WWavelyby Smartlink Soft
TermsData deletionSign in
LEGAL & PRIVACY

Privacy Policy

This policy explains how Smartlink Soft collects, uses, protects and shares information when businesses use Wavely.

Effective: 30 July 2026 · Last updated: 30 July 2026

1. Who we are

Wavely is a business messaging and campaign-management service operated by Smartlink Soft (“Wavely”, “we”, “us” or “our”). Businesses using Wavely are responsible for the contacts and campaign information they upload and generally act as the controller of that customer data. Smartlink Soft processes that information to provide Wavely.

2. Information we collect

Account and subscription information

  • Name, company, email address, encrypted password and email-verification records.
  • Plan, subscription, invoice and payment status. Payment card details are handled by Razorpay and are not stored by Wavely.
  • Security, authentication, IP address and operational diagnostic information.

WhatsApp and campaign information

  • Contacts, phone numbers, tags, consent status, consent source and consent history supplied by a Wavely customer.
  • Campaign names, message content, schedules, template selections, uploaded media and sending-number selection.
  • Message identifiers and delivery, read, failure, reply and opt-out events.
  • For Official Meta API connections: WhatsApp Business Account ID, phone-number ID, business display information, approved-template metadata and encrypted access credentials.
  • For WaSender connections: session identifiers, encrypted API credentials and signed webhook events.

3. How we use information

  • Provide accounts, connected WhatsApp numbers, campaigns, scheduling, queues, reporting and consent controls.
  • Authenticate users, prevent abuse, diagnose failures and protect the service.
  • Process subscriptions and maintain billing records.
  • Comply with legal obligations, enforce our Terms and respond to lawful requests.
  • Improve reliability and product functionality using aggregated operational information.

4. WhatsApp contacts and consent

Wavely customers must have a valid lawful basis and any consent required to contact recipients. A saved phone number or WhatsApp contact is not automatically marketing consent. Wavely records STOP and START preference signals where supported, but the customer remains responsible for its audience, content, frequency and legal compliance.

5. How information is shared

We share information only as needed to operate the service, including with:

  • Meta Platforms for Official WhatsApp Cloud API and Embedded Signup services.
  • WaSenderAPI when a customer is assigned and uses that provider.
  • Razorpay for subscription and payment processing.
  • Hosting, email-delivery, security and infrastructure providers acting on our instructions.
  • Authorities or advisers when required by law, safety, fraud prevention or legal claims.

Each third-party service is governed by its own terms and privacy practices.

6. Retention

We retain account and campaign data while an account is active and for a reasonable period afterward for recovery, security, disputes and legal compliance. Successful webhook payloads may be minimized or removed after processing. Payment and tax records may be retained for legally required periods. Customers should delete data they no longer need.

7. Security

Wavely uses access controls, tenant-level data separation, encrypted provider credentials, signed webhook verification and operational safeguards. No online service can guarantee absolute security. Customers must protect their account credentials, Meta Business access and connected devices.

8. International processing

Meta, payment providers and infrastructure providers may process information in other countries. Where required, businesses using Wavely are responsible for providing appropriate notices and safeguards to their recipients.

9. Your choices and rights

Depending on applicable law, individuals may request access, correction, deletion, restriction or objection. Recipients should first contact the business that sent the message because that business controls its contact list. Wavely account holders may request account deletion through the process described on our Data Deletion page.

10. Children

Wavely is a business service and is not intended for children. Customers must not knowingly use it to collect or market to children unlawfully.

11. Changes

We may update this policy as the service or law changes. The revised date will appear above. Material changes may also be communicated through Wavely or email.

12. Contact

Privacy questions and requests can be sent to support@smartlinksoft.in. Ensure the email is sent from the address registered with Wavely and do not include passwords, OTPs or access tokens.

This policy describes Wavely’s current product design. Customers should obtain their own legal advice about marketing, consent, retention and cross-border data obligations.

© 2026 Smartlink Soft · PrivacyTermsDeletion