Privacy Policy
1. Introduction
Evenza Send ("we", "us", "our") is a WhatsApp Business API, SMS, and Email campaign management platform operated by Evenza (evenza.net). This Privacy Policy explains how we collect, use, store, and protect your information when you use our services at send.evenza.net.
By using Evenza Send, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
- Name, email address, phone number (provided during signup)
- Business name and billing information
- Password (stored as a secure hash — never in plaintext)
2.2 Contact Data
- Phone numbers, names, and other attributes of your customers/contacts that you upload or import
- Opt-in/opt-out status for each contact
2.3 Campaign & Message Data
- Campaign names, templates used, send times
- Message delivery status (sent, delivered, read, failed)
- Usage records (number of messages sent per channel per billing period)
2.4 Technical Data
- IP address, browser type, device information
- Session tokens and authentication data
- API keys (stored as cryptographic hashes — original keys are never recoverable)
2.5 Payment Information
- Plan selection and billing cycle
- Payment reference numbers and proof images (for manual payment verification)
- We do not store full credit card numbers — card payments are processed by third-party payment gateways (Stripe, Safepay, etc.)
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Evenza Send platform | Contract performance |
| Sending OTP codes for authentication | Legitimate interest / Contract |
| Processing campaign sends via WhatsApp, SMS, Email | Contract performance |
| Billing and subscription management | Contract / Legal obligation |
| Fraud prevention and security | Legitimate interest |
| Platform improvements and analytics | Legitimate interest |
| Communicating service updates | Legitimate interest |
We do not sell your data to third parties. We do not use your contact lists for our own marketing purposes.
4. Data Sharing
We share your data only with:
4.1 Meta (WhatsApp)
Messages sent via WhatsApp are processed through Meta's WhatsApp Business API. Meta's own Privacy Policy applies to message delivery. We act as a Business Solution Provider (BSP) on Meta's platform.
4.2 SMS Gateway Providers
SMS messages are routed through licensed SMS gateway providers. Your recipients' phone numbers are shared with these providers solely for message delivery.
4.3 Email Service Providers
Transactional emails are delivered via SMTP providers. Recipient email addresses are shared solely for delivery purposes.
4.4 Payment Processors
Payment information is shared with payment gateways as selected during checkout. We receive only transaction confirmation, not full card details.
4.5 Infrastructure Providers
We use cloud hosting services for our infrastructure. Your data is stored on secure servers with appropriate data processing agreements in place.
4.6 Legal Requirements
We may disclose information if required by law, court order, or government authority in Pakistan or any applicable jurisdiction.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion |
| Contact lists | Until you delete them or close your account |
| Message logs | 12 months |
| Payment records | 7 years (legal/tax requirement) |
| Authentication logs | 90 days |
6. Your Rights
You have the right to:
- Access your personal data we hold
- Correct inaccurate data
- Delete your account and associated data
- Export your contact lists
- Opt out of non-essential communications
To exercise these rights, contact us at: support@evenza.net
7. Security
We implement the following security measures:
- All data in transit is encrypted via TLS/HTTPS
- Passwords and API keys are stored as cryptographic hashes (bcrypt)
- Sensitive credentials are encrypted at rest using AES-256
- Row-Level Security (RLS) enforced at the database level
- Regular security reviews and updates
8. Cookies & Tracking
We use minimal, essential cookies only:
- Session cookies: to keep you logged in
- CSRF tokens: for security
We do not use third-party advertising or tracking cookies.
9. Children's Privacy
Evenza Send is a business tool intended for users 18 years and older. We do not knowingly collect data from minors.
10. International Data Transfers
If you are located outside Pakistan, your data may be processed on servers in different countries. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We will notify you of material changes via email and by updating the "Last Updated" date above. Continued use after notification constitutes acceptance.