Privacy Policy.

a. Account and personal information

When you register or use the Services, we may collect:

• Your name, email address and profile picture, including when you sign in with Google
• A password, which we keep only in hashed form
• Payment and billing details, which are handled by our payment provider (Stripe). We receive the payment status, amount and plan, never your full card details

b. Messaging data you put into the Services

To do what you ask of us, the Services process:

• The WhatsApp and Telegram accounts and bots you connect, including the session credentials and tokens needed to keep them connected, which we store encrypted
• The contacts, lists, templates, chatbot rules, campaigns and attachments you add
• The messages you send and their delivery status
• Replies from people you have recently messaged, which we keep for a limited time, and opt-out requests (such as STOP)

c. Technical data

We automatically collect:

• Browser type, operating system and device information
• IP address and approximate location
• Usage activity, such as the features you use and a record of account actions like sign-ins and plan changes

d. Business listings

When you use our tool for finding businesses, we search publicly available business listings (open data such as Overture Maps) for names, categories, addresses and phone numbers. We do not collect this from the businesses directly. If you save a result, it is stored in your contacts. A business that wants its listing removed from your account or from our data can write to us at the address below.

e. AI features

When you use AI writing or sorting features, the text you submit is sent to our AI provider to produce the suggestion, and is used only to provide that feature.

• Provide, operate and improve the Services: sending, scheduling, replies, reports and finding businesses
• Keep your connected accounts working and secure
• Process payments and manage subscriptions
• Personalise your dashboard
• Send service messages such as updates, billing notices and support replies
• Prevent abuse and meet security and legal requirements, including honouring opt-outs

We do not sell or rent your personal data to third parties.

The contacts you upload or save, and the messages you send to them, remain yours. We process them only on your instructions, to provide the Services.

You decide who you message. You are responsible for having a lawful reason to contact them and for honouring their requests to stop. Wemofy records STOP-style replies and will not message a number that has opted out.

We use encryption in transit (HTTPS), store your connected-account credentials and bot tokens encrypted, and limit who can reach our systems. No online service is completely secure, so please use a strong password and keep your credentials private.

We use only the cookies and browser storage the Services need to work:

• A secure cookie that keeps you signed in
• A short-lived cookie used while you sign in with Google
• Preferences remembered in your browser, such as a chosen filter

We do not use advertising cookies or third-party analytics trackers. You can disable cookies in your browser, but you will not be able to stay signed in.

We keep your data for as long as needed to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Replies you receive are kept for a limited period that depends on your plan. Files you attach are removed once they have been sent.

You can ask us to delete your data at any time by writing to support@opptym.com.

We rely on trusted providers to run the Services:

• Stripe, for payments
• Google, for sign-in with your Google account
• An AI provider, for the AI writing features
• Our cloud hosting and file storage provider, with servers in India
• WhatsApp and Telegram, which deliver your messages and apply their own terms and privacy policies
• OpenStreetMap-based place search and map tiles (OpenFreeMap): your browser requests map tiles from them, so they can see your IP address

These providers are bound by their own confidentiality and data protection obligations.

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may have the right to:

• Access, correct or delete your personal data
• Object to processing or to marketing messages
• Withdraw your consent at any time
• Nominate someone to exercise these rights for you, and complain to us about how your data is handled

To exercise your rights, email us at support@opptym.com.

The Services are not intended for anyone under 18, and we do not knowingly collect data from minors.

We may update this policy from time to time. Changes are posted here with a revised date. Using the Services after a change means you accept the updated policy.

For privacy questions or data removal requests: