier deletion is requested.

5. Security Measures

We protect your data with industry-standard security practices:

  • Encryption: All data in transit uses TLS/SSL. Data at rest is encrypted using AES-256.
  • Access Controls: Role-based access controls, multi-factor authentication, and principle of least privilege.
  • Infrastructure Security: Firewalls, DDoS protection, intrusion detection, and regular security audits.
  • Vulnerability Management: Regular security testing, dependency updates, and penetration testing.
  • Incident Response: We maintain an incident response plan and will notify affected users within 72 hours of discovering a breach.
  • Employee Training: All staff receive data protection and security awareness training.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data only in the following circumstances:

  • Service Providers: Trusted third-party vendors (hosting, payment processing, email delivery) under strict confidentiality agreements
  • Meta Platforms: Data shared with Meta is limited to what is required to operate the WhatsApp Business API
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In the event of a merger, acquisition, or sale (with prior notice)
  • With Your Consent: In any other case, only with your explicit consent

7. User Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Deletion: Request deletion of your personal data (see our Data Deletion page)
  • Right to Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing of your data for specific purposes
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
  • Right to Restrict Processing: Request we limit how we process your data in certain situations

To exercise any of these rights, contact us at support@dcsoftek.com. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies to:

  • Maintain your session and authentication state
  • Remember your preferences and settings
  • Analyze website traffic and usage (via analytics tools)
  • Improve platform performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice in our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

For any privacy-related questions, concerns, or requests, please contact us: