Privacy Policy

1. Introduction

GMB QR Pro ("we", "our", or "us") operates the platform available at https://smsraja.in. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, including our WhatsApp messaging, QR code review, and reputation management features.

2. Information We Collect

• Account information: Name, email address, and password when you register.
• Business information: Business name, address, Google Business Profile details.
• Contact data: Phone numbers and names of contacts you upload for WhatsApp campaigns or OTP messaging.
• Message logs: Records of WhatsApp messages sent, delivery status, and timestamps.
• Usage data: Pages visited, features used, and device/browser information for analytics.
• Payment information: Processed by our payment provider; we do not store card numbers.

3. How We Use Your Information

• To provide and operate our platform and services.
• To send WhatsApp messages, OTPs, and campaign messages on your behalf via Meta's WhatsApp Business API.
• To generate QR codes and collect customer feedback and reviews.
• To process payments and manage your subscription.
• To send service-related communications (account alerts, billing, security notices).
• To improve and debug our platform using aggregated analytics.

4. WhatsApp Messaging & Meta

Our platform uses the Meta WhatsApp Business API. When you send messages through our platform, your contact data (phone numbers, names, and message content) is transmitted to Meta Platforms, Inc. pursuant to WhatsApp's Business Policy. You are responsible for ensuring you have obtained appropriate consent from recipients before sending marketing or OTP messages.

4A. SMS App (Android mobile app)

Our Android app SMS App – Smart Marketing Solutions (package com.sms.crm) is a business CRM used by employees of companies that subscribe to our platform. It asks for the following access only when you use the related feature, and you can refuse or revoke any of it in Android settings:

• Call log: to show your recent customer calls, match them to CRM leads, record each work call on the lead (number, time, direction, duration, connected or not, which SIM), show the caller's lead name while the phone rings (caller ID for leads), and offer to save new callers as leads with a follow-up. Call details are sent only to your company's own CRM account. Numbers you mark as excluded (family, friends, colleagues) are not logged.
• Phone and calling: to detect when a call starts and ends, to call a lead from your SIM, and to run the auto dialer you start yourself.
• Accessibility service ("SMS App Auto-send"): optional, off until you turn it on in Android settings after an in-app explanation. When your company sends follow-ups from staff phones, after a work call the app opens the customer's chat in WhatsApp / WhatsApp Business or your SMS app with the message your company set up, and this service taps Send, then goes back. It acts only for a few seconds after the app opens such a chat and only in those apps. It does not read, store or upload your chats or any other screen content, and it is not used for advertising. You can turn it off at any time in Android Accessibility settings.
• Messages sent after calls: the text of each automatic or app-opened WhatsApp / SMS follow-up, the customer's number and its status (sent, delivered, failed) are saved in your company's CRM message log.
• Location: read once when you tap Check In / Check Out for attendance or check in at a site visit. It is not tracked in the background.
• Camera: a selfie at a site visit check-in, taken only when you tap the button, saved with the visit in your company's CRM.
• Notifications and display over other apps: follow-up reminders, caller ID for leads, and the "what happened?" prompt after a call.
• Leads you enter (names, phone numbers, email, notes, follow-ups, bookings) are stored in your company's CRM account.
• Call recordings (only in the version distributed directly by your company, not the Play Store version): if your company turns this on and your phone's own call recorder saved a recording, the app can upload it to that call in the CRM. The app never records calls itself.

This data is used only to provide the app's features to your company. It is encrypted in transit (HTTPS), is never sold, is not shared with third parties except the WhatsApp / SMS services your company chose to send messages, and is not used for advertising. Your company's administrators can see the calls, messages and leads of their own staff. Call and message records are kept while your company's account is active and deleted on request (section 8A).

5. Data Sharing

We do not sell your personal data. We share data only with:

• Meta Platforms: For WhatsApp message delivery.
• Google: For Google Business Profile integration (reviews, ratings).
• Payment processors: For subscription billing.
• Hosting providers: Our servers host your data securely.
• Legal requirements: When required by law or to protect our rights.

6. Data Retention

We retain your account data for as long as your account is active. Message logs and campaign data are retained for up to 12 months and then automatically purged. You may request deletion of your data at any time by contacting us.

7. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Export your data in a portable format.
• Withdraw consent at any time.

To exercise these rights, contact us at support{{ parse_url(config('app.url'), PHP_URL_HOST) ?? 'smsraja.in' }}.

8A. Deleting your account

You can ask us to delete your account and its data from the app (Settings → Delete my account) or on the web at https://smsraja.in/delete-account. We delete your login and personal data within 30 days. Records your company is required to keep (for example invoices) may be retained by your company as required by law.

9. Cookies

We use session cookies required for authentication and platform functionality. We do not use third-party advertising cookies. You can disable cookies in your browser but some features may not work correctly.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: