Privacy Policy

WeNotify ("WeNotify", "we", "us") provides a multi-tenant SaaS platform for SMS and Email marketing and customer communication. This Privacy Policy explains what information we collect, how we use it, and the choices you have — for both the companies ("Customers") that use WeNotify and the contacts those Customers communicate with ("Recipients").

1. Information we collect

• Account information — company name, your name, email address, and password (stored hashed) when you register or are invited to a company's workspace.
• Contact data you upload — names, phone numbers, email addresses, and any custom fields or groups you add to your Contacts list, used to send the campaigns and appointment reminders you create.
• Message content and delivery data — the templates and campaigns you create, and metadata about each message we send on your behalf (recipient, channel, timestamps, and delivery/failure status).
• Billing information — if you subscribe to a paid plan, billing details are collected and processed by our payment processor, Stripe; we do not store full payment card numbers ourselves.
• Usage information — basic technical data (such as IP address and browser type) generated when you use the application, used for security and troubleshooting.

2. How we use information

• To operate the platform: authenticate accounts, isolate each company's data from every other company, and deliver the SMS/Email campaigns and appointment reminders you create.
• To provide delivery reporting — tracking sent, delivered, pending, and failed messages so you can see the outcome of what you send.
• To process subscription billing and manage your plan.
• To maintain the security, integrity, and reliability of the service, including detecting abuse.

3. Third-party processors

To deliver the service, WeNotify shares the minimum necessary data with the following categories of processors, acting on our Customers' behalf:

• Twilio — used to send and deliver SMS messages to the phone numbers you provide.
• Your configured SMTP provider — used to send Email messages to the addresses you provide.
• Stripe — used to process subscription payments where billing is enabled.

We do not sell contact data or message content to third parties.

4. Multi-tenant data isolation

WeNotify is a multi-tenant platform: every record is associated with a single company and access is scoped to that company's own users. Company Admins and Team Members can only see data that belongs to their own company; Super Admins (platform operators) can access cross-tenant data only as needed to operate and support the platform.

5. Data retention

We retain account, contact, and message data for as long as your company's account is active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your company's data by contacting us (see Contact Us below).

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data we hold about you. Company Admins can manage most of this directly from Settings; Recipients who wish to be removed from a company's contact list should contact that company directly, or reach us and we will forward the request.

7. Security

We use industry-standard measures — including encrypted password storage, authenticated API access, and tenant-scoped database queries — to protect the data in our care. No method of transmission or storage is 100% secure, and we continually work to improve our safeguards.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact us

Questions about this Privacy Policy can be sent to support@wenotify.example.