Privacy Policy
This policy explains what data Signally processes, why, who else is involved, how long we keep it, and how to ask for it to be deleted. In short, we process data only to run the features our business customers use. We don't sell it, and we don't use it for advertising.
1. Who we are
Signally (“Signally”, “we”, “us”) provides a platform that lets businesses send and receive WhatsApp messages and manage them in a shared team inbox. Signally is based in India, with its registered address at K-703/704, Krish Vatika, Khanpur Khola, Bhiwadi-301019, Distt Alwar, Rajasthan.
This policy covers the Signally platform and this website, signally.dev.
2. Our role
India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) separates the party that decides why and how personal data is processed (the Data Fiduciary, often called the controller) from the party that processes it on that fiduciary's behalf (the Data Processor).
- For the messages and contacts of a business's own customers, the business is the Data Fiduciary and Signally is its Data Processor. We process that data only on the business's instructions.
- For our own records, such as our business customers' account details and messages people send us directly, Signally is the Data Fiduciary.
3. Data we process
About our business customers and their users
- Business details: business name, address, registration and tax details, and billing information.
- Account details for each user: name, email address, phone number, role and sign-in information.
- WhatsApp Business account details needed to connect a number, such as the business account ID, phone number ID and display name.
- Usage and support records needed to operate and secure the service.
About the people a business messages (on the business's behalf)
- WhatsApp messages exchanged with the business, including text and any media (images, documents, audio).
- Phone numbers and the names or WhatsApp profile names of contacts.
- Contact records the business creates, such as notes, labels, assignments and conversation status.
About visitors to this website
This website has no sign-up, no forms and no analytics. Our hosting provider processes basic technical data, such as IP address and browser type, to deliver and protect the site. If you email us, we receive your email address and whatever you choose to write.
4. How we use data
We use data only to provide and support the Signally features our customers use:
- sending and receiving WhatsApp messages for the business and showing them in its shared inbox;
- syncing messages with the WhatsApp Business app when the business uses the same number on both (coexistence);
- sending the template messages the business sets up;
- keeping the business's contact records, notes and assignments;
- generating suggested or automated replies, only if the business turns this feature on;
- securing the service, preventing abuse, fixing problems and responding to support requests;
- billing and meeting our legal obligations.
We do not sell personal data. We do not use our customers' messages or contacts for our own marketing or for advertising, we do not share them with advertisers or data brokers, and we do not combine one business's data with another's.
5. WhatsApp Business Platform
Signally sends and receives messages through the official WhatsApp Business Platform (Cloud API), operated by Meta Platforms. Each business connects its own WhatsApp Business account. Meta processes messages in order to deliver them, under WhatsApp's business terms and policies, available at whatsapp.com/legal.
We use data received through Meta's platform only to provide the Signally service to the business it belongs to, and we handle it in line with Meta's platform terms.
6. Sub-processors and sharing
We share data only with service providers that help us run Signally, under terms that limit their use of it to providing their service to us:
| Provider | Purpose |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving WhatsApp messages |
| Cloudflare | Hosting, storage, networking and security |
| AI model provider | Suggested or automated replies, only when a business turns them on |
We use AI providers only under terms that prevent them from using our customers' data to train their models. We may also disclose data where the law requires it, for example in response to a valid order from a court or government authority.
7. Where data is processed
Our providers run global infrastructure, so data may be processed outside India. We transfer data only as the DPDP Act and any government restrictions under it allow.
8. Retention
- Messages and contact data are kept for as long as the business keeps them in Signally. When a business closes its account, we delete its data within 30 days.
- Account data is kept while the account is active and deleted within 30 days of closure.
- Deleted data may remain in encrypted backups for up to 30 more days, until those backups are overwritten.
- Billing and tax records are kept for as long as Indian law requires.
9. Security
We protect data with reasonable security safeguards, including encryption in transit (HTTPS/TLS) and at rest, separation between customer workspaces, and access controls that limit data to people who need it. If a personal data breach affects a business's data, we will tell the business without undue delay.
10. Your rights and deletion
Under the DPDP Act, you can ask for a summary of the personal data processed about you, ask for it to be corrected, completed, updated or erased, withdraw consent where processing relies on consent, and have grievances addressed.
If you messaged a business that uses Signally, you can ask that business, or email us at contact@signally.dev and we will help. Our Data Deletion page explains how to request deletion. We respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Children
Signally is a service for businesses and is not directed at children.
13. Changes to this policy
We may update this policy. We will change the “Last updated” date above and, for material changes, tell business customers before they take effect.
14. Governing law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
15. Contact and grievance officer
Mukesh Gupta, Grievance Officer, Signally
K-703/704, Krish Vatika, Khanpur Khola, Bhiwadi-301019, Distt Alwar, Rajasthan, India
Email: contact@signally.dev
Phone: +91-9560407662
We acknowledge grievances within 7 days and aim to resolve them within 30 days.