Privacy Policy
Last updated: 6 October 2026
1. Who We Are
Brand Elevate (“we”, “our”, “us”) is operated by Brand Elevate Pvt. Ltd., a company registered in India. We provide a multi-tenant WhatsApp and SMS broadcasting platform accessible at brandelevatepvtltd.com.
For privacy-related queries, contact us at [email protected].
2. Information We Collect
Account Information: When you register, we collect your name, business name, email address, and hashed password. We never store plaintext passwords.
Business Profile: Legal business name, GSTIN (optional), registered address, phone number, and website you provide in Settings.
Contact Data: Phone numbers, names, and email addresses of your recipients that you upload for broadcasting campaigns. This data belongs entirely to you and is never shared with other tenants.
Payment Information: When you top up your wallet, we create a payment order via Razorpay. We do not store your card number, CVV, or UPI PIN. Payment credentials are processed directly by Razorpay on their secure servers.
Usage Data: Campaign activity, message delivery statistics, wallet transactions, and audit logs generated by your use of the platform.
Technical Data: IP address, browser type, and device information collected automatically for security and fraud prevention.
3. How We Use Your Information
- To provide and operate the broadcasting platform
- To process wallet payments and maintain transaction records
- To send WhatsApp and SMS messages on your behalf to your contacts
- To deliver delivery status reports and analytics
- To send account-related notifications (campaign completion, low balance, etc.)
- To comply with Indian telecommunications regulations (TRAI DLT)
- To prevent fraud, abuse, and unauthorised access
- To improve the platform based on usage patterns
We do not sell, rent, or share your personal data or your contacts' data with third parties for marketing purposes.
4. Data Storage and Security
- Data is stored on servers located in India (Mumbai)
- All data is transmitted over HTTPS/TLS encryption
- Passwords are hashed using bcrypt (BCRYPT_ROUNDS = 10)
- WhatsApp access tokens are encrypted at rest using AES-256-GCM
- Access is restricted by role-based access control (RBAC) enforced on every API call
- Tenant data is completely isolated — no tenant can access another tenant's data
5. Third-Party Services
Meta (WhatsApp Business API): WhatsApp messages are sent via Meta's Cloud API. Your tenant's WhatsApp Business Account access token is stored encrypted and used only to send messages you initiate.
Razorpay: Wallet top-ups are processed by Razorpay. Your payment details are governed by Razorpay's Privacy Policy at razorpay.com/privacy.
Cloudflare: Traffic to our platform passes through Cloudflare for DDoS protection and CDN. Cloudflare may process IP addresses and request metadata per their Privacy Policy.
6. Data Retention
- Account data is retained for the lifetime of your account
- Campaign and message data is retained for 2 years
- Payment and wallet transaction records are retained for 7 years (legal requirement)
- Audit logs are retained for 1 year
- Upon account deletion, personal data is anonymised or deleted within 30 days, except where retention is required by law
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your contact data and campaign history
- Withdraw consent for marketing communications at any time
To exercise these rights, email [email protected].
8. Cookies
We use only essential cookies required for authentication (HTTP-only, secure, SameSite=Strict). We do not use advertising, tracking, or analytics cookies.
9. Changes to This Policy
We may update this policy from time to time. We will notify you by email or in-app notification at least 14 days before material changes take effect. Continued use of the platform after the effective date constitutes acceptance.
10. Contact
Brand Elevate Pvt. Ltd.
Email: [email protected]
Website: brandelevatepvtltd.com