Privacy Policy
NoLeak · Last updated 4 October 2026
This Privacy Policy explains how NOLEAK (proprietorship of Bejjipuram Venkatesh, Udyam Registration No. UDYAM-TS-02-0380368) ("NoLeak", "we", "us"), 7-1-162/154/1, Bapu Nagar, Sanjeeva Reddy Nagar, Ameerpet, Hyderabad 500038, Telangana, India, collects, uses and protects information in connection with the NoLeak application (the "App"), a WhatsApp Business Platform application and web dashboard used to send and receive WhatsApp messages on behalf of businesses that use our service ("Customers").
1. Information we collect
- Account information of Customers and their team members: name, email address, login credentials (stored as salted hashes), and role.
- WhatsApp Business assets that a Customer connects through Meta's Embedded Signup / Facebook Login for Business: WhatsApp Business Account (WABA) ID, phone number ID, display name, and an access token that allows the App to act on the Customer's behalf. We do not receive the Customer's Facebook password.
- Contact data that Customers upload or that is created when a person messages the Customer's WhatsApp number: phone number, name, tags, and opt-in status.
- Message data exchanged between the Customer and their contacts through WhatsApp: message text, media (images, video, audio, documents), timestamps and delivery status, as delivered to us by Meta's webhooks.
- Technical data: server logs, IP address, browser type, and usage events needed to operate and secure the service.
2. How we use information
- To provide the service: sending template and session messages, receiving replies, showing a shared inbox, scheduling campaigns, and reporting delivery statistics.
- To secure the service, prevent abuse, and comply with Meta's WhatsApp Business Messaging Policy and Platform Terms.
- To support Customers and respond to their requests.
We do not sell personal data, use message content for advertising, or use data obtained through Meta's platform for any purpose other than providing the service to the Customer who connected the account.
3. Legal basis and consent
Customers are responsible for obtaining valid opt-in consent from their contacts before sending marketing messages, in line with WhatsApp's policies and applicable law. Every marketing template sent through the App includes a way to opt out (for example, replying STOP), and opted-out contacts are excluded from future campaigns.
4. Sharing of information
- Meta Platforms, Inc. — messages are transmitted via the WhatsApp Business Platform (Cloud API). Meta's handling of that data is governed by its own terms and privacy policies.
- Infrastructure providers — we host data with Supabase (database and file storage) and Vercel (application hosting), under data-processing agreements.
- Legal requirements — when required by law, regulation or a valid legal process.
We do not share one Customer's data with another Customer.
5. Data retention
Account, contact and message data are retained for as long as the Customer's account is active. Media files received through WhatsApp are stored so that they remain viewable in the inbox. When a Customer disconnects their WhatsApp account or deletes their account, the related access token is deleted immediately and the remaining data is deleted within 30 days, except where retention is required by law.
6. Security
Data is encrypted in transit (TLS) and at rest. Access tokens are stored server-side only and are never exposed to the browser. Access to the database is restricted with row-level security so that each Customer can only access their own data. Access by our staff is limited to what is necessary to operate and support the service.
7. Your rights
Customers can view, export, correct or delete their contacts and messages from the dashboard at any time. Individuals who have interacted with a Customer's WhatsApp number may contact that Customer, or us, to request access to or deletion of their data. See Data deletion instructions.
8. Children
The service is intended for businesses and is not directed at children under 18.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top indicates the latest revision. Material changes will be communicated to Customers by email or in the dashboard.
10. Contact
NOLEAK (Proprietor: Bejjipuram Venkatesh)
7-1-162/154/1, Bapu Nagar, Sanjeeva Reddy Nagar, Ameerpet, Hyderabad 500038, Telangana, India
Udyam Registration No. UDYAM-TS-02-0380368
Email: venkyb466@gmail.com
Website: noleak-eosin.vercel.app