Privacy Policy

Last updated: July 4, 2026

What This Policy Covers

This explains what data MDMist collects from you, how we use it, and what rights you have. By using MDMist, you accept this policy.

1. What Data Do We Collect?

Your account: name, email, phone, company name, job title.

How you use us: which features you click, when you log in, what device/browser you use.

Your business data: the WhatsApp messages between you and your customers, customer phone numbers and names, campaign templates you create.

Payments: which plan you bought, when payments succeeded or failed (actual card numbers are kept by our payment processor, not by us).

2. How We Keep It Safe

• All data traveling to/from us uses encryption (HTTPS — the lock icon in your browser).
• Data sitting on our servers is encrypted.
• Our staff cannot see inside your account or read your customer messages — not even for support. If you need help, you show our support person your screen via screen-share; they never touch your account themselves.
• Any time a government authority demands access to your data, we log who, when, what they asked for, and we tell you (unless legally forbidden).

3. What Do We Use Your Data For?

We use it for:

• Running the platform (sending messages, storing contacts, etc.)
• Fixing bugs and improving the system
• Preventing fraud and security breaches
• Answering your support questions (only when you call us)
• Sending you emails about your account (invoices, alerts)
• Following the law

We do NOT:

• Sell your data or your customer's data to anyone
• Train AI models on your message content (unless you explicitly opt-in separately, and you haven't)
• Show your customers to other businesses
• Use your data for marketing to your customers

4. Who Else Can See Your Data?

Our hosting provider (Amazon AWS) and payment processor (Razorpay / Stripe) can see some data, but only what's needed for them to do their job. They're bound by their own privacy policies.

We do NOT share your data with any third party (marketer, consultant, etc.) without asking you first.

5. What Happens If You Stop Paying?

Your account pauses, not closes. You keep read access (see your history, contacts, old campaigns, analytics). What's blocked is sending new messages or launching new campaigns.

You can:

• Renew your subscription anytime to unlock sending again.
• Reach out to support and ask for a free extension (we may grant it depending on circumstances).

No data is deleted while paused. Everything stays in your account.

6. What Happens If You Close Your Account?

You can close your account anytime from Settings. Here's the timeline:

Day	What Happens
0	Account closes. Confirmation email sent with the deletion date (Day 30).
0–7	You can reactivate with a link in that email. Everything goes back to normal.
23	Reminder email: "7 days left before deletion."
30	Automatic deletion: all your messages, contacts, campaigns are permanently gone. Cannot be undone.

After deletion, we keep:

• Invoices and payment history (required by Indian tax law, kept 7 years)
• An internal record that deletion happened (the date, the count of records deleted, not the content itself) — this proves compliance if asked

How deletion works: An automated job runs once daily. It permanently removes rows from our database — not recoverable.

7. How Long Do We Keep Backups?

We take daily backups of our entire system (standard business practice for security). Backups are kept for 14 days, then automatically deleted. A backup taken before you close your account may still contain your old data for up to 14 days after closure, but then the backup itself expires and is gone.

8. What Are Your Rights?

At any time, you can:

• Request account deletion — email us anytime to close your account. Permanent deletion happens automatically on day 30.

9. Changes to This Policy

If we change how we collect or use data, we will:

• Update this page and set a new "Last updated" date
• Email you about material changes
• Ask for your agreement if the law requires it (for example, if we start training AI on your data, you get to opt-in or out)

Small updates (typo fixes, clarifications) we just do.

10. Questions?

Email us at hq@mdmist.in. We'll answer in 2 business days.