1. Introduction
When you use Messageroots, you trust us with information. This Privacy Policy explains what we collect, why we collect it, how we use it, and the choices you have. It covers our marketing website and the Messageroots application (the “Service”).
Key terms:
- Messageroots / we / us — the operator of the Messageroots Service.
- Personal Data — information that identifies or can identify a person.
- Customer — a business or workspace that subscribes to or uses the Service.
- End User — a person a Customer messages or chats with on WhatsApp or related channels through the Service.
2. Who we are
Messageroots is a WhatsApp-focused customer engagement platform. It helps businesses connect a WhatsApp number, send paced campaigns (including images), run a team inbox, automate replies, manage CRM contacts, newsletters, and a product catalogue.
For questions about this policy, email privacy@messageroots.com.
3. What we collect
Account & billing information
When you register or manage a workspace we may collect name, phone number, email, company name, login credentials or OTP identifiers, plan details, and payment or tax information needed for invoicing.
Service usage information
We collect technical and usage data such as IP address, device/browser type, approximate location derived from IP, feature usage, campaign/send metrics, session status (e.g. WhatsApp link connected), and diagnostic logs to keep the Service reliable and secure.
Website & cookies
On our website we use necessary cookies and, with your consent, analytics or marketing cookies. See our Cookie Policy and the consent banner on the site.
Support communications
If you contact us, we keep the content of that conversation to help resolve your request.
4. How we use data
- Provide, operate, secure, and improve the Service
- Authenticate users (including WhatsApp OTP where enabled)
- Send transactional notices (security alerts, billing, product changes)
- Respond to support requests and prevent abuse or fraud
- Analyse product usage in aggregate to improve features (including image sharing and inbox tools)
- Market our Service where allowed, with an easy opt-out
- Comply with law and enforce our Terms of Service
5. Customer data & End User messages
Customers control contacts, message content, media (images/files), CRM notes, store products, and automation content they upload or send. For that Service Data, Messageroots typically acts as a processor / service provider: we process it to deliver the Service under the Customer’s instructions.
- Messages may transit Meta WhatsApp Cloud API and/or a linked WhatsApp Web session (personal QR gateway), depending on how the Customer connects.
- Cloud providers and Meta may temporarily store message content as needed to deliver WhatsApp traffic; Customers should review Meta’s WhatsApp Business terms.
- End Users should contact the Customer (the business that messaged them) for most privacy requests about chat content.
- We help Customers honour deletion or export requests where technically feasible.
6. When we share information
We do not sell Personal Data. We may share it with:
- Infrastructure providers — hosting, storage, email, monitoring, payment processors — under contracts that limit use to providing services to us
- Meta / WhatsApp — as required to send or receive messages when Customers use WhatsApp channels
- Legal requests — when required by law, court order, or to protect rights, safety, and security
- Business transfers — in a merger, acquisition, or asset sale, with notice where required
7. Retention & security
We keep Account Information while the account is active and for a reasonable period afterward for legal, dispute, and accounting needs. Service Data retention follows Customer settings and our deletion workflows after workspace closure (unless law requires longer retention).
Security practices are described in our Security page. No method of transmission is 100% secure; we work to protect data with appropriate technical and organisational measures.
8. Your rights
Depending on where you live (for example India IT rules, GDPR, or similar laws), you may have rights to access, correct, delete, restrict, or export Personal Data, or to object to certain processing and withdraw consent.
- Account holders can update many details in-app or by emailing privacy@messageroots.com.
- End Users should contact the Customer that holds their chat; we will assist that Customer where appropriate.
- You may lodge a complaint with a supervisory authority where applicable.
9. Children
The Service is built for businesses and is not directed to children under 16. If you believe a child provided Personal Data without proper consent, contact us and we will take appropriate steps.
10. Changes & contact
We may update this Policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice where appropriate.
Privacy requests: privacy@messageroots.com
General support: support@messageroots.com
Related: Terms of Service · Cookie Policy · Security