Who we are

SSD Enterprises, a sole proprietorship registered in Nagpur, Maharashtra 440014, India (GSTIN 27CZEPP7854E1ZZ) provides Bulk SMS, OTP, WhatsApp Business API, RCS, bulk email, voice/OBD, IVRS, missed call, long/short code and chatbot services. Our platform is at panel.ssdenterprise.co.in.

For data you upload into our platform to message your own audience, you are the data controller and we act as your processor. For your own account and billing data, we are the controller.

What we collect

Information you give us directly:

• Contact and business details — name, company, mobile number, email, GSTIN, billing address.
• Onboarding documents required by law and by operators, including DLT entity and sender ID details, and KYC documents where an operator or Meta requires them.
• Message content you create — SMS and WhatsApp templates, email creatives, voice recordings, chatbot flows.
• Recipient lists you upload for a campaign, which may include mobile numbers, email addresses, names and merge fields you choose to add.

Information collected automatically:

• Delivery metadata — message IDs, timestamps, sender ID, route, operator status and reason codes, call duration, DTMF/press-1 responses.
• Platform logs — login times, IP address, browser and device type, API request logs.
• Website usage — pages visited and referring source. Our own site sets no advertising cookies; only what is needed to keep the site working.

Why we use it

• To deliver the service you bought — routing, sending and reporting on your messages and calls.
• To register and maintain your sender IDs, DLT templates and WhatsApp Business account with operators and platform providers.
• To bill you, maintain credit balances and issue GST invoices.
• To provide support, investigate delivery failures and prevent fraud, spam and misuse of routes.
• To meet legal, regulatory and TRAI/DLT obligations, and to respond to lawful requests from operators or authorities.

We do not sell your data, and we do not use the recipient lists you upload for any purpose other than executing your campaigns.

Who we share it with

• Telecom operators and aggregators, who must receive message content, sender ID and recipient numbers to deliver traffic.
• Platform providers where you use their channel — for example Meta for WhatsApp Business API, or Google for RCS. Their own terms and privacy policies also apply.
• The DLT registry, for entity, sender ID and template registration.
• Payment gateways and our banking partners, for collecting payments.
• Government authorities, regulators or courts where we are legally required to disclose.

How long we keep it

• Delivery reports and campaign metadata: retained for reporting and dispute resolution, typically up to 12 months, and longer where an operator or law requires it.
• Uploaded recipient lists: kept in your account until you delete them. On written request we delete them sooner.
• Invoices, GST records and KYC documents: retained for the period Indian tax and telecom law requires.
• Account data: retained while your account is active, and for a reasonable period afterwards to close out billing and legal obligations.

Security

Access to the platform is password-protected and API access is key-based. Traffic to the panel and API is encrypted in transit. Access to customer data inside our team is limited to the people who need it to run your account or support you.

No system is perfectly secure. Keep your panel password and API keys confidential, rotate keys if you suspect exposure, and tell us immediately if you think your account has been compromised.

Your responsibilities as our customer

You must have a lawful basis and, where required, valid consent for every number and email address you upload. You must honour opt-outs, respect DND/NCPR rules for promotional traffic, and not send content prohibited by TRAI, an operator or a channel provider.

If a recipient complains to us about your messages, we will pass their request to you and may suspend the campaign while it is resolved.

Your rights

You can ask us to show you the personal data we hold about you, correct it, or delete it where we are not required to keep it. Write to prakash@ssdenterprise.co.in from your registered email and we will respond within a reasonable period.

If you are a message recipient rather than our customer, we usually cannot identify you on our own — contact the business that sent you the message, or write to us and we will forward your request to them.

Changes to this policy

We may update this policy as the service, the law or operator rules change. The date at the top always shows the current version. Material changes will be notified to account holders by email or in the panel.