Privacy Policy

IQTEC Private Limited ("IQTEC", "we", "us", or "our") provides technology and business services including software development, SaaS platforms, APIs, automation, SMS services, WhatsApp Business messaging solutions, payment gateway integrations, technology consulting and related digital services.

This Privacy Policy explains how IQTEC collects, uses, stores, processes, shares and protects information when you visit our website, use our software, applications, APIs, SMS services, WhatsApp services, payment-related services, or otherwise interact with us.

Our website is available at https://iqtec.in.

This Policy applies to information processed in connection with:

• IQTEC websites and web portals
• Software, SaaS and enterprise applications
• Mobile and web applications developed or operated by IQTEC
• SMS notification and communication services
• WhatsApp Business and WhatsApp Business Platform services
• API and webhook integrations
• Payment gateway and payment-related integrations
• Customer support and technical support
• Business onboarding and account management
• Technology consulting and implementation services

3.1 Business and Account Information

• Business/company name
• Contact person's name
• Email address
• Mobile/telephone number
• Business address
• Website/domain
• Account and authentication information
• Business registration and verification information where required
• Information provided during onboarding, support or service requests

3.2 Customer and End-User Information

Where IQTEC provides services on behalf of a business customer, that business may provide or cause IQTEC to process information relating to its customers, users, employees, agents or other contacts. This may include:

• Name
• Mobile number
• Email address
• Address and location information where supplied by the business
• Customer/account/reference identifiers
• Communication preferences
• Transaction or service information
• Messages and communications

3.3 Technical Information

• IP address
• Browser and device information
• Operating system
• Application version
• Access date and time
• Server and application logs
• Error and diagnostic information
• API request metadata
• Security and authentication logs

IQTEC may provide SMS communication services to businesses for purposes such as transactional notifications, authentication, OTP delivery, service alerts, customer communication and other permitted business communications.

4.1 SMS Information

For SMS services, IQTEC may process:

• Recipient mobile number
• Sender ID or approved sender information
• SMS message content
• OTP or verification information where applicable
• Message submission and delivery status
• Timestamp and technical delivery metadata

4.2 SMS Consent and Compliance

Businesses using IQTEC SMS services are responsible for ensuring that their SMS communications comply with applicable laws, regulations, telecom requirements, consent requirements, sender registration requirements and applicable industry rules.

IQTEC does not intentionally use customer mobile numbers obtained through a business customer for unrelated marketing purposes.

4.3 OTP Messages

Where IQTEC provides OTP services, OTP values may be processed for the purpose of authentication or verification. Users should never disclose an OTP to an unauthorized person.

IQTEC may provide WhatsApp Business Platform integration, automation, messaging, customer engagement and WhatsApp Business onboarding services.

5.1 WhatsApp Business Account Information

Where a business connects its WhatsApp Business Account to IQTEC, we may process information such as:

• WhatsApp Business Account (WABA) identifiers
• Phone Number ID and business phone number
• Business profile information
• Messaging configuration
• Message templates and template status
• Webhook events
• Message delivery and status information
• Other information authorized by the business through Meta's platform

5.2 Embedded Signup

IQTEC may use Meta's Embedded Signup functionality to allow businesses to connect or onboard their WhatsApp Business assets to IQTEC. Information made available through this process is processed only to provide the requested services and according to the permissions and authorization granted by the business.

5.3 WhatsApp Messaging

Authorized IQTEC customers may use our systems to send and receive WhatsApp messages on their behalf. The business customer is responsible for the content of its messages, its customer relationships and obtaining any consent required for its communications.

5.4 Meta and WhatsApp

Meta and WhatsApp are independent third-party services. Their processing of information is governed by their own terms and privacy policies. IQTEC does not control independent processing performed by Meta or WhatsApp.

IQTEC does not sell WhatsApp Business Account information or customer message data.

IQTEC develops and provides software, SaaS platforms, web applications, APIs, automation systems and technology solutions for businesses.

Depending on the service, IQTEC may process information required to:

• Create and administer user accounts
• Authenticate users
• Provide application functionality
• Process business transactions and workflows
• Integrate third-party systems
• Provide APIs and webhooks
• Provide reporting and operational dashboards
• Provide technical and customer support
• Monitor application performance and security

6.1 Customer Data in Business Software

When IQTEC operates software on behalf of a business, the business may control the data entered into the software. IQTEC processes such information to provide the contracted services and according to the applicable agreement.

IQTEC may provide APIs and webhook integrations for communication between systems.

API-related information may include:

• API credentials and authentication identifiers
• Request and response metadata
• Business identifiers
• Transaction/reference identifiers
• Webhook events
• Technical logs required for troubleshooting and security

API credentials, access tokens, secrets and passwords should be treated as confidential and must not be shared publicly.

IQTEC may integrate with third-party payment gateways and payment service providers to enable businesses or their customers to make or receive payments.

8.1 Payment Information

Depending on the integration, IQTEC may process payment-related information such as:

• Customer name
• Mobile number
• Email address
• Order ID or transaction ID
• Payment amount and currency
• Payment status
• Payment method type
• Gateway reference number
• Refund or settlement status
• Fraud and risk-related metadata supplied by the payment provider

8.2 Card and Banking Information

Where payment information is entered directly into a third-party payment gateway, IQTEC generally does not receive or store complete card numbers, CVV/CVC values, PINs, internet banking passwords or other authentication secrets unless explicitly required by a specific service and lawfully configured.

Payment information may be processed directly by the applicable payment gateway or financial service provider under its own terms and privacy policy.

8.3 Payment Providers

IQTEC may integrate with payment service providers such as banks, payment gateways, payment aggregators or other regulated financial technology providers. The applicable provider's terms and privacy policy may also apply.

8.4 Payment Security

IQTEC uses reasonable technical safeguards for payment-related information handled by our systems. Payment authentication and card processing may be performed by the relevant payment provider using its own security controls.

• Information submitted directly through IQTEC websites and applications.
• Information submitted during account registration and onboarding.
• Information supplied by our business customers.
• Information received through APIs and webhooks.
• Information received through authorized Meta/WhatsApp integrations.
• Information received from payment gateways and service providers.
• Information automatically generated through website and application usage.
• Information provided during customer support interactions.

IQTEC may use information to:

• Provide software, SaaS and technology services.
• Provide SMS and WhatsApp messaging services.
• Provide payment gateway integration and transaction functionality.
• Authenticate users and secure accounts.
• Process API requests and webhook events.
• Send transactional notifications and permitted communications.
• Provide customer and technical support.
• Monitor and improve system reliability and performance.
• Detect and prevent fraud, abuse and security incidents.
• Comply with applicable legal and regulatory requirements.
• Maintain business, accounting, audit and operational records.
• Resolve disputes and enforce agreements.

IQTEC may share information where reasonably necessary to provide services, operate our business or comply with law.

11.1 Technology and Service Providers

We may use cloud hosting, infrastructure, database, monitoring, security, email, SMS, WhatsApp, payment, analytics, support and other technology providers.

11.2 Meta and WhatsApp

Information may be exchanged with Meta/WhatsApp when a business authorizes WhatsApp Business services.

11.3 Payment Providers

Payment-related information may be shared with the payment gateway or financial service provider selected or configured for a transaction.

11.4 Legal Requirements

We may disclose information when required or permitted by applicable law, regulation, court order, lawful governmental request, or when reasonably necessary to protect rights, security or property.

11.5 Business Transactions

Information may be transferred as part of a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, subject to applicable law.

IQTEC does not sell personal information to third parties.

IQTEC retains information for as long as reasonably necessary to provide services, maintain operational and transaction records, provide support, maintain security, resolve disputes and meet applicable legal, regulatory, accounting or contractual requirements.

When information is no longer required, we may delete, anonymize or securely dispose of it, subject to legal, backup and legitimate business requirements.

IQTEC uses reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, misuse or destruction.

Depending on the service, safeguards may include:

• Encryption in transit
• Authentication and authorization controls
• Role-based access controls
• Secure credential and secret management
• Logging and monitoring
• Network and infrastructure controls
• Backup and recovery procedures
• Access limitation based on business requirements

No electronic system or transmission method can be guaranteed to be completely secure.

IQTEC websites and applications may use cookies, local storage, session technologies and similar mechanisms for authentication, session management, security, preferences, analytics and service improvement.

You may configure your browser to restrict cookies. Certain functionality may not work correctly if required cookies are disabled.

Depending on applicable law, individuals may have rights relating to their personal information, including:

• Requesting access to personal information.
• Requesting correction of inaccurate information.
• Requesting deletion where legally applicable.
• Withdrawing consent where processing is based on consent.
• Objecting to or requesting restriction of certain processing.
• Requesting information about applicable processing activities.

We may verify the identity and authority of a person making a request before processing it. Some information may be retained where required by law or for legitimate security, contractual or legal purposes.

Businesses using IQTEC services are responsible for their own collection and use of customer information and should:

• Provide appropriate privacy notices to their customers.
• Obtain required consent or establish another lawful basis where applicable.
• Use customer information lawfully.
• Use SMS and WhatsApp messaging in compliance with applicable requirements.
• Comply with applicable telecom, communications and consumer-protection rules.
• Comply with applicable Meta/WhatsApp requirements.
• Use payment services in accordance with applicable payment-provider terms.
• Respond to customer privacy requests where they are responsible for doing so.

IQTEC services may integrate with or link to third-party services, including Meta/WhatsApp, SMS providers, payment gateways, banks, cloud providers and other technology platforms.

Third-party services operate under their own terms and privacy policies. IQTEC does not control the independent privacy practices of third parties.

IQTEC's services are primarily intended for businesses and their authorized users and are not directed to children. We do not knowingly seek to collect personal information directly from children for the purpose of providing our business services.

Depending on our infrastructure and service providers, information may be processed or stored in countries other than the country where it was collected. Where required by applicable law, IQTEC will take appropriate measures for cross-border processing and transfers.

You may request deletion of personal information associated with your IQTEC account or services by contacting us using the contact information below.

Please identify the relevant account, business or service and provide sufficient information for us to verify the request.

We may retain information where required for legal compliance, accounting, security, fraud prevention, dispute resolution, contractual obligations, backup systems or other legitimate purposes.

IQTEC may update this Privacy Policy from time to time to reflect changes to our services, technology, security practices, legal requirements or privacy practices.

The updated version will be published on this page with a revised "Last Updated" date.

This Privacy Policy is a general privacy notice for IQTEC's technology, software, SMS, WhatsApp, API and payment-related services. Individual enterprise agreements, data-processing agreements, product terms, customer contracts and applicable laws may contain additional requirements or rights.

Where a separate agreement applies to specific processing activities, that agreement may govern the relevant processing to the extent permitted by law.