1. Scope

This policy applies to personal data we collect through the SendRCSMessages website, dashboard/panel, and related services ("Service"), operated by INTELARIS STRATEGIES PRIVATE LIMITED ("SendRCSMessages," "we," "us," "our"), registered office at 100-3A, First Floor, Raghuleela CHS LTD, 150 Feet Road, Bhayandar (West), Thane – 401101, Maharashtra, India.

It covers two categories of people: (a) our direct clients (businesses and resellers who use our platform), and (b) end recipients — the people your campaigns message. Our obligations differ for each, as explained below.

2. Data we collect

We store the above on our own servers/panel infrastructure to operate the Service for you.

3. Why we collect it

• To create and manage your account and sub-accounts (for resellers);
• To process sender verification with Google RBM and carrier partners;
• To deliver, log, and report on your RCS campaigns;
• To process wallet recharges, billing, and GST-compliant invoicing;
• To provide support and respond to your queries;
• To meet legal and regulatory obligations applicable to us in India.

We rely on your consent (when you sign up and agree to these terms) and on legitimate business purposes necessary to provide the Service as the lawful basis for this processing.

4. End-recipient data

When you use our platform to message your own customers, you act as the data controller for that data — meaning you are responsible for obtaining valid consent from your end recipients before contacting them. We act as a processor on your behalf: we store the phone numbers and message content you submit to us only to the extent necessary to deliver, log, and report on your campaigns. We do not use your end-recipients' data for our own marketing or sell it to any third party.

5. Who we share data with

We share data only where necessary to provide the Service:

• Google (RBM/Jibe) — for sender verification and RCS message routing;
• Carriers, including Jio — for message delivery to end recipients;
• CPaaS/aggregator partners — for delivery infrastructure;
• Payment processors — for wallet recharge transactions;
• Regulators or law enforcement — only where legally required to do so.

We do not sell personal data to third parties for their own marketing purposes.

6. Data retention

We retain account and billing data for as long as your account is active and for a reasonable period afterward to meet accounting, tax, and legal obligations. Campaign and delivery logs are retained for the period necessary to provide analytics and resolve disputes, after which they are deleted or anonymized on a reasonable schedule. You may request earlier deletion of your data, subject to our legal retention obligations (see Section 8).

7. Security measures

We use reasonable administrative, technical, and organizational measures to protect data stored on our platform, including access controls and encrypted transmission of credentials and payment information. No system is completely secure, and we cannot guarantee absolute security, but we take breaches seriously (see Section 10).

8. Your rights (data principal rights)

Under the DPDP Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data, once it is no longer necessary for the purpose it was collected, subject to legal retention requirements;
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity;
• Lodge a grievance with our Grievance Officer (Section 11) and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in Section 13.

9. Cookies

Our website may use cookies and similar technologies for basic functionality and analytics. You can control cookies through your browser settings; disabling them may affect some website functionality.

10. Breach notification

In the event of a personal data breach that is likely to affect you, we will notify the Data Protection Board of India and affected data principals as required under the DPDP Act, and take reasonable steps to contain and remediate the breach.

11. Grievance officer

If you have a grievance regarding how your personal data is processed, please contact our Grievance Officer. We will acknowledge and aim to resolve grievances within a reasonable timeframe as required under the DPDP Act.

12. Changes to this policy

We may update this policy periodically. Material changes will be notified to active clients via email or platform notice, and the "Last updated" date above will be revised.

13. Contact

For any privacy-related questions, contact us at contact@sendrcsmessages.com, call +91 86920 95412, or write to our registered office address above.