Privacy Policy

Last Updated: August 26, 2026

1. Introduction

Supermessage is WhatsApp marketing software that helps businesses manage WhatsApp message templates, import contacts, send WhatsApp campaigns, manage customer conversations, and view messaging reports and dashboards.

This Privacy Policy explains how Supermessage collects, uses, processes, shares, stores, and protects personal information when you visit our website, create or use a Supermessage account, use our services, or communicate with us.

It also explains how we process information about customers, leads, and other contacts that businesses upload to or communicate with through Supermessage.

Supermessage is intended for business and professional use.

This Privacy Policy should be read together with our Terms of Service, where applicable.

2. Who We Are

Supermessage is operated by Geeklabs Software Private Limited, an Indian company.

Website: supermessage.ai
Email: support@supermessage.ai

References in this Privacy Policy to “Supermessage,” “we,” “us,” or “our” mean Geeklabs Software Private Limited.

Supermessage is an independent software company. We are not WhatsApp, Meta Platforms, Inc., or the operator of the WhatsApp Business Platform.

Our Service connects with and relies on services provided by Meta Platforms, Inc., WhatsApp Ireland Limited, and their respective affiliates. References to WhatsApp, Meta, and related products or trademarks are made solely to describe the services with which Supermessage works and do not imply sponsorship, endorsement, partnership, or ownership by Meta Platforms, Inc., WhatsApp Ireland Limited, or their respective affiliates.

WhatsApp, Meta, and other third-party trademarks remain the property of their respective owners.

3. Information We Collect and Process

The information we collect and process depends on how you interact with Supermessage and which features you use.

3.1 Account Information

When you create a Supermessage account, we may collect:

your full name;
business or company name;
email address;
phone number;
account credentials or authentication information; and
account preferences and settings.

Supermessage uses email address and password-based login.

3.2 Billing and Payment Information

When you purchase a Supermessage subscription, we may process information required to manage your subscription, invoices, transactions, and payment status.

Payments are processed through Razorpay.

Razorpay handles payment credentials such as card, UPI, or other payment-instrument information in accordance with its own terms and privacy practices. Supermessage does not receive or store your complete card or UPI credentials.

We may receive payment-related information such as transaction identifiers, payment status, subscription information, and billing or invoice details.

3.3 Imported Contact Data

Supermessage allows business customers to import contacts using CSV or Excel files.

For the current version of the Service, imported contact information may include:

contact name; and
mobile or WhatsApp number.

Our customers decide which contacts they upload to Supermessage and are responsible for ensuring that they have the necessary rights and permissions to collect, upload, use, and communicate with those contacts.

3.4 WhatsApp Business and Template Data

When you connect or use WhatsApp-related functionality through Supermessage, we may process information necessary to provide that functionality and interact with the WhatsApp Business Platform.

This may include information relating to your connected WhatsApp Business account, business phone number, WhatsApp message templates, template usage records, template approval or status information, and related platform information made available through Meta or WhatsApp.

Supermessage processes this information as necessary to provide and operate the relevant WhatsApp functionality.

3.5 Campaign and Message Data

When you send WhatsApp campaigns through Supermessage, we may process and retain information relating to those campaigns, including:

campaign recipients;
the campaign or template used;
sending activity and timestamps;
template usage records;
message delivery metadata; and
related reporting information made available through the WhatsApp Business Platform.

Message-delivery information may include statuses such as sent, delivered, read, or failed, where such information is made available through the WhatsApp Business Platform.

Supermessage may retain campaign history so that customers can review their messaging activity and reports.

3.6 Conversation and Media Data

Supermessage allows business customers to receive WhatsApp messages from their contacts and reply to those messages through the Service.

To provide this functionality, Supermessage may process and retain:

incoming WhatsApp messages;
outgoing replies;
conversation history;
sender and recipient information;
message timestamps;
message delivery information; and
media or attachments sent or received through conversations, including images, documents, PDFs, audio, or video.

This information is processed so that the relevant business customer can view previous conversations, respond to contacts, and manage customer communications through Supermessage.

A business customer may permit multiple authorised team members to access its Supermessage account. Those users may therefore be able to access contact information, conversations, campaign information, and other information available within that business account.

The business customer is responsible for deciding which members of its team are authorised to access its Supermessage account.

3.7 Communications With Supermessage

If you contact us for sales, customer support, feedback, or another enquiry, we may process information such as your name, email address, phone number, the content of your communication, and information or files you choose to provide to us.

3.8 Technical and Usage Information

When you use our website or Service, we may process technical and usage information generated through your interaction with Supermessage.

This may include information such as browser or device information, IP address, timestamps, pages or features used, interaction events, login or session information, and diagnostic or security information.

We may use analytics services, including Google Analytics and Posthog, to understand how our website and Service are used and to help us improve usability, reliability, and performance.

The information processed by analytics providers depends on how those services are configured and may include device and browser information, pages or features used, interaction events, timestamps, and similar usage information.

If we materially change the analytics or tracking technologies used by Supermessage, we may update this Privacy Policy accordingly.

4. End-Customer Data and Our Customers’ Responsibilities

Supermessage provides software to businesses.

Our business customers determine:

which contacts they upload to Supermessage;
who they communicate with;
why they communicate with those individuals;
what messages and templates they use; and
which members of their organisation may access their Supermessage account.

Supermessage processes contact, campaign, conversation, and other customer-provided information as necessary to provide the Service to the relevant business customer.

Our customers are responsible for ensuring that their collection and use of personal information through Supermessage complies with applicable law and applicable WhatsApp requirements.

This includes responsibility for obtaining any consent, permission, or WhatsApp opt-in required before sending marketing or other communications.

Supermessage does not sell, rent, or trade personal information or Customer Data to advertisers or data brokers.

If you receive a WhatsApp communication from a business using Supermessage and wish to stop receiving communications, correct your information, or exercise rights concerning information controlled by that business, you should generally contact the business that sent you the communication.

Supermessage may assist its business customers with such requests where appropriate.

5. How We Use Information

We may use information processed through Supermessage to:

create and administer accounts;
provide, maintain, and operate the Supermessage Service;
connect customers with the WhatsApp Business Platform;
manage WhatsApp message templates and related information;
import and manage customer contacts;
send campaigns and messages requested by customers;
receive and display incoming WhatsApp conversations;
enable customers and their authorised team members to reply to contacts;
provide campaign and messaging reports and dashboards;
process subscriptions and payments;
provide customer support;
secure accounts and help prevent fraud, misuse, or unauthorised access;
diagnose technical issues and improve the reliability and performance of the Service;
understand how our website and Service are used;
communicate important account, billing, product, or security information; and
comply with applicable law, legal process, and regulatory requirements.

We do not use Customer Data for purposes unrelated to providing, maintaining, securing, or supporting the Service except where otherwise disclosed or permitted by applicable law.

We may share or make information available where reasonably necessary for the purposes described in this Privacy Policy.

6.1 Service Providers

We may use third-party service providers that help us host, operate, maintain, secure, analyse, communicate about, or support Supermessage.

These service providers may process information on our behalf to the extent reasonably necessary to provide their services to us.

6.2 Meta and WhatsApp

Information necessary to provide WhatsApp functionality is exchanged with Meta Platforms, Inc., WhatsApp LLC, and their affiliates through the WhatsApp Business Platform.

Meta and WhatsApp process information in accordance with their own applicable terms, policies, and platform rules.

6.3 Razorpay

Information necessary to process Supermessage subscription payments may be shared with or processed by Razorpay.

6.4 Legal Requirements

We may disclose information where reasonably necessary to comply with applicable law, a valid court order, government or regulatory request, or other lawful legal process.

We may also disclose information where necessary to protect the rights, safety, security, or property of Supermessage, our customers, or others, or to investigate fraud, abuse, or unlawful activity.

6.5 Business Transfers

If Geeklabs Software Private Limited is involved in a merger, acquisition, financing, restructuring, or sale of some or all of its business or assets, information may be transferred as part of that transaction, subject to applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or processed.

Retention may depend on factors including:

whether the Supermessage account remains active;
whether information is required to provide the Service;
applicable legal, tax, or accounting requirements;
security and fraud-prevention requirements;
dispute resolution; and
enforcement of contractual rights.

Customer contacts, campaign information, and conversation history may remain available while the relevant customer account is active so that the customer can use the features of the Service.

When an account is terminated or information is deleted, some information may remain for a limited period in backups, logs, or records where necessary for security, legal, accounting, or other legitimate business requirements.

Where information is no longer reasonably required, we may delete or anonymise it in accordance with our applicable retention practices.

8. Data Security

We maintain reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, use, alteration, disclosure, loss, or destruction.

Our security practices may evolve as the Service develops.

No website, internet transmission, cloud service, or electronic storage system can be guaranteed to be completely secure.

If you believe that your Supermessage account or information may have been compromised, please contact us at support@supermessage.ai.

9. Cookies and Analytics Technologies

Supermessage may use cookies and similar technologies where necessary to operate features such as login sessions, security, account functionality, and user preferences.

We may also use analytics technologies, including Google Analytics and Posthog, to understand how our website and Service are used and to improve their performance and usability.

You may be able to control certain cookies through your browser settings. Disabling cookies necessary to operate the Service may affect its functionality.

If we introduce additional advertising, analytics, or tracking technologies that materially affect how personal information is processed, we may update this Privacy Policy and provide any controls required by applicable law.

10. Privacy Rights and Choices

Depending on applicable law and the context in which Supermessage processes your information, you may have rights relating to your personal information.

These may include rights to request access to or information about your personal information, request correction or deletion where applicable, withdraw consent where processing depends on consent, or raise a grievance concerning the handling of personal information.

To submit a privacy-related request, contact support@supermessage.ai.

We may need to verify your identity or authority before acting on a request.

Where Supermessage processes information on behalf of one of our business customers, that customer may be responsible for responding to the request. In such circumstances, we may ask you to contact the relevant business or assist that business where appropriate.

11. Data Deletion Requests

You may request deletion of personal information relating to your Supermessage account by contacting:

support@supermessage.ai

We may need to verify your identity or authority before acting on the request.

Where applicable, we will delete or anonymise information that is no longer necessary to provide the Service, subject to information that must reasonably be retained for legal, accounting, security, fraud-prevention, dispute-resolution, or other lawful purposes.

If Supermessage processes information about you on behalf of one of our business customers, requests concerning that information should generally be directed first to the relevant business.

12. Marketing Communications and Opt-Outs

If Supermessage sends you its own marketing or promotional communications, you may opt out using the unsubscribe or other opt-out mechanism provided in the communication or by contacting us at support@supermessage.ai.

This is separate from WhatsApp messages sent by businesses using Supermessage.

Businesses using Supermessage are responsible for managing the consent, permissions, and opt-out requests of their own contacts.

13. Children’s Privacy

Supermessage is a business service.

Supermessage accounts are intended for users who are 18 years of age or older.

We do not knowingly permit individuals under the age of 18 to create or administer Supermessage accounts.

14. Legal Requests

We may disclose information where required by applicable law or valid legal process.

Where reasonably possible and legally permitted, we will seek to limit disclosure to information relevant to the lawful request.

15. International Processing

Supermessage may be used by businesses in India and other countries.

Supermessage and service providers supporting the Service may process information in countries other than the country in which a customer or individual is located.

Where personal information is processed or transferred internationally, we will handle such processing in accordance with applicable legal requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in Supermessage, our practices, or applicable legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where a change is material and applicable law requires additional notice, we will provide notice through an appropriate channel.

17. Applicable Law

Supermessage is operated by an Indian company and handles personal information in accordance with applicable Indian privacy and information-technology laws.

This includes applicable requirements under the Information Technology Act, 2000, rules made under that Act, and the Digital Personal Data Protection Act, 2023 and applicable rules to the extent the relevant provisions are in force and apply to Supermessage.

We may update this Privacy Policy as applicable legal requirements change or additional provisions become effective.

18. Contact and Grievance Redressal

If you have questions, requests, complaints, or concerns regarding this Privacy Policy or the handling of personal information, please contact:

Geeklabs Software Private Limited
Operating as Supermessage