Privacy Policy

MarkWhiz ("MarkWhiz", "we", "us") operates a business messaging platform built on the WhatsApp Business Platform. This Privacy Policy explains what information we handle, why we handle it, and the choices available to the businesses that use our service and to the individuals those businesses communicate with.

MarkWhiz is operated by MarkWhiz, a registered Partnership Firm in Rajasthan, India, with its registered office at B8, Unnati Tower, Vidhyadhar Nagar, Jaipur, Rajasthan 302039, India. References in this policy to "MarkWhiz", "we", "us" or "our" mean that entity.

This policy applies to our public website at https://markwhiz.in, to our application at https://app.markwhiz.in, and to the messaging services delivered through them. It does not apply to the independent privacy practices of our customers, who determine what messages are sent and to whom.

We collect the following categories of information:

• Account information — business name, contact name, work email, phone number, billing details and authentication credentials.
• Contact data uploaded by customers — phone numbers, names, tags, attributes and consent records for the recipients a customer chooses to message.
• Message content and metadata — messages sent and received through the platform, templates, delivery and read status, timestamps and error codes.
• Media — images, documents, audio and other files exchanged in conversations or uploaded for campaigns.
• Usage and technical data — log records, IP address, device and browser information, and in-product activity used for security and diagnostics.
• Support communications — messages you send to our support, privacy or business contacts.

We use information only for defined operational purposes:

• to provide, maintain and improve the platform and its features;
• to deliver messages and campaigns a customer initiates;
• to authenticate users and protect accounts from unauthorised access;
• to produce delivery, engagement and usage analytics for the relevant customer;
• to provide support, respond to enquiries and communicate service notices;
• to detect abuse, prevent fraud and enforce our Terms of Service;
• to meet legal, regulatory and platform-policy obligations.

We do not sell personal information, and we do not use end-user message content for advertising or to train third-party models.

MarkWhiz may introduce AI-assisted features in future, such as suggested replies or message summarisation. Where such features are offered, they will process only the information necessary to deliver the requested functionality, and customer message content will not be used to train public or third-party AI models without the customer's authorisation.

Messaging is delivered through the WhatsApp Business Platform operated by Meta. When a message is sent or received, the necessary content and metadata pass through Meta's infrastructure and are subject to Meta's own terms and privacy practices in addition to this policy.

Customers must comply with the WhatsApp Business Messaging Policy and Commerce Policy, including obtaining valid opt-in before messaging any recipient and honouring opt-out requests promptly. MarkWhiz may suspend messaging that places sender quality or platform compliance at risk.

Where a business uses MarkWhiz to communicate with its own audience, that business generally acts as the Data Controller (or equivalent role under applicable privacy laws) for the personal data it uploads and processes through the platform, and MarkWhiz generally acts as a Data Processor or Service Provider on that business's behalf.

MarkWhiz processes such data only in accordance with the customer's documented instructions, applicable law and our Terms of Service. Customers are responsible for the lawfulness of the data they upload, for the accuracy of consent records, and for the content of the messages they send. We return or delete customer data on termination in line with the retention section below.

Where applicable privacy laws require a legal basis for processing personal information, we rely on one or more of the following:

• performance of a contract with the customer, or steps taken at their request;
• compliance with legal and regulatory obligations;
• our legitimate business interests, such as securing the platform, preventing abuse and improving the service, where these are not overridden by individual rights;
• consent, where consent is required by applicable law.

Where MarkWhiz acts as a processor, the customer is responsible for establishing the legal basis for the processing it instructs.

If you received a WhatsApp message from a business using MarkWhiz, we hold your data on that business's behalf. Requests to access, correct or delete your information are usually best directed to that business.

You may also write to us at privacy@markwhiz.in. Where a request relates to data controlled by a customer, we may forward the request to that customer, and we will assist them in responding where required by applicable law. We act directly on a request where the law requires us to do so.

Data is stored on managed cloud infrastructure operated by reputable providers, with automated backups and access restricted to authorised personnel. Media files are stored in access-controlled object storage and served only through authenticated, time-limited links.

We maintain administrative, technical and physical safeguards proportionate to the sensitivity of the data we handle, including role-based access control, least-privilege administrative access, audit logging, dependency monitoring and periodic review of access rights.

No system can be guaranteed absolutely secure. If we become aware of a security incident affecting personal data, we will notify affected customers without undue delay and provide the information needed for them to meet their own notification obligations.

• Data transmitted between users and MarkWhiz is protected using HTTPS with TLS.
• Data at rest, including databases, backups and stored media, is protected using encryption mechanisms provided by the underlying cloud infrastructure.
• Secrets, API keys and access credentials are held in secure encrypted storage, and passwords are stored using one-way hashing, in line with industry best practices.

These measures describe our current practices. They are not a claim to hold any particular security certification or formal audit attestation.

MarkWhiz is multi-tenant by design. Every record is bound to a tenant identifier, and access is enforced at the data layer so that a request authenticated for one organisation cannot read or modify another organisation's contacts, conversations, media, templates or analytics. Administrative access for support purposes is limited, logged and used only where necessary to resolve a reported issue.

We share information only in these circumstances:

• with the customer whose account the data belongs to;
• with service providers acting on our instructions under contract;
• where required by law, regulation or valid legal process;
• to protect the rights, safety or property of MarkWhiz, our customers or others;
• in connection with a merger, acquisition or asset transfer, subject to this policy.

We rely on a limited number of carefully selected service providers to operate the platform. These fall into the following categories:

• Meta Platforms, for message delivery through the WhatsApp Business Platform;
• cloud infrastructure, hosting and database providers;
• transactional email providers;
• error monitoring and operational tooling providers.

All such providers are engaged under contracts that require them to protect customer data, maintain confidentiality and process data only for the purposes we specify. Further detail on the providers we currently use is available from privacy@markwhiz.in.

Our public website uses only what is necessary to serve pages. The application uses strictly necessary cookies and similar browser storage to keep you signed in, maintain session security and remember interface preferences. We do not use advertising cookies or cross-site tracking. You can block cookies in your browser, but the application will not function correctly without session cookies.

We retain data for as long as an account remains active and for the period needed to meet legal, accounting and dispute-resolution requirements. Typical practice:

• account and billing records — retained for the duration of the relationship and any statutory period thereafter;
• conversations, contacts and media — retained while the account is active, and deleted within 30 days of a verified deletion request or account closure;
• security and system logs — retained for a limited period for diagnostics and abuse prevention.

Where the platform supports it, customers may delete data directly from within the application, including contacts, conversations, uploaded media and campaign-related data. Customers may also request deletion of an entire account by writing to privacy@markwhiz.in.

Deleted data is removed from active systems promptly. Backups containing deleted data are removed according to our normal backup rotation and retention schedules, after which the data is no longer recoverable.

Customers must obtain and record valid opt-in before messaging any recipient, honour opt-out requests, provide their own privacy notice to their end users, keep account credentials secure, restrict access to authorised staff, and refrain from uploading special categories of personal data unless a lawful basis and appropriate safeguards exist.

Our infrastructure and sub-processors may store or process data in countries other than the one in which you are located. Where personal data is transferred across borders, we rely on appropriate legal transfer mechanisms, such as standard contractual clauses, and on contractual security commitments with the receiving party.

MarkWhiz is a business service and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16 (or the minimum age required by local law). If we learn that such information has been collected, we will delete it promptly.

Depending on your jurisdiction, you may have the right to access your personal data, to request correction or deletion, to object to or restrict certain processing, to data portability, and to lodge a complaint with a supervisory authority.

To exercise a right, write to privacy@markwhiz.in. We verify identity before acting and respond within 30 days. Deletion requests are described in more detail on our Data Deletion page.

We may update this policy to reflect changes in our service, technology or legal obligations. The "Last Updated" date at the top of this page always reflects the current version. Material changes will be communicated to account administrators by email or an in-application notice before they take effect.

This Privacy Policy is governed by the laws of India, without regard to conflict-of-law principles. Where applicable, customers remain responsible for complying with the privacy and data-protection laws of their own jurisdictions and those of the individuals they communicate with through the platform.

Questions about this policy can be directed to:

• Privacy: privacy@markwhiz.in
• Support: support@markwhiz.in

MarkWhiz
B8, Unnati Tower
Vidhyadhar Nagar
Jaipur, Rajasthan 302039
India

MarkWhiz is a registered Partnership Firm in Rajasthan, India.