Privacy Policy
This policy is written for people who receive a marketing campaign from a company using this App — especially a WhatsApp message — and for Meta / WhatsApp Business app review. It also covers company staff who send those campaigns.
Digitalsoft operates the Digitalsoft Sales & Marketing System (the “App”). Companies use the App to store contact lists and send campaigns on WhatsApp, email, SMS, and social networks. WhatsApp sends use the Meta WhatsApp Cloud API with the company’s own WhatsApp Business phone number.
1. If you received a WhatsApp campaign
A company that uses this App chose your mobile number from its own contact list or group and started a WhatsApp campaign. The message is sent from that company’s WhatsApp Business display name and number (not from Digitalsoft’s personal WhatsApp). It may sit under Message requests until you open it.
For that send, the App and Meta may process:
- Your mobile number (normalised to international format, for example 92…).
- Your name and company name if the campaign text uses personalisation tokens such as
{{name}}. - The campaign text or an approved Meta template the company selected.
- A WhatsApp message id (wamid) and later status such as accepted, sent, delivered, read, or failed — when Meta reports it.
We use this only to deliver the campaign the company started, show them send progress, and (if they connected a webhook) update delivered / failed counts. We do not sell your number, add you to other companies’ lists, or send you WhatsApp ads of our own because you received someone else’s campaign.
2. How a WhatsApp campaign is sent
- The company uploads or types contacts and puts mobiles in a contact group.
- They write campaign text or pick a CRM / Meta template, then choose Send.
- The App calls Meta’s WhatsApp Cloud API with the company’s Access Token and Phone Number ID.
- Numbers go out one every 30 seconds so the business WhatsApp is less likely to be blocked.
- Free text is only used when Meta allows a session message. Other broadcasts may use an approved Meta template the company configured.
- Meta must accept the message before it can appear on your phone. “Accepted” in the App is not the same as a tick on WhatsApp.
3. Opt out and stop WhatsApp campaigns
If you do not want further WhatsApp campaigns from that company:
- Reply STOP or ask them to remove you — they can take you out of the contact group in the App.
- Block or report the business chat in WhatsApp.
- Email us at info@digitalsoftsales.pk with the sender name, the mobile that received the message, and the approximate time. We will pass the request to the company workspace that sent it and help them delete or suppress your number where we can identify it.
Companies must only WhatsApp people they are allowed to contact (customers, people who shared a number, or another lawful basis). Development-mode test sends only go to numbers the company added on Meta’s allowed list.
4. Other marketing campaigns (email, SMS, social)
The same contact list can be used for email, SMS, or social posts. Those sends go through the email server, SMS gateway, or social account the company connected. Only the channel they selected receives that campaign. We do not use WhatsApp data to email you unless the same company also stores your email and starts an email campaign.
5. Data we collect from company users
- Account: name, work email, phone, password hash, role, last login.
- CRM: contacts (including multiple phone fields), groups, deals, tasks, notes.
- Campaign records: name, message body, group, schedule, accepted / delivered / failed counts, WhatsApp logs.
- WhatsApp settings the company saves: Access Token, Phone Number ID, optional Meta template name and language, webhook verify token.
- Cookies: session login, and optional “Remember me” email on the sign-in page.
We do not sell contact lists or campaign data to third parties for their marketing.
6. Sharing with Meta and other processors
To send a WhatsApp campaign we send the recipient number and message to Meta Platforms (WhatsApp Cloud API). Meta processes that under its WhatsApp Business and Business Messaging terms.
We may also share data with:
- The hosting and database provider that runs this App.
- Email, SMS, Facebook, YouTube, or other integrations the company turns on.
- Authorities if required by law.
Each company workspace is isolated. One company cannot see another company’s contacts or WhatsApp logs.
7. Retention
Campaign text, recipient numbers, and WhatsApp message logs stay in the company’s workspace while the account is active so they can see what was sent. A company admin can delete contacts, groups, and campaigns they own. After a workspace is closed we delete or anonymise that data within a reasonable period, unless we must keep a record for security or law.
8. Security
Passwords are stored as one-way hashes. WhatsApp tokens are treated as secrets and used only to call Meta on the company’s behalf. No system is perfectly secure; companies should rotate tokens if they leak.
9. Your rights
Recipients can ask the sending company, or Digitalsoft at info@digitalsoftsales.pk, to access, correct, or delete the mobile and campaign records we hold, or to stop further WhatsApp campaigns, subject to Pakistani law and the company’s use of the App. Company users can update their own profile in Settings.
10. Children
The App is for business marketing. We do not knowingly collect data from children under 13 or send them campaigns.
11. Changes
We may update this policy when campaign or WhatsApp features change. The effective date at the top will change. Continued use after an update means you accept the new policy.
12. Contact
Digitalsoft — WhatsApp & marketing campaigns
Email: info@digitalsoftsales.pk
Website: www.digitalsofts.pk