Privacy Policy

1. Introduction & Overview

Deshana IT, operating under Deshana Enterprises Private Limited (hereinafter referred to as "Deshana IT", "we", "our", or "us"), is deeply committed to respecting and protecting the privacy of our clients, users, and the end-users of our cloud communication infrastructure (including SMS Dekho). This Privacy Policy constitutes a legally binding document detailing our comprehensive practices regarding the collection, storage, processing, and disclosure of personal, corporate, and telecommunications data.

This Privacy Policy applies to our website (deshanait.com), our bulk messaging portals, our APIs, custom software environments, and any associated digital platforms managed by Deshana IT. By accessing our platforms or utilizing our software, web development, or telecom routing services, you expressly consent to the data practices described in this document.

2. Data We Collect & Process

Depending on the scope of services you utilize, we systematically collect several categories of information:

• Account & Corporate Data: Full name, corporate entity details, billing address, registered email address, GSTIN numbers, authorized contact numbers, and KYC documentation required for telecom and DLT compliance.
• Cloud Communication & Telecom Data: When utilizing our bulk SMS, Voice, or WhatsApp API infrastructure (e.g., via SMS Dekho), we process message contents, delivery receipts (DLRs), sender IDs (Headers), DLT template IDs, and the mobile numbers of your end-recipients strictly for the purpose of telecommunications routing.
• Development & Project Data: Server credentials, database dumps, proprietary source code, wireframes, technical specifications, and API keys shared during custom software and web development life cycles.
• Technical & Telemetry Data: IP addresses, browser agents, geographic location, API call logs, latency metrics, and operational timestamps to ensure strict security monitoring and platform stability.

3. Lawful Utilization of Information

We strictly utilize the collected data to execute our contractual and regulatory obligations, including but not limited to:

• Provisioning, hosting, and maintaining custom web applications, SaaS products, and mobile architectures.
• Routing high-throughput SMS, Voice, and WhatsApp messages through our Tier-1 telecom operator gateways.
• Scrubbing recipient databases against the National Customer Preference Register (NCPR/DND) databases in strict compliance with TRAI regulations.
• Investigating routing failures, latency issues, and security anomalies across our active-active load-balanced clusters.
• Generating detailed DLR (Delivery Report) analytics, billing invoices, and usage ledgers for your account.
• Detecting, preventing, and prosecuting fraudulent activities, phishing attempts, and unsolicited spam campaigns.

4. Telecom Regulatory Compliance & Data Retention

As a licensed telecommunications and bulk messaging provider, we operate under stringent regulatory mandates imposed by the Telecom Regulatory Authority of India (TRAI). Consequently:

• Log Retention: We are legally mandated to retain all message transmission logs, delivery receipts, origin IPs, and exact timestamps for a minimum of one (1) year (or as otherwise mandated by TRAI or law enforcement agencies), regardless of whether you delete your account.
• Content Scrubbing: Message content is actively monitored and subjected to algorithmic scrubbing against approved DLT templates to prevent the transmission of illicit, promotional spam, or unregistered content.
• Post-Retention Erasure: Upon the expiration of statutory retention periods, redundant telecommunications data is permanently purged from our primary and geo-redundant backup databases.

5. Data Sharing & Third-Party Disclosures

We do not sell, rent, or commercialize your project data or end-user databases. Information is disclosed solely to authorized entities under strict confidentiality agreements:

• Telecom Operators & Aggregators: Recipient mobile numbers and message contents are securely transmitted to Tier-1 telecom operators (e.g., Airtel, Jio, Vodafone-Idea, BSNL) and international SMPP routes strictly for packet delivery.
• DLT Ledger Platforms: Entity details, Headers, and Templates are synchronized with operator-managed Distributed Ledger Technology (DLT) portals for regulatory compliance.
• Cloud Infrastructure Partners: Data is hosted on highly secure AWS, DigitalOcean, and local Indian data centers complying with ISO 27001 standards.
• Law Enforcement & Judiciary: We reserve the right, and frequently hold the legal obligation, to disclose user logs, KYC details, and message contents to cybercrime cells, law enforcement agencies, and judicial bodies in response to valid legal subpoenas without prior notice to you.

6. Client Obligations Regarding End-User Privacy

When you utilize our Bulk SMS and WhatsApp API infrastructure, you act as the Data Controller for your end-users, while Deshana IT acts as a Data Processor. You are exclusively responsible for obtaining explicit, legally valid consent (opt-in) from your recipients before initiating any telecommunications. You agree to strictly honor all opt-out (DND) requests and absolve Deshana IT of any liability arising from your failure to secure proper recipient consent.

7. Security Protocols & Encryption

We deploy enterprise-grade security protocols to safeguard your infrastructure. All data transmitted between your servers and our APIs is encrypted using TLS 1.2/1.3. Our databases are secured behind restricted virtual private clouds (VPCs), strict firewall rules, and are subjected to regular vulnerability penetration testing. We utilize stateless packet routing engines for SMS delivery, ensuring sensitive OTPs and transactional data exist in active memory only for the milliseconds required for transmission.

8. Your Data Rights & Grievance Redressal

Subject to overriding regulatory retention laws (like TRAI guidelines), you hold the right to request access to, correction of, or deletion of your personal account data. For any grievances, security disclosures, or data privacy concerns, please contact our appointed Grievance Officer.