Privacy Policy
From Tier-2/3 India to the World – ONBBITS is empowering SMBs, enterprises, and SaaS builders to automate and scale customer communication.
📋 Summary of Key Points
This summary provides the key points of our Privacy Policy. Please read the full sections below for complete details. By using ONBBITS, you agree to the practices described in this policy.
- We collect information you provide (name, email, phone, business details) and information generated automatically when you use our platform (usage data, logs, device info).
- We use your information to operate and improve the ONBBITS platform, process payments, send service communications, and fulfil legal obligations.
- We do not sell your personal information to third parties.
- We share information only with trusted service providers (payment, infrastructure, WhatsApp BSP) under strict data processing agreements.
- Your end-customer data (contacts, conversation history) is processed on your behalf — you remain the data controller for that data.
- You have the right to access, correct, or delete your personal data at any time by contacting privacy@onbbits.io.
01Who We Are
ONBBITS is a WhatsApp-first automation and communication platform operated by ONBBITS Innovation Pvt. Ltd. ("we", "us", "our"). We are incorporated in India and provide cloud-based SaaS services to businesses across India and internationally.
This Privacy Policy applies to all users of the ONBBITS platform, including administrators, agents, and any individual who accesses or uses our website at onbbits.io or any of our sub-domains.
If you do not agree with the terms of this Privacy Policy, please discontinue use of the Service immediately.
02What Information Do We Collect?
In Short: We collect information you give us directly, information generated automatically as you use the platform, and limited information from third-party sources.
2.1 Information You Provide to Us
We collect personal information that you voluntarily provide when you register an account, set up an App, purchase a subscription, or contact us for support.
Account & Identity Information
- Full name and display name
- Email address (used as primary account identifier)
- Mobile phone number
- Business name and type
- Country of operation
- Username and encrypted password
Business & WhatsApp Onboarding Information
- WhatsApp Business Account (WABA) ID, Phone Number ID, and Business ID
- Business display name submitted during WABA registration
- Facebook Business Manager ID (used for WABA verification through our BSP, AdKrity)
- Business profile details: description, website URL, business category, and profile photo
Billing & Payment Information
- Company legal name and billing address (including city, state, postal code, country)
- GST / Tax Identification Number (for Indian businesses)
- Payment instrument details — entered directly into Razorpay, NOT stored on ONBBITS servers
- Invoice history and subscription status
End-Customer Data (Processed on Your Behalf)
- Contact names and WhatsApp phone numbers
- Custom attributes, tags, and notes assigned to contacts
- Opt-in and opt-out status for messaging
- Conversation history visible within the ONBBITS inbox
- Campaign send lists and segmentation data
Support & Communications
- Support ticket content, including title, description, and attachments
- Emails, chat messages, or other communications you send to our team
- Feedback and survey responses
2.2 Information Collected Automatically
Log and Usage Data
- IP address and approximate geographic location (country/city level)
- Browser type, version, and operating system
- Pages viewed, features accessed, and navigation paths within the platform
- Date and time of access, session duration, and frequency of use
- Error reports and crash logs
Platform Event Data (PostHog Analytics)
- Dashboard and page views
- Feature interactions (e.g., campaign created, template submitted, contact imported)
- Button clicks and form submissions for platform improvement
- Activated only after you provide explicit consent through the in-app analytics consent prompt
WhatsApp Message Delivery Metadata
- Message status events received from Meta's Cloud API: sent, delivered, read, failed
- Timestamps associated with each delivery event
- Failure reason codes for undelivered messages
Cookies and Tracking Technologies
- Session cookies: required to maintain your logged-in state
- Preference cookies: to remember your language and UI preferences
- Analytics cookies: set by PostHog, only after consent
2.3 Information Received from Third Parties
Meta / WhatsApp
WABA ID, business verification status, phone number registration status, and template approval status.
Razorpay
Payment confirmation, transaction ID, and masked payment details following a successful transaction.
AdKrity (BSP)
WABA connection status and API credentials following onboarding.
Google Sign-In
Your name, email address, and profile picture as shared by your Google account.
03How Do We Use Your Information?
In Short: We use your information to deliver and improve the ONBBITS Service, process payments, communicate with you, and comply with legal obligations. We do not use your data for purposes beyond what is described here without your consent.
Service Delivery
Create and manage your account, enable messaging features, display conversation history, and manage wallet balances in real time.
Billing & Payments
Process subscription payments via Razorpay, calculate GST, generate invoices, and monitor wallet balances.
Communications
Send transactional emails, respond to support tickets, and notify you of service updates and policy changes.
Platform Improvement
Analyse anonymised usage data, monitor performance, conduct A/B testing, and use PostHog analytics with your consent.
Security & Fraud Prevention
Detect unauthorised access, enforce role-based access controls, and investigate security incidents.
Legal & Compliance
Comply with applicable laws, respond to lawful requests, and maintain records required under Indian statutes.
🚫 What We Do NOT Do With Your Data
- We do not sell your personal information to any third party.
- We do not use your end-customer data for any purpose other than delivering the Service to you.
- We do not use your data for targeted advertising on behalf of third-party advertisers.
- We do not share your data with competitors or unrelated businesses.
04Legal Basis for Processing
Contractual Necessity
Processing required to deliver the Service you have subscribed to (e.g., account creation, messaging, billing).
Legitimate Interests
Analytics and platform improvement, security monitoring, and fraud prevention — where our interests do not override your rights.
Legal Obligation
Retention of financial records, response to regulatory inquiries, and compliance with Indian tax and corporate law.
Consent
Analytics tracking via PostHog, and any marketing communications. You may withdraw consent at any time without affecting prior processing.
05When and With Whom Do We Share Your Information?
In Short: We do not sell your data. We share information only with trusted service providers who help us operate the platform, and only as necessary to deliver the Service.
5.1 Service Providers
Razorpay
Payment processing for subscription fees and wallet recharges. Razorpay stores payment instrument details; ONBBITS only receives transaction confirmation.
AdKrity (BSP)
Our WhatsApp Business Solution Provider. WABA connection details and message delivery requests are routed through AdKrity's infrastructure.
Meta (WhatsApp Cloud API)
Message delivery, template approval, and WABA management. Data exchanged is governed by Meta's Business Terms.
PostHog
Product analytics. Event data is transmitted to PostHog only after user consent. Data is anonymised before analysis.
Cloud Infrastructure
Hosting, storage, and database services. Servers are located in India or within AWS/GCP regions with appropriate data residency controls.
ERPNext (Internal ERP)
Used internally for subscription management, invoicing, support ticket routing, and financial reconciliation.
5.2 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your information may be transferred to the acquiring entity. We will notify you via email or a prominent in-platform notice if such a transfer materially affects how your data is used.
5.3 Legal Disclosure
We may disclose your information to government authorities, regulators, or courts when required by law, a valid court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
06How Long Do We Keep Your Information?
Account & profile data
Active subscription + 30 days after termination — then deleted or anonymised
Financial records (invoices, payments)
7 years — as required under Indian Income Tax Act and GST regulations
Support ticket data
3 years from resolution — to support any follow-up disputes or audits
Analytics event data (PostHog)
36 months — from the date of collection
WhatsApp conversation metadata
12 months — after which logs are archived or deleted
Inactive wallet credits
365 days of inactivity — wallet balances may expire with prior notification
07How Do We Keep Your Information Safe?
Despite these measures, no system is completely immune to breaches. If you suspect unauthorised access, please contact us immediately at support@onbbits.io.
08Cookies and Tracking Technologies
Strictly Necessary
Required to maintain your session and enable core platform functionality. These cannot be disabled.
Preference Cookies
Store your language setting and UI preferences across sessions.
Analytics Cookies
Track feature usage via PostHog for product improvement. Activated only with your explicit consent.
We do not use advertising cookies or third-party retargeting technologies on the ONBBITS platform.
09Social Logins
ONBBITS offers the option to register or log in using your Google account. If you choose to do so, Google will share your name, email address, and profile picture with us. We use this information solely to create and manage your ONBBITS account.
If you attempt to log in using Google with an email address already registered via email/password, the platform will display an appropriate error message to prevent account duplication.
We are not responsible for the data practices of Google. Please review Google's Privacy Policy to understand how they handle your data.
10Your Privacy Rights
10.1 Rights Available to All Users
Access
Request a copy of the personal information we hold about you.
Correction
Request correction of inaccurate or incomplete information.
Deletion
Request deletion of your personal data, subject to our legal retention obligations.
Withdraw Consent
Withdraw consent to analytics tracking or marketing communications at any time.
Opt-Out of Marketing
Unsubscribe from promotional emails at any time. You will still receive transactional messages.
10.2 Additional Rights for EEA / UK Users (GDPR)
Data Portability
Receive your data in a structured, machine-readable format.
Restriction
Request that we restrict processing of your data in certain circumstances.
Object
Object to processing based on legitimate interests.
Lodge a Complaint
File a complaint with your local data protection supervisory authority.
10.3 How to Exercise Your Rights
Email us at privacy@onbbits.io from your registered email address with the subject line "Data Rights Request". Please include your full name, App ID, and a clear description of your request. We will respond within 30 days.
11Do-Not-Track Signals
Some web browsers allow you to activate a Do-Not-Track ("DNT") setting to signal that you do not want your online behaviour tracked. At present, no universally accepted standard exists for responding to DNT signals, and ONBBITS does not currently respond to DNT browser signals. We will update this section if a recognised standard is adopted that we are required to follow.
12Children's Privacy
The ONBBITS platform is a business tool intended for use by individuals aged 18 and above. We do not knowingly collect personal information from persons under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@onbbits.io and we will promptly delete such data.
13India — Digital Personal Data Protection Act (DPDP Act, 2023)
As an Indian company, ONBBITS Innovation Pvt. Ltd. is committed to compliance with India's Digital Personal Data Protection Act, 2023.
- We process your personal data only for lawful purposes and with appropriate consent or legitimate use cases as defined under the Act.
- You have the right to obtain a summary of your personal data being processed, to correct or erase your data, and to nominate a representative for exercising these rights in the event of your death or incapacity.
- We have designated a Data Protection Point of Contact reachable at privacy@onbbits.io.
- We will notify you and the relevant Data Protection Board of India of any significant data breach in accordance with the timelines prescribed under the Act.
14Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. The updated Effective Date at the top of this document will indicate when the most recent revision was made.
📢 For material changes, we will notify you by email or by displaying a prominent notice within the ONBBITS platform at least 14 days before the changes take effect.
15Contact Us
Privacy & Data Requests
privacy@onbbits.io
General Support
support@onbbits.io
Registered Address
ONBBITS Innovation Pvt. Ltd.
Surat, Gujarat, IndiaWe aim to respond to all privacy-related enquiries within 7 business days.
Ready to Grow with WhatsApp? Try ONBBITS Free
Unlock powerful automation and conversions with every message. No setup hassle. Just results.
