Privacy & Data Protection Policy

1. Introduction

StartMessaging ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (startmessaging.com) and cloud messaging APIs, including the WhatsApp Business API (the "Service").

Our platform is operated in compliance with Nigerian law, including the Nigeria Data Protection Act (NDPA) 2023 and guidelines issued by the Nigeria Data Protection Commission (NDPC).

2. Information We Collect

2.1 Account Information

When you create an account, we collect your full name, email address, phone number, company name, billing details, and API credentials. We do not store plaintext API keys or raw payment card details.

2.2 API Usage and Recipient Data

When you use our APIs, we process recipient phone numbers and message content to deliver messages via Meta (WhatsApp) or partner telecommunications networks. We treat this as transient processing data.

2.3 Automatically Collected Data

We collect IP addresses and browser user-agent data for dashboard session security and functional logging. We do not engage in cross-site tracking or sell user data.

3. How We Use Your Information

We use collected data to deliver communication services, process subscription payments, manage account security, provide customer support, detect fraud, and comply with applicable Nigerian regulations including the NDPA 2023 and NCC consumer protection guidelines.

4. Data Retention

We retain account profiles and billing records for up to 7 years to comply with tax and audit regulations. API request logs and recipient numbers are retained for 90 days for debugging and billing dispute resolution, after which they are permanently purged. Message contents are retained for up to 30 days.

5. Data Sharing and Disclosure

We do not sell your personal data. We share processing data only with Meta Platforms, Inc. (for WhatsApp Business API delivery), licensed telecom operators (for SMS routing where applicable), and PCI-DSS compliant payment processors. We may disclose data if legally required by Nigerian law enforcement or regulatory authorities.

6. Data Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, secure access controls, and regular system audits to protect your API keys and client data.

7. Cookies

We use essential cookies for secure session authentication (sm_session) and local preference settings (sm_country and sm_notice_dismissed). We do not use third-party advertising cookies or cross-site tracking pixels.

8. Your Rights

Under applicable data protection laws, you have the right to access, correct, or request the erasure of your personal data. You may also object to processing or withdraw consent. To exercise these rights, email us at startmessagingdotcom@gmail.com.

9. International Data Transfers

Your data may be processed in countries where our cloud infrastructure operates. We ensure appropriate safeguards are in place for international transfers in compliance with the NDPA and applicable cross-border data transfer regulations.

10. Contact Us

For any privacy-related inquiries, please email us at startmessagingdotcom@gmail.com.

11. Compliance with the Nigeria Data Protection Act (NDPA)

For users residing in Nigeria, we comply with the Nigeria Data Protection Act (NDPA) 2023 and the regulations of the Nigeria Data Protection Commission (NDPC). You have the right to access your personal data, object to its processing, request rectification or erasure, and withdraw consent at any time. We process your data lawfully and only for specified, legitimate purposes. To exercise your rights, file inquiries, or lodge a complaint, contact our Data Protection Office at startmessagingdotcom@gmail.com.