1. Who we are
Notify Digitally is operated by My Cloud World ("we", "us", or "our"). We provide tools that let registered business customers send and monitor WhatsApp, Telegram, and email notifications. Contact us at contact@mycloudworld.com.
2. Information we collect
We may collect:
- Account information such as name, email address, mobile number, password hash, account role, permissions, API keys, and credit balance.
- Business messaging information such as Meta business portfolio IDs, WhatsApp Business Account IDs, phone-number IDs, verified display names, approved templates, Telegram chat-linking identifiers, and email sender settings.
- Limited Meta identity information made available through the
public_profilepermission during Facebook Login, such as an app-scoped Meta user identifier and basic public account information. We do not request access to a person’s friends list, posts, photos, or other unrelated Facebook information. - Credentials and authorization data, including encrypted provider access tokens and the permissions granted to our application. We do not intentionally expose provider secrets in the browser or public logs.
- Notification data such as recipient address or phone number, template name, message content, provider message ID, delivery status, timestamps, and error information.
- Technical information such as IP address, browser details, session identifiers, security events, and application logs.
- Information you provide in support requests or other communications with us.
3. How we use information
We use information to provide and secure the service; authenticate users and API requests; connect provider accounts; send requested notifications; synchronize WhatsApp templates; process webhooks and delivery updates; maintain histories and audit records; prevent abuse; troubleshoot failures; communicate service information; comply with law; and improve reliability.
Meta public_profile usage
When a business administrator uses Facebook Login to connect WhatsApp assets, Meta may make limited public_profile information available to our app. We use this information only to authenticate the person completing authorization, maintain the security and integrity of the connection, and associate the WhatsApp Business assets they authorize with the correct Notify Digitally account.
We do not use public_profile information for advertising, behavioral profiling, eligibility decisions, data brokerage, resale, or any purpose unrelated to account authentication and provider connection. We do not post to Facebook on a user’s behalf. Notify Digitally does not currently call Meta’s /me endpoint to import public-profile fields into a separate customer profile.
We process notification content and recipient data on the business customer's instructions. Each customer is responsible for having a lawful basis, consent where required, and all necessary rights to contact its recipients.
4. Providers and sharing
We share data only as needed to operate the service, comply with law, protect rights and safety, or complete a business transaction. Notification information is transmitted to the provider selected by the customer:
- Meta Platforms and WhatsApp for WhatsApp Business Platform onboarding, template management, message delivery, and status webhooks.
- Telegram for bot account linking, message delivery, and related status information.
- ToSend and supporting email infrastructure for email delivery.
- Hosting, database, security, logging, and support vendors acting on our behalf.
These providers process information under their own terms and privacy policies. We do not sell personal information.
5. Retention and deletion
We retain account and notification information for as long as needed to provide the service, maintain security and audit records, resolve disputes, and meet legal obligations. Retention may vary by data type. Meta authorization and any associated app-scoped identity data are retained only while needed to maintain or audit the authorized connection. When an account is deleted or Meta access is disconnected, we delete or de-identify information that is no longer required, subject to legal obligations, fraud prevention, backups, and legitimate recordkeeping needs.
Instructions for disconnecting providers and requesting deletion are available on our Data Deletion page.
6. Security and international transfers
We use reasonable administrative, technical, and organizational safeguards, including access controls and encryption of stored provider credentials. No internet service is completely secure. Providers and infrastructure vendors may process information in countries other than yours, subject to their safeguards and applicable law.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information, and to withdraw consent. You may update profile information in your account or contact contact@mycloudworld.com. We may need to verify your identity before fulfilling a request.
8. Children and policy changes
The service is intended for businesses and is not directed to children. We may update this policy as the service or applicable requirements change. We will publish the revised version here and update its effective date.