Legal

Privacy Policy

Last updated: March 1, 2025

NinzaTools ("we", "us", or "our") operates the website at https://ninzatools.com and provides the NinzaTools WhatsApp API Gateway service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you register for an account, we collect your name, email address, and password (stored as a secure hash). You may optionally provide a phone number for account recovery.

Usage Data

We automatically collect information about how you interact with the Service, including IP addresses, browser type, pages visited, API call logs (endpoint, timestamp, response status), and error reports. This data is used to maintain and improve the Service.

Message Data

When you send messages via our API, we store metadata such as the recipient phone number, message status (sent, delivered, failed), and timestamp. Message content is stored temporarily to facilitate delivery and may be retained for a limited period for debugging and support purposes.

Payment Information

We do not directly collect or store payment card details. All payment processing is handled by our third-party payment processors, who operate under their own privacy policies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your API requests and deliver messages
  • Authenticate your identity and secure your account
  • Send transactional emails (account confirmation, password reset)
  • Monitor usage against your plan limits and enforce rate limits
  • Detect and prevent fraud, abuse, and security incidents
  • Respond to your support requests and inquiries
  • Improve and develop new features for the Service
  • Comply with applicable laws and regulations

We do not sell your personal information to third parties and do not use it for advertising purposes.

3. Sharing & Disclosure

We may share your information only in the following circumstances:

Service Providers

We engage trusted third-party vendors to assist in operating the Service (e.g., cloud hosting, payment processing, email delivery). These vendors have access to your data only to perform services on our behalf and are contractually obligated to protect it.

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or respond to an emergency.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share information with third parties when you have given us explicit consent to do so.

4. Cookies & Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how the Service is used. Specifically, we use:

  • Session cookies — to keep you logged in during your session
  • Preference cookies — to remember your settings
  • Analytics cookies — to understand how visitors use our website (aggregated, anonymized data only)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of the Service may not function correctly.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Message logs and API call records are retained for a maximum of 90 days unless otherwise required by law. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.

6. Security

We implement industry-standard security measures to protect your information, including:

  • Passwords hashed with bcrypt (never stored in plain text)
  • HTTPS/TLS encryption for all data in transit
  • API keys hashed before storage
  • IP allowlist restrictions for API access
  • Regular security audits and vulnerability assessments

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you become aware of any unauthorized access to your account, please contact us immediately.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request that inaccurate data be corrected
  • Deletion — Request that your personal data be deleted
  • Portability — Receive your data in a structured, machine-readable format
  • Objection — Object to processing of your personal data in certain circumstances

To exercise any of these rights, please contact us at privacy@ninzawp.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website before the change becomes effective. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Last updated: March 1, 2025