Privacy Policy

This Privacy Policy explains what information Notifly App ("Notifly", "we", "us") collects when a business uses our WhatsApp customer engagement platform, how we use it, and who we share it with.

We collect the following categories of information:

• Account information — the email address and password you use to sign up and log in.
• Shop / business information — business name, type, phone number, city and area you provide in Settings.
• Contact data you upload — names, phone numbers and tags for the customers you add or import, so you can message them.
• WhatsApp messaging data — campaign content, bot rules, and message delivery status (sent / delivered / read) exchanged through your connected WhatsApp Business number.
• Payment information — subscription plan and billing history. Card and payment details are handled directly by our payment processor, Razorpay — we do not store your card numbers.

• To operate your account and dashboard.
• To send WhatsApp campaigns and automated bot replies on your behalf, to the contacts you provide.
• To process subscription payments and manage your plan.
• To provide support and respond to account-related requests.

Notifly is built on top of the following third-party service providers, each of which processes a subset of your data on our behalf:

• Supabase — authentication and database hosting for your account, shop and contact data.
• Meta / WhatsApp Business Platform — delivers the messages you send and receive through your connected WhatsApp Business number.
• Razorpay — processes subscription payments.
• Upstash (Redis) — queues outgoing campaign messages for delivery.

We do not sell your data. Information is shared only with the service providers listed above, to the extent necessary to operate Notifly, or when required by law.

We retain your account, shop and contact data for as long as your account is active. You can delete individual contacts at any time from the Contacts page. To request deletion of your entire account and associated data, contact us using the details below.

Passwords are never stored in plain text and authentication is handled by Supabase. Access to your business data is scoped to your account. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

You may access, correct, or delete the contact data you've uploaded directly from your dashboard at any time. For requests relating to your own account data, contact us below.

Notifly is intended for business use and is not directed at individuals under the age of 18.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

For questions about this Privacy Policy or your data, contact: notiflysupport@gmail.com.