This Privacy Policy explains how OttaBlast ("OttaBlast", "we", "us", or "our") collects, uses, shares, and protects personal information when you use the OttaBlast website, application, and related services.
Important: This template is provided for business readiness and is not legal advice. Have it reviewed by a qualified lawyer before publication.
1. Overview
OttaBlast is a marketing and communication platform that helps businesses manage contacts and run outreach campaigns through WhatsApp, email, and social media. The Service may be used to upload leads, organize contact data, create templates, send or schedule campaigns, manage unsubscribe requests, monitor campaign activity, and manage subscriptions.
2. Our role
For account, billing, website, support, and business administration data, we usually act as a data controller. For lead lists, recipient data, campaign content, message history, and similar information that customers upload or generate through the Service, we generally act as a data processor or service provider on behalf of the customer.
Our customers are responsible for ensuring they have the legal authority, notices, and consents needed to upload contact data and send messages to their customers or leads through OttaBlast.
3. Data we collect
- Account details: name, email address, login credentials, role, preferences, and authentication data.
- Business details: company name, business profile, address, industry, team members, and workspace settings.
- Uploaded lead and contact data: customer names, email addresses, phone numbers, tags, notes, custom fields, consent status, unsubscribe status, and imported files.
- Campaign data: templates, message content, scheduled messages, message history, delivery activity, clicks, replies, error logs, and campaign performance information.
- Connected account data: information from Meta/WhatsApp, email delivery providers, payment processors, AI content generation providers, and other social media platforms when you connect those services.
- Subscription and payment data: plan, invoices, billing status, payment method references, tax details, and transaction metadata. Full payment card details are handled by our payment processor where applicable.
- Usage and technical data: IP address, device and browser information, pages viewed, feature activity, log files, cookies, diagnostics, and security events.
- Support and communications: messages you send to us, contact form submissions, support tickets, and feedback.
4. How we use data
- To create, authenticate, secure, and manage user accounts.
- To provide campaign, contact management, scheduling, template, reporting, unsubscribe, and subscription features.
- To send or route WhatsApp, email, and social media messages through the third-party services you connect or authorize.
- To process payments, issue invoices, manage plans, and prevent billing fraud.
- To provide support, respond to requests, and send service notices.
- To monitor deliverability, troubleshoot errors, prevent abuse, and enforce our policies.
- To improve the Service, develop features, analyze usage, and maintain security.
- To comply with legal obligations and protect our rights, users, customers, and the public.
5. WhatsApp and Meta data
When you use WhatsApp-related features, OttaBlast may process phone numbers, WhatsApp Business account identifiers, message templates, campaign content, delivery status, replies, and related metadata. We use this data to enable WhatsApp messaging features, maintain message history, display campaign activity, manage opt-outs, troubleshoot sending issues, and comply with Meta/WhatsApp requirements.
We do not sell WhatsApp data. We do not use WhatsApp message content for unrelated advertising. We share WhatsApp-related data only as needed to provide the Service, comply with law, enforce our policies, or support integrations you authorize, including Meta/WhatsApp and related infrastructure providers.
6. Third-party providers
We do not sell personal information. We may share data with service providers and integration partners that help us operate OttaBlast, including:
- Meta/WhatsApp: to connect accounts, manage templates, send messages, receive delivery events, and support WhatsApp Business functionality.
- Email delivery: our email delivery provider and similar providers to send email campaigns and transactional messages.
- Payments: our payment processor to process subscriptions, invoices, taxes, and fraud checks.
- AI content generation: third-party AI providers to generate or assist with campaign content when you choose to use AI features.
- Social media integrations: other social media platforms to connect accounts or publish/manage campaign activity where enabled.
- Hosting, analytics, security, support, and operations providers: to run, monitor, secure, and improve the Service.
- Legal, safety, and business transfer recipients: when required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.
7. Unsubscribes and opt-outs
OttaBlast helps customers record and manage unsubscribe and opt-out requests. When a recipient unsubscribes, replies with an opt-out instruction, or is manually marked as opted out, we may retain enough information, such as the email address or phone number, to suppress future messages and maintain an audit record. Customers must honor unsubscribe requests and must not re-upload or message contacts who have opted out unless they have a valid lawful basis to do so.
8. Retention and deletion
We retain personal information for as long as needed to provide the Service, meet legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain business records. Our general retention period is up to 12 months after account closure.
Customer-uploaded contact data and campaign data are generally retained while the customer's account is active, unless the customer deletes the data, requests deletion, or a shorter retention setting applies. Backup copies may remain for a limited period before being overwritten or deleted according to our backup practices.
9. Access and deletion requests
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal information, and to withdraw consent where processing is based on consent. To make a request, contact privacy@ottablast.com.
If your personal information was uploaded by one of our customers, we may direct your request to that customer because they control the data. We will assist customers with valid access, correction, deletion, and portability requests as required by applicable law and our agreements.
10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, logging, encryption in transit, and vendor review practices. No system is completely secure, and we cannot guarantee absolute security.
11. International transfers
We and our providers may process personal information in countries other than where you are located. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.
12. Children
The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.
13. Changes
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. If changes are material, we may provide additional notice through the Service or by email.
14. Contact
Privacy questions, access requests, and deletion requests can be sent to privacy@ottablast.com. General support requests can be sent to support@ottablast.com.
Operated under the name: OttaBlast. For privacy enquiries, email privacy@ottablast.com.