Privacy policy

Oykey Technologies (“we”, “us”) provides a software platform that lets businesses (“customers”) send and receive WhatsApp messages through Meta’s WhatsApp Business Platform. This policy explains what personal data we handle and why.

Two kinds of data

• Account data about people who use our dashboard: name, email, password (stored only as a secure hash), workspace and role, sign-in and activity records, and billing details for wallet top-ups. We are the controller of this data.
• Customer content: the WhatsApp contacts, messages, media, templates, tags, notes and custom fields our customers manage with the platform. We process it only on our customers’ instructions to provide the service; each customer is responsible for having a lawful basis and the consent needed to message its contacts.

How we use data

• To provide the service: deliver messages through Meta’s WhatsApp Business Platform, run automations and broadcasts, show analytics, and send account emails and alerts.
• To bill: charge the prepaid wallet for Meta conversation fees and optional AI features, and process payments through our payment provider.
• To keep the service secure and reliable: authentication, fraud and abuse prevention, troubleshooting and audit logs.

We do not sell personal data and do not use customer content for advertising.

Who we share data with

• Meta Platforms (WhatsApp Business Platform), which carries the messages.
• Hosting, email and payment providers that run the service for us under confidentiality obligations.
• An AI model provider, only when a customer turns on AI replies or suggestions, and only for the conversation being answered.
• Authorities, when the law requires it.

Facebook / Meta data

When a customer connects a WhatsApp Business Account or a Facebook ad account, we receive access tokens and the IDs of the assets they grant (business account, phone numbers, templates, ad insights). We use them only to provide the features the customer turned on, store tokens encrypted, and delete them when the customer disconnects or deletes the workspace.

Retention and deletion

We keep data while the workspace is active. When a customer deletes its workspace or asks us to, we delete its data within 30 days, except where the law requires us to keep billing records. See our data deletion instructions.

Security

Data travels over HTTPS, access tokens and secrets are encrypted at rest, passwords are hashed, and every workspace is isolated from the others.

Your rights

You can ask to see, correct or delete your personal data. If you are a contact of one of our customers, please contact that business first; we will help them respond. Write to info@oykey.in.

Contact

Oykey Technologies, C-203, Noida Sector 63, UP-201301. Email: info@oykey.in.