Privacy Policy

This Privacy Policy explains how Datamatics Software Solutions Private Limited ("Datamatics", "we", "us") collects, uses, stores, and protects information through the NotiFly platform ("Service"). By using NotiFly, you agree to the practices described in this policy.

1. Who We Are

NotiFly is operated by Datamatics Software Solutions Private Limited, a company registered with the Securities and Exchange Commission of Pakistan (SECP) and the Pakistan Software Export Board (PSEB).

Data Controller: Datamatics Software Solutions Private Limited
Address: 506, Arfa Software Technology Park, Lahore, Pakistan
Email: privacy@datamatics.pk
Phone: +923318880353

2. Information We Collect

2.1 Account Information (from our clients)

• Business name, contact person name, email address
• Phone number and WhatsApp Business Account details
• Billing information and payment records
• API keys and authentication credentials

2.2 Message Data (processed on behalf of our clients)

• Recipient phone numbers provided by our clients
• Message content (template parameters, text body)
• Message delivery status (queued, sent, delivered, read, failed)
• Timestamps for each status change
• WhatsApp message IDs (WAMIDs)

2.3 Technical Data

• IP addresses used to access the dashboard or API
• Browser type, device information, and access logs
• API request logs (endpoint, timestamp, response code)

3. How We Use Information

• Service delivery: To send WhatsApp messages on behalf of our clients via the Meta WhatsApp Business API
• Billing: To track message credit consumption and generate invoices
• Delivery reporting: To provide real-time message status and analytics
• Platform operations: To maintain security, prevent abuse, and ensure uptime
• Support: To respond to client inquiries and troubleshoot issues

4. Data Isolation

Each client's data is completely isolated within the platform:

• Clients can only access their own messages, credits, and analytics
• No cross-account data access is possible at any level
• Each client has separate API keys and authentication
• Admin users cannot view message content without explicit authorization

5. Data Sharing

We do not sell, rent, or share your data with third parties except:

• Meta (WhatsApp Business API): Message data is transmitted to Meta's WhatsApp Cloud API for delivery. Meta's own privacy policy governs their handling of this data.
• Legal requirements: If required by law, court order, or government regulation in Pakistan
• Service providers: Hosting and infrastructure providers who are contractually bound to protect your data

6. Data Storage and Security

• All data is stored on servers with encrypted storage (AES-256 at rest)
• All connections use TLS 1.2+ encryption in transit
• API tokens and credentials are hashed and never stored in plaintext
• Access to production systems is restricted to authorized personnel only
• Regular security reviews and access audits are conducted

7. Data Retention

• Message content: Retained for up to 90 days, then automatically purged. Delivery metadata (status, timestamps) is retained for 12 months for reporting.
• Account data: Retained for the duration of the service agreement plus 12 months
• API logs: Retained for 30 days for troubleshooting
• Billing records: Retained for 7 years as required by Pakistan tax regulations

8. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about your account
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data (see Section 9)
• Export: Request an export of your message logs and billing data
• Restriction: Request we stop processing your data while a complaint is resolved

To exercise any of these rights, email privacy@datamatics.pk. We will respond within 15 business days.

9. Data Deletion

To request complete deletion of your data:

• Email privacy@datamatics.pk with subject "Data Deletion Request"
• Include your business name and registered email address
• We will confirm receipt within 2 business days
• Deletion will be completed within 30 days
• We will retain only what is legally required (billing records per tax law)
• You will receive a confirmation email once deletion is complete

10. End User (Message Recipient) Privacy

NotiFly processes messages sent by our clients to their end users. If you are a message recipient:

• The business that sent you the message is responsible for having your consent
• To opt out, reply "STOP" to the WhatsApp message or contact the sending business directly
• If you cannot reach the sending business, contact us at privacy@datamatics.pk and we will assist

11. Cookies

The NotiFly dashboard uses essential cookies for session management and authentication. We do not use tracking cookies, advertising cookies, or third-party analytics on the platform.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify active clients via email.

13. Contact

For any privacy-related questions or concerns:

Email: privacy@datamatics.pk
Phone: +923318880353
Address: 506, Arfa Software Technology Park, Lahore, Pakistan