Deshana Enterprises Pvt. Ltd., operating SMS Dekho through its unit Deshana IT, with its registered office at Jaipur, Rajasthan, India (“SMS Dekho”, “we”, “us”, “our”), respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use, share and protect it, and the choices and rights you have.
This policy applies to smsdekho.com and its sub-pages (the “Website”), our dashboards and APIs, and all our messaging, voice, email and automation services (the “Services”). It is issued under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the rules made under it, to the extent each is in force and applicable.
By using the Website or Services, or by submitting your information to us, you agree to this Privacy Policy. If you do not agree, please do not use them.
1. Who is responsible for your data
We act in two different roles:
- As data fiduciary (controller) for personal data about our own website visitors, prospects, customers, and their authorised users, such as contact details, KYC and billing information, and usage data of our dashboard and Website.
- As data processor for personal data of message recipients (“End Recipients”) that our business customers upload or send through the Services, such as phone numbers, names, and message content. In this case, our customer decides why and how the data is used and is the data fiduciary. We process it only on the customer's instructions. If you are an End Recipient and have a question about a message you received, please contact the business that sent it. If you contact us, we will help route your request.
2. Information we collect
2.1 Information you give us
- Enquiry form (Contact page, WhatsApp click-to-chat): name, business name, work email, phone number, the service you are interested in, expected message volume, and any message you type. Before you can send the form you must tick a consent box allowing us to contact you by phone, SMS, WhatsApp and email about your enquiry. We keep a record of your consent (the wording you agreed to and when).
- Account and onboarding / KYC: business legal name, brand name, address, incorporation details, PAN, GSTIN, authorised signatory's name, designation, contact details and ID and address proof, DLT entity/header/template details, and Meta/Google business verification details.
- Billing: billing name and address, GST details, invoice history, and payment status. Card and bank details are entered on our payment gateway's page and are not stored by us.
- Support and communications: emails, chat and WhatsApp conversations, call recordings (where we tell you), and feedback you send us.
2.2 Information from your use of the Services
- Messaging data: recipient numbers and identifiers, sender IDs/headers, template IDs, campaign names, message content, timestamps, delivery/read status (DLRs), error codes, and opt-in/opt-out records.
- Account and API data: user IDs, roles, API keys (stored securely), IP addresses, whitelisted IPs, login and activity logs, and settings.
- Voice/IVR data: called and calling numbers, call duration and outcome, and, if enabled by the customer, call recordings.
2.3 Information collected automatically
- Device and log data: IP address, browser type and version, operating system, device type, referring/exit pages, pages viewed, time spent, clicks, and approximate location derived from IP.
- Cookies and similar technologies: described in our Cookies Policy.
2.4 Information from other sources
- Telecom operators, DLT platforms, Meta, Google and other providers (for example, delivery status, template approval and account quality signals).
- Public sources and business directories, and referrals from partners, where lawful.
- Our related group company Deshana IT, when you interact with both brands.
2.5 Sensitive data
We do not intentionally ask for sensitive personal data (such as health, biometric, financial account credentials or government ID numbers) except what is needed for KYC and legal compliance. Customers should not include such data in message content unless it is essential to their lawful use case and they have all consents required.
3. How we use your information
| Purpose | Examples |
|---|---|
| Provide the Services | Creating accounts, sending and routing messages and calls, generating delivery reports, supporting integrations |
| Onboarding and compliance | KYC checks, DLT and Meta/Google registration, checking Sender ID and template compliance |
| Communicate with you | Responding to enquiries, sending quotes and demos, service notices, security alerts, invoices |
| Billing and payments | Invoicing, payment processing, tax compliance, fraud prevention |
| Security and fraud prevention | Detecting spam, phishing, abuse, unauthorised access, and violations of our Terms |
| Improve the Website and Services | Analytics, debugging, performance monitoring, product development |
| Marketing | Product updates and offers, including a small number of emails after you contact us, where you consented or the law allows, with an easy opt-out in every email |
| Legal obligations | Responding to lawful requests from regulators, courts and law enforcement, retaining records required under telecom and tax laws |
4. Basis for processing and consent
We process personal data where you have given consent (for example when you tick the consent box and submit our contact form), where it is necessary to provide the Services you requested, to comply with a legal obligation, or for other legitimate uses permitted by law, such as security and fraud prevention. Where we rely on your consent, you can withdraw it at any time by contacting us, though this will not affect processing done before withdrawal and we may be unable to provide some Services.
5. How we share information
We do not sell your personal data. We share it only as described below, and only as needed:
- Telecom operators and network partners (SMS, voice, RCS carriers, aggregators, DLT platforms), to route and deliver messages and calls and meet regulatory requirements.
- Meta and Google, for WhatsApp Business API and RCS onboarding, template approvals, and message delivery.
- Service providers who work for us: cloud hosting and storage, email delivery, analytics, customer support and CRM tools, payment gateways, identity and KYC verification, and professional advisers such as auditors and lawyers. They are bound by confidentiality and data protection obligations.
- Group companies: Deshana IT and Deshana Enterprises Pvt. Ltd., for operating shared services and support.
- Legal and regulatory disclosure: where required by law, court order, or governmental or regulatory authority, or to protect our rights, property, safety or that of others, or to enforce our Terms.
- Business transfers: in connection with a merger, acquisition, restructuring or sale of assets, subject to continued protection of your data.
- With your consent or at your direction, for example when you connect a third-party CRM or app.
6. Cross-border transfers
Some of our service providers or partners (for example, Meta or global cloud and analytics tools) may process data outside India. Where we transfer personal data outside India, we do so in line with Applicable Law and use appropriate safeguards such as contractual protections. Our customers who need data to stay in India should tell us before onboarding so we can discuss available options.
7. Data retention
We keep personal data only for as long as needed for the purposes described in this policy or as required by law.
| Data | Typical retention |
|---|---|
| Website enquiry and lead data | 12 months from the date of the enquiry, then deleted automatically |
| Sign-up requests that were never confirmed | 7 days, then deleted automatically |
| Promotional email opt-outs | Kept (as a scrambled hash of the address only) so that you are not emailed again, until you ask us to remove it |
| Account, KYC and contract records | Duration of the relationship plus 8 years (tax and corporate law) |
| Message content | 90 days from sending, unless the customer chooses a different period or the law requires longer |
| Delivery reports, logs and consent/opt-out records | At least as long as the retention period required under TRAI/telecom regulations or by the customer's plan, and up to 12 months otherwise |
| Call recordings (if enabled) | 90 days or as set by the customer |
| Billing and invoices | 8 years |
After the retention period, we securely delete or anonymise the data. Data may be retained longer if needed for legal claims, investigations, audits, or where the law requires it.
8. Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls and role-based permissions, IP whitelisting options for API access, secure credential storage, network monitoring, and periodic reviews. Access to personal data is limited to personnel who need it and are bound by confidentiality. Details you submit through our contact form (name, email address, phone number and message) are stored in encrypted form, and the sign-in area for our team is protected with rate limiting and short-lived sessions.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected persons and the relevant authorities as required by Applicable Law. Please keep your passwords and API keys confidential and tell us at once if you suspect unauthorised access.
9. Your rights
Subject to Applicable Law, you may have the right to:
- Access a summary of the personal data we hold about you and how it is processed;
- Correction and updating of inaccurate or incomplete data;
- Erasure of personal data that is no longer necessary or for which consent was withdrawn (subject to legal retention requirements);
- Withdraw consent at any time;
- Grievance redressal through our Grievance Officer (see Section 15) and, if not resolved, through the Data Protection Board of India once it is operational;
- Nominate another person to exercise your rights in the event of death or incapacity.
To exercise these rights, email us at avinash@smsdekho.com from the email address linked to your account or enquiry. We may ask for information to verify your identity. We aim to respond within 30 days, or sooner if the law requires.
End Recipients: if your data was uploaded by one of our customers, please contact that business directly, since it decides how your data is used. You can also reply “STOP” (or as instructed in the message) to opt out, or register your preferences with your telecom provider's DND/preference service.
10. Marketing communications
We send marketing emails, WhatsApp or SMS messages only where you have opted in or where the law permits. Every marketing message will include a way to opt out, such as an unsubscribe link or reply keyword. Service-related notices (for example about security, billing or changes to our Terms) are not marketing and may still be sent.
10.1 Promotional emails after you contact us
When you contact us through a form on smsdekho.com (the contact form, or by creating an account), we may send you a small number of promotional emails about SMS Dekho's services and offers. These come from support@smsdekho.com, normally one or two messages in the weeks after your enquiry. We send them because you have shown interest in our services, and they are sent to the email address you gave us.
- Every promotional email contains an Unsubscribe link. Opening it and pressing the button stops promotional emails straight away. Most email apps also show their own one-tap “Unsubscribe” option, which works the same way.
- You can also write to support@smsdekho.com and we will opt you out.
- We keep a record of your opt-out so that you are not emailed again. For this we store only a one-way scrambled version (a keyed hash) of your email address, not the address itself, and we keep it even after your enquiry has been deleted, because forgetting it would mean emailing you again.
- Opting out of promotional emails does not stop messages about your own enquiry or account, such as the reply to your question or a confirmation of your sign-up.
10.2 Confirmation codes when you create an account
When you create an account on our website, we email a one-time 6-digit code from noreply@smsdekho.com to confirm that the email address is yours. The code works for 10 minutes and is stored only in scrambled form. A sign-up that is never confirmed is deleted after 7 days. After you confirm, we send you a thank-you message from support@smsdekho.com, and our team will contact you about your account.
11. Children
The Website and Services are meant for businesses and are not directed to anyone under 18. We do not knowingly collect personal data of children. If you believe a child has provided us data, contact us and we will delete it. Customers must not use the Services to target children, or track or monitor them, in violation of Applicable Law.
12. Cookies and tracking
We use cookies and similar technologies for essential site operation, analytics and, where applicable, marketing. Please see our Cookies Policy for details and your choices.
13. Third-party websites and services
The Website may link to third-party sites, or embed tools such as WhatsApp click-to-chat, maps, video or social media widgets. Those third parties have their own privacy practices and we are not responsible for them. Please read their policies before sharing data.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. For material changes we will give notice through the Website, email or your Account. Please review this page regularly.
15. Grievance officer and contact
If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal data, please contact:
Grievance Officer / Data Protection Contact: Avinaash Upadhyay
Email: avinash@smsdekho.com
Postal address: SMS Dekho (a unit of Deshana Enterprises Pvt. Ltd.), Jaipur, Rajasthan, India
Phone: +91 92528 88777
General enquiries: sales@smsdekho.com
We will acknowledge complaints within 48 hours and aim to resolve them within one month of receipt.
SMS Dekho is an initiative by Deshana IT - A unit of Deshana Enterprises Pvt. Ltd.