Effective Date: 01 April 2026
Last Updated: 01 April 2026

This Privacy Policy explains how Sidekick Digital Solutions LLP, operating the SMSMOJO software-as-a-service platform, collects, uses, stores, shares and protects personal data.

This Privacy Policy applies to the SMSMOJO:

• Website;

• Customer portal;

• APIs and webhooks;

• WhatsApp integrations;

• Chatbot and automation features;

• Subscription and billing processes;

• Support services; and

• Related products and services.

By using SMSMOJO, you acknowledge the practices described in this Privacy Policy.

1. About SMSMOJO

SMSMOJO allows businesses and authorised users to connect their own Meta Business Account and WhatsApp Business Account and manage WhatsApp communications through a central portal.

SMSMOJO also provides APIs and webhooks that Customers may use to connect existing CRM, ERP, billing, lead-management and other business applications.

SMSMOJO is owned, operated and billed by:

Sidekick Digital Solutions LLP

2. Our Role in Processing Data

Depending on the type of information and processing activity, Sidekick Digital may act in different capacities.

2.1 SMSMOJO account and business information

For information relating to account registration, billing, support, website usage and our direct relationship with a Customer, Sidekick Digital determines the purposes of processing that information.

2.2 Customer contact and WhatsApp communication data

For contacts, conversations, message content, CRM records and other information uploaded or received through a Customer’s account, the Customer generally determines why and how the information is processed.

For this information, Sidekick Digital processes data on behalf of and under the instructions of the Customer to provide SMSMOJO.

The Customer remains responsible for its own privacy notice, lawful basis, recipient consent and use of Customer Data.

3. Information We Collect

3.1 Account and identity information

We may collect:

• Name;

• Business name;

• Job title or designation;

• Email address;

• Telephone number;

• Login details;

• Account role;

• User permissions;

• Business address;

• GSTIN;

• Subscription plan; and

• Other information supplied during registration.

3.2 Meta and WhatsApp account information

When a Customer connects Meta or WhatsApp, we may receive or process:

• Meta Business Account identifiers;

• WhatsApp Business Account identifiers;

• WhatsApp business phone-number identifiers;

• Business display name;

• Business profile information;

• Meta administrator information;

• Authentication tokens and permissions;

• Message-template information;

• Messaging limits;

• Quality or account-status information;

• Webhook events; and

• Other information made available through the WhatsApp Business Platform.

SMSMOJO accesses this information only to provide features authorised by the Customer.

3.3 Contact and conversation information

Depending on how a Customer uses SMSMOJO, we may process:

• Recipient names;

• Mobile numbers;

• WhatsApp profile information;

• Contact tags and attributes;

• Message content;

• Uploaded or received images, audio, video and documents;

• Conversation history;

• Message-template values;

• Delivery, read and failure statuses;

• Opt-in and opt-out records;

• Agent notes;

• Support assignments; and

• Communication timestamps.

This information is processed on behalf of the Customer operating the connected WhatsApp Business Account.

3.4 API and integration information

Where SMSMOJO is connected to another application, we may process:

• API keys and authentication credentials;

• Webhook URLs and secrets;

• CRM or billing record identifiers;

• Customer, invoice, lead or transaction information;

• Data fields selected by the Customer;

• Integration configuration;

• API requests and responses;

• Error reports; and

• Synchronisation logs.

The information exchanged depends on the Customer’s configuration and instructions.

3.5 Chatbot and automation information

We may process:

• Bot flows;

• Automated replies;

• Keywords and triggers;

• Menu selections;

• Routing rules;

• Workflow conditions;

• Recipient responses;

• Conversation context;

• Bot execution logs; and

• Human-agent escalation records.

Customers are responsible for determining what information their chatbot requests from recipients.

3.6 Billing and transaction information

For SMSMOJO portal payments, we may collect:

• Billing name;

• Billing address;

• GSTIN;

• Subscription plan;

• Amount payable;

• Invoice details;

• Razorpay order or payment identifier;

• Payment status;

• Payment date;

• Payment method category; and

• Refund or payment-failure information.

Payment instrument details are collected and processed through Razorpay and its participating banks or payment partners.

SMSMOJO does not intentionally store full debit-card or credit-card numbers, CVV numbers, UPI PINs, internet-banking passwords or similar payment authentication credentials.

3.7 Technical and usage information

When you access SMSMOJO, we may automatically collect:

• IP address;

• Browser and device information;

• Operating system;

• Login timestamps;

• Pages or features accessed;

• API usage;

• Session information;

• Error logs;

• Security events;

• Approximate location derived from IP address; and

• Other diagnostic information.

3.8 Communications with us

When you contact support, sales or the grievance officer, we may collect:

• Your contact details;

• The content of your request;

• Screenshots or attachments;

• Call or meeting notes;

• Technical information; and

• Our response history.

4. How We Collect Information

We collect information:

• Directly from Customers and authorised users;

• Through the SMSMOJO portal;

• Through APIs and webhooks;

• From Meta and the WhatsApp Business Platform;

• From applications connected by the Customer;

• Through Razorpay;

• From support communications;

• Through cookies and similar technologies; and

• Automatically through server and security logs.

5. How We Use Information

We use information to:

• Create and manage SMSMOJO accounts;

• Authenticate users;

• Connect Meta and WhatsApp Business Accounts;

• Send and receive WhatsApp communications;

• Operate message templates, chatbots and workflows;

• Provide API and webhook functionality;

• Synchronise authorised applications;

• Process SMSMOJO subscription payments;

• Issue invoices;

• Provide customer and technical support;

• Detect fraud, abuse and unauthorised access;

• Monitor availability and performance;

• Maintain security and backups;

• Troubleshoot technical issues;

• Enforce our Terms and Conditions;

• Comply with legal obligations;

• Maintain business and tax records;

• Improve SMSMOJO functionality; and

• Communicate service, security and administrative updates.

We do not use Customer WhatsApp conversations for purposes unrelated to providing, securing or supporting the Customer’s requested Service, except where required by law.

6. Meta and WhatsApp Processing

Customers connect their own Meta Business Account and WhatsApp Business Account to SMSMOJO.

Meta independently processes information under its own terms, policies and data-processing arrangements.

Meta may process:

• WhatsApp account information;

• Message routing information;

• Template information;

• Message delivery events;

• Messaging charges;

• Quality ratings; and

• Other WhatsApp Business Platform information.

Customers should review and comply with Meta’s and WhatsApp’s applicable privacy, business and messaging policies.

SMSMOJO is not responsible for Meta’s independent privacy practices or decisions.

7. Meta Billing

Customers pay Meta directly for WhatsApp Business Platform messaging charges.

SMSMOJO does not normally collect or process the Customer’s Meta payment instrument.

Information relating to Meta billing is controlled through the Customer’s Meta billing account.

SMSMOJO charges only for its own portal, subscription, API, integration, setup, support or related services unless a separate written agreement states otherwise.

8. Razorpay Payments

SMSMOJO uses Razorpay to process portal subscription and service payments.

When you make a payment, relevant information may be shared directly with Razorpay, participating banks, card networks, UPI providers or other payment-system participants.

SMSMOJO generally receives payment confirmation and transaction-related information rather than complete payment authentication credentials.

Razorpay processes payment information under its own terms and privacy practices. Razorpay’s payment-processing services are separate from Meta’s WhatsApp billing.

9. Customer Responsibilities for End-User Data

Customers using SMSMOJO are responsible for:

• Obtaining valid WhatsApp opt-in;

• Providing recipients with a privacy notice;

• Explaining how recipient information will be used;

• Maintaining evidence of consent;

• Honouring opt-out requests;

• Using personal data only for lawful purposes;

• Responding to recipient rights requests;

• Avoiding unnecessary collection of sensitive information;

• Securing data exported to connected applications; and

• Complying with applicable communication and privacy laws.

Customers must not upload or process personal data they obtained unlawfully or do not have authority to use.

10. Legal Grounds for Processing

Where required by applicable law, we process personal data based on one or more of the following:

• Consent;

• Providing a Service requested by the Customer;

• Performing contractual obligations;

• Compliance with legal obligations;

• Protection of the platform, users and third parties;

• Prevention of fraud and security incidents;

• Responding to communications initiated by an individual; and

• Other legitimate uses permitted under applicable law.

Where processing is based on consent, consent may be withdrawn using the contact details provided in this Privacy Policy. Withdrawal will not affect processing already lawfully completed.

11. How We Share Information

We may share information with the following categories of recipients.

11.1 Meta and WhatsApp

Information necessary to operate the WhatsApp Business Platform may be exchanged with Meta and WhatsApp.

11.2 Razorpay and payment providers

Billing and transaction information may be shared with Razorpay, banks, payment networks and payment-processing partners.

11.3 Hosting and technology providers

We may use cloud hosting, database, storage, security, email, monitoring, communication and technical-support providers.

These providers may process information only to perform services for SMSMOJO and subject to applicable contractual and security obligations.

11.4 Customer-authorised applications

Information may be shared with CRM, ERP, billing, lead-management or other applications connected by the Customer.

11.5 Professional advisers

Information may be shared with accountants, auditors, lawyers and consultants where reasonably necessary.

11.6 Legal and regulatory authorities

We may disclose information where required to:

• Comply with law;

• Respond to a lawful government request;

• Protect legal rights;

• Investigate fraud or misuse;

• Protect users or the public; or

• Enforce our Terms.

11.7 Corporate transactions

Information may be transferred as part of a merger, restructuring, acquisition, investment or transfer of SMSMOJO or Sidekick Digital’s business, subject to applicable law.

We do not sell Customer contact lists or WhatsApp conversations to third-party advertisers.

12. International Data Transfers

Meta, WhatsApp, cloud providers and other service providers may process information from locations outside the Customer’s country.

Where personal data is transferred outside India, we will take reasonable measures and comply with applicable restrictions, contractual requirements and government directions relating to such transfers.

Customers are responsible for ensuring that their own connected applications and service providers comply with applicable cross-border data-transfer requirements.

13. Data Retention

We retain account, subscription and business information for as long as necessary to:

• Maintain the Customer account;

• Provide SMSMOJO;

• Issue and maintain invoices;

• Meet tax and accounting obligations;

• Resolve disputes;

• Prevent fraud;

• Enforce agreements; and

• Comply with applicable law.

Customer contact and conversation information may be retained while the account is active and for a limited period after termination, depending on:

• The Customer’s plan;

• Customer instructions;

• Backup cycles;

• Legal obligations;

• Security requirements; and

• Ongoing disputes or investigations.

Customers should export required information before cancelling the Service.

Information may remain temporarily in encrypted or restricted backups until those backups are overwritten under normal retention cycles.

We may retain anonymised or aggregated information that no longer identifies an individual.

14. Data Security

We use reasonable administrative, technical and organisational safeguards designed to protect information against:

• Unauthorised access;

• Accidental loss;

• Improper disclosure;

• Alteration;

• Destruction; and

• Misuse.

Measures may include:

• Access controls;

• Authentication;

• Encryption in transit;

• Restricted administrative access;

• Logging and monitoring;

• Backups;

• Credential protection;

• Security testing; and

• Incident-response procedures.

No internet-based service can guarantee absolute security.

Customers must protect their passwords, API keys, Meta credentials, webhook secrets and connected applications.

15. Personal-Data Breaches

Where we become aware of a personal-data breach affecting information under our control, we will investigate the incident and take reasonable containment and remediation measures.

We will notify affected Customers, individuals or authorities where and within the time required by applicable law.

Customers must promptly notify SMSMOJO where a security incident involving their systems, users, API credentials or connected applications may affect SMSMOJO or Customer Data.

16. Cookies and Similar Technologies

SMSMOJO may use necessary cookies and similar technologies to:

• Maintain login sessions;

• Remember user preferences;

• Protect account security;

• Prevent fraud;

• Understand portal usage;

• Diagnose technical issues; and

• Improve performance.

Some cookies may be provided by service providers used for hosting, security, payment or analytics.

Browser settings may allow you to block certain cookies. Disabling necessary cookies may prevent parts of SMSMOJO from functioning properly.

17. Your Rights

Subject to applicable law, an individual may have the right to:

• Request information about personal data being processed;

• Request access to available personal data;

• Request correction of inaccurate or incomplete information;

• Request erasure where retention is no longer necessary;

• Withdraw consent;

• Submit a grievance;

• Nominate another individual to exercise rights where permitted; and

• Use other rights provided under applicable law.

We may request information necessary to verify identity and prevent unauthorised disclosure.

Certain information may be retained despite a request where retention is required for legal, tax, security, contractual or dispute-resolution purposes.

18. Rights Relating to Customer Communications

Where you are a WhatsApp recipient communicating with one of our Customers, the Customer is normally the business responsible for deciding how your information is used.

You should first submit requests relating to:

• Marketing consent;

• WhatsApp opt-out;

• Conversation history;

• Contact records;

• Correction; or

• Deletion

directly to the business that contacted you.

SMSMOJO will provide reasonable assistance to the Customer in responding to valid requests where required by law or contract.

19. Marketing Communications From SMSMOJO

We may send SMSMOJO Customers information relating to:

• Account administration;

• Security alerts;

• Payment and subscription status;

• Service interruptions;

• Product updates; and

• Customer support.

Where we send optional promotional communications about SMSMOJO, you may opt out using the unsubscribe method provided or by contacting us.

Opting out of marketing does not stop essential account, security, billing or service communications.

20. Children’s Data

SMSMOJO is intended for business use and is not designed for individuals under 18 years of age to create accounts independently.

Customers must not knowingly use SMSMOJO to collect or process children’s personal data without complying with applicable parental-consent and child-protection requirements.

Where we become aware that an account was created by an unauthorised minor, we may restrict or delete the account.

21. Account Closure and Disconnection

Customers may request account closure or disconnect SMSMOJO from their Meta Business Account.

Disconnecting SMSMOJO may stop:

• WhatsApp message synchronisation;

• Chatbot operation;

• Automations;

• Webhooks;

• API access; and

• Template or conversation management.

Some information may be retained after closure where necessary for tax, fraud prevention, legal claims, security or other lawful purposes.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• SMSMOJO functionality;

• Meta or WhatsApp requirements;

• Razorpay or payment processing;

• Data-protection laws;

• Security practices; or

• Service providers.

The updated version will be published with a revised “Last Updated” date.

Where required, we will provide additional notice or request consent.

23. Contact Us

For privacy enquiries, account-data requests or questions about this Privacy Policy, contact:

SMSMOJO – Sidekick Digital Solutions LLP

Registered Address:
3rd Floor, GREETA TOWERS
Industrial Estate, Thirumalai Nagar Annexe
Perungudi, Chennai, Tamil Nadu – 600096
India

Email: [email protected]
Telephone: +91 99405 06140
GSTIN: 33AEMFS3226C1ZB

24. Grievance Officer

Grievance Officer: Nirmal Balaji
Email: [email protected]
Postal Address:
3rd Floor, GREETA TOWERS
Industrial Estate, Thirumalai Nagar Annexe
Perungudi, Chennai, Tamil Nadu – 600096
India

Please include sufficient information to identify your account, the relevant processing activity and the nature of your grievance.

We will acknowledge and respond to privacy grievances within a reasonable period not exceeding 90 days, or within any shorter period required by applicable law.