Privacy Policy

1. Introduction

Welcome to Sendzyy ("we," "our," or "us"), owned and operated by Iflora Info Pvt Ltd. We respect your privacy and are committed to protecting the personal data of our application users.

This Privacy Policy governs your use of the Sendzyy mobile application (the "App"), which provides WhatsApp marketing, broadcast messaging management, contact organization, and message automation features.

By downloading, installing, or using Sendzyy, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We collect information to provide, maintain, and improve our messaging and marketing services to you:

A. Information You Voluntarily Provide

• Account Credentials: Full name, email address, phone number, business details, and authentication tokens.
• WhatsApp Connection Details: Session tokens, QR authentication parameters, or API credentials required to dispatch messages via WhatsApp.
• Campaign Data & Content: Custom message templates, campaign broadcast lists, media attachments (images, video links, documents), and chatbot automation rules.
• Billing Information: Payment transactions processed via secure payment providers (e.g., Razorpay). We do not store credit card or bank credentials on our servers.

B. Information Collected via App Permissions & Technology

• Device Contacts (READ_CONTACTS): With your explicit consent, we access your device contact list to allow you to pick and import contact numbers into message broadcast lists.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used to send delivery status alerts and account updates to your device.
• Technical Device Logs: IP address, device model, operating system version, unique device identifiers, and crash logs.

3. How We Use Your Information

We process your data strictly for legitimate operational and business purposes:

• Service Execution: Executing user-scheduled WhatsApp broadcasts, processing campaign delivery reports, and running automated chat flows.
• Contact Syncing: Organizing imported contacts into recipient lists for user-driven message broadcasts.
• Account Security: Verifying account logins, preventing abuse, and enforcing platform terms.
• Push Notifications: Keeping you informed of campaign progress, system messages, and critical alerts.
• Support & Upgrades: Resolving technical inquiries, diagnosing performance bottlenecks, and enhancing feature stability.

4. Permissions Disclosures

Sendzyy requires specific device permissions to execute marketing functionality seamlessly. You can adjust or revoke permissions at any time via your Android device settings.

5. Data Sharing & Third-Party Services

We do not sell your personal data or target lists. We share data only with essential sub-processors required to operate the App:

• Meta / WhatsApp Cloud API: For transmission and delivery of campaign messages to recipient WhatsApp numbers.
• Google Firebase Cloud Messaging: For dispatching push notifications to your Android device.
• Razorpay Payment Gateway: For secure transaction and subscription processing.
• Cloud Infrastructure Partners: Encrypted hosting and database providers (AWS / MongoDB Cloud).

6. Data Security & Storage

We apply robust technical safeguards to protect user data against unauthorized access, loss, or alteration:

• Encryption in Transit: All network traffic uses TLS/HTTPS encryption and Secure WebSockets (WSS).
• Encryption at Rest: Sensitive access tokens and user credentials are encrypted using AES encryption and stored securely.
• Strict Access Limits: Internal backend access is guarded by multi-factor authentication and role-based permissions.

7. Account & Data Deletion Policy

In compliance with Google Play Developer Policies, users have full control over their account and personal data, including the right to permanent deletion.

Upon receiving a deletion request, all account credentials, contacts, campaign templates, and history will be permanently deleted from our active database within 30 days.

8. Children's Privacy

Sendzyy is designed for business professionals and businesses. We do not knowingly collect or solicit personal information from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately for removal.

9. User Rights (GDPR / CCPA / DPDP)

Subject to your local laws, you possess rights to access, review, correct, export, or erase your personal data. To exercise any of these rights, send your request to sendzyy2026@gmail.com.

10. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please reach out to us: