whatsapp-img
Privacy & Data Protection

Privacy Policy

At RapBooster we are committed to protecting your personal information and your right to privacy. This policy explains what data we collect, how we use it, and the choices you have — written in plain language because you deserve to understand how your data is handled.

GDPR-Aware No Data Selling End-to-End Encryption

Document Details

Section 01

Introduction

Welcome to RapBooster — a B2B SaaS platform operated by rapbooster.com. We offer marketing automation (WhatsApp, Email, SMS, Voice, Social Media, AI), business tools (CRM, Billing, HRMS), web and app development, and graphics and video production.

By accessing or using our platform, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our services. This policy is reviewed and updated periodically — the date at the top always reflects the most recent revision.

RapBooster acts as both a data controller (for account and contact data) and a data processor (when you use our platform to send campaigns to your own audience).

Section 02

Data We Collect

We collect only what is necessary to provide our services securely and effectively. The categories below describe what we may collect depending on how you interact with RapBooster.

Account & Identity Data

  • Full name and business name
  • Email address and mobile number
  • OTP-verified login credentials
  • Sub-account and parent-account linkages

Usage & Behaviour Data

  • Pages visited and features accessed
  • IP address, browser type, OS
  • Device identifiers and referring URLs
  • Campaign performance events (sends, opens, clicks)

Payment & Billing Data

  • Transaction amount and order ID
  • Payment gateway reference numbers
  • Billing address and GST details
  • Card/UPI details are never stored by us

Cookies & Tracking

  • Session and authentication cookies
  • Preference and localisation cookies
  • Analytics cookies (aggregated, anonymised)
  • You can disable cookies in your browser

Customer-Uploaded Data (Processor Role)

When you upload contact lists or media files to run campaigns, that data is stored on your behalf. RapBooster processes it only according to your instructions and does not use it for our own marketing or analytics purposes.

Section 03

How We Use Your Data

We use the information we collect to operate, improve, and secure the RapBooster platform. The legal bases we rely on are contract performance, legitimate interest, and your consent where required.

  • Providing, maintaining, and improving our services and platform features
  • Processing your orders, subscriptions, and billing transactions
  • Sending transactional communications — OTPs, invoices, usage alerts
  • Delivering marketing updates, product announcements, and promotional offers (opt-out available)
  • Operating our marketing automation products on your behalf — WhatsApp broadcasts, email campaigns, SMS, RCS, AI workflows
  • Analysing platform usage to identify bugs, optimise performance, and develop new features
  • Preventing fraud, abuse, and unauthorised access to the platform
  • Complying with applicable laws, legal processes, and regulatory requirements
  • Responding to support requests, complaints, and feedback

Section 04

Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third party.

We share your data with carefully selected service providers who help us deliver our platform. Each provider is bound by data-processing agreements. The categories and specific partners involved are listed below.

Payment Gateways

When you make a payment, your transaction data is processed by our integrated payment partners. We share only the minimum information required to complete the transaction (amount, order reference, billing name).

Stripe Razorpay Paytm PayPal Instamojo CCAvenue PhonePe

Cloud Infrastructure & Storage

Customer-uploaded files (images, documents, templates) and platform assets are stored on Amazon Web Services S3 (region: ap-south-1, India). AWS is ISO 27001 certified and SOC 2 compliant.

AWS S3 — ap-south-1

OTP & Messaging Providers

To authenticate you securely via OTP login, your phone number or email address is passed to the relevant delivery provider for that communication.

MSG91 (SMS OTP) PHPMailer / SMTP (Email OTP)

Section 05

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Active

Account Data

Retained while your account is active and for 90 days after closure (to allow reactivation)

7 Years

Billing & Tax Records

Required under Indian GST & financial regulations for audit purposes

30 Days

Campaign Logs

Delivery and activity logs are purged after 30 days unless you enable extended retention

After the applicable retention period, data is securely deleted or anonymised. You may request early deletion (see Your Rights section below) subject to any overriding legal obligations.

Section 06

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data. We will respond to verified requests within 30 days.

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete information.

Right to Erasure

Request deletion of your data, subject to legal retention obligations.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests, including direct marketing.

Right to Restrict Processing

Ask us to suspend processing while a dispute or objection is resolved.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time by contacting us or using the unsubscribe link in marketing emails. Withdrawal does not affect processing already carried out.

To exercise any of the above rights, email us at [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing the request.

Section 07

Cookies Policy

Cookies are small text files stored on your device when you visit RapBooster. We use them to keep you signed in, remember your preferences, and understand how our platform is used.

Cookie Type Purpose Duration
Essential Session management, authentication, CSRF protection Session
Functional Remembering language, timezone, and UI preferences 1 year
Analytics Aggregated, anonymised usage insights to improve the platform 90 days
Marketing Tracking interactions for targeted communications (only with consent) 180 days

You can control or delete cookies via your browser settings. Disabling essential cookies may affect the functionality of the platform (for example, you may not be able to stay logged in). For more information on managing cookies, visit allaboutcookies.org.

Section 08

Security Measures

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.

TLS Encryption

All data in transit is encrypted via TLS 1.2/1.3

OTP Authentication

Login secured via time-limited OTP — no static passwords

Access Controls

Role-based access with sub-account isolation

No method of data transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. If you suspect a security incident, please notify us immediately at [email protected].

Section 09

Children's Privacy

RapBooster is a business-to-business (B2B) platform intended exclusively for use by individuals aged 18 years or older. We do not knowingly collect or solicit personal data from children under 18. If we discover that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have collected a child's data, please contact us at [email protected] so that we can take immediate action.

Section 10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify you by email or an in-app notification.

Your continued use of the RapBooster platform after any changes have been posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Section 11

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please reach out to us through any of the channels below. We aim to respond to all privacy-related enquiries within 5 business days.