Privacy Policy
Last updated 18 August 2026
Sendly is operated by TechShu Digital Private Limited(“Sendly”, “we”, “us”). Sendly is a business messaging platform built on the WhatsApp Business Platform. This policy explains what we collect, why, and what control you have over it.
Who this policy is for
Sendly serves two different groups, and the distinction matters:
- Our customers — businesses that hold a Sendly account and use it to message their own customers.
- End users — the people those businesses message on WhatsApp. If you received a WhatsApp message and are looking for who contacted you, that is the business, not Sendly. We process their messages on their instructions.
What we collect
From businesses using Sendly
- Account details: name, work email address, and a hashed password.
- WhatsApp Business Account identifiers and access credentials you connect, so we can send and receive messages for you. Access tokens are encrypted at rest.
- Usage and diagnostic logs needed to operate and secure the service.
On behalf of businesses, about their end users
- WhatsApp phone number (the WhatsApp ID) and WhatsApp profile name.
- Message content sent to and from the business, including text, images, video, audio, documents and reactions.
- Delivery and read status of messages.
- Contact names and tags the business chooses to record.
We do not sell this data, use it for advertising, or use it to train machine learning models.
Why we process it
- To deliver the service the business signed up for — sending and receiving messages.
- To keep accounts secure and to detect abuse.
- To meet legal obligations and WhatsApp Business Platform requirements.
For end-user data, the business is the data controller and Sendly is the processor. We act on that business’s documented instructions.
Media handling
Images, video, audio and documents exchanged over WhatsApp are stored by Meta and retrieved by Sendly on demand using the media identifier. We do not keep our own permanent copies of message media.
Sharing
We share data only where it is necessary to run the service:
- Meta Platforms, Inc.— message delivery runs through the WhatsApp Business Platform and is subject to Meta’s own terms and privacy policy.
- Hosting and infrastructure providers — used to run the application and store data.
- Legal authorities — where we are required by applicable law.
Retention
Conversation data is retained while the business’s account is active. On account closure we delete or anonymise it within 90 days, except where a longer period is required by law. A business can request earlier deletion of its data at any time.
Security
Access is protected by authenticated sessions, all traffic is served over HTTPS, inbound webhooks from Meta are cryptographically verified, and stored access tokens are encrypted. No system is perfectly secure, but we will notify affected businesses without undue delay if a breach affects their data.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. End users should contact the business that messaged them first, since they control that data. If you cannot reach them, contact us and we will help route the request.
International transfers
Sendly is operated from India. Data may be processed in other countries where our infrastructure providers and Meta operate, under appropriate safeguards.
Children
Sendly is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes
We will update this page when our practices change and revise the date at the top. Material changes will be communicated to account holders directly.
Contact
TechShu Digital Private Limited
15C Dr. Rajendra Prasad Sarani, 1st Floor, Kolkata, West Bengal, 700001, India
Email: privacy@techshu.in