1. Who we are
WavoSMS is an online CRM operated by Wavosms, India. In this policy “we” and “us” mean Wavosms. For any privacy question write to hello@wavosms.com.
2. Two kinds of data
Your account data — your name, business name, email, phone number, login details, plan and payment records. We are responsible for this data.
Your customers' data — the members, call notes, follow-ups and other details you and your team add to your CRM, or that arrive through your website form. You own and control this data; we only store and process it for you, on your instructions, to provide the service.
3. What we collect
- Details you give us when you sign up, contact us or update your profile.
- Data you add to your CRM.
- Payment details needed to renew your plan. Card, UPI and bank details are entered on Razorpay's secure page and are never stored by us; we keep the payment reference, amount and date.
- Basic technical data: IP address, browser type, pages visited and login times, to keep the service secure and working.
4. How we use it
- To run your account and the CRM features you use.
- To send service emails — password resets, enquiry alerts, follow-up reminders and receipts.
- To process payments and keep accounting records required by law.
- To prevent fraud and abuse and to keep the service secure.
- To improve the product. We do not sell your data or your customers' data, and we do not use your customers' data for our own marketing.
5. Cookies
We use a single essential cookie to keep you logged in. We do not use advertising or tracking cookies inside the CRM.
6. Who we share data with
Only with service providers we need to run WavoSMS, under confidentiality: our web hosting provider, Razorpay for payments, and our email provider for sending service emails. We may also share data when required by Indian law or a valid order of a court or authority.
7. Where and how long we keep it
Data is stored on secured servers with regular backups. We keep your account data while your account is active. When you close your account, we delete your CRM data within 30 days, except records we must keep by law (for example invoices and payment records, kept for up to 8 years). Backups are overwritten in the normal backup cycle.
8. Security
Passwords are stored as one-way hashes, connections use HTTPS, payment and email secrets are encrypted, and each business's data is kept separate from every other business's. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as required by law.
9. Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us to access, correct, update or erase your personal data, withdraw consent, and nominate someone to act for you. Account owners can export their CRM data at any time. Write to hello@wavosms.com and we will reply within 30 days.
If you are a member in one of our customers' CRMs, please contact that business first — they control that data — and we will help them respond.
10. Grievance officer
In line with the Information Technology Act, 2000 and the DPDP Act, 2023, our grievance officer is Abhi ..., email support@wavosms.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. You may also approach the Data Protection Board of India.
11. Children
WavoSMS is a business tool and is not meant for anyone under 18.
12. Changes
If we change this policy we will update the date above and, for important changes, email account owners before they take effect.