From d563504a14abdbe794fa5f3f58cbe8a7844d923e Mon Sep 17 00:00:00 2001 From: debu-2 Date: Fri, 2 Oct 2026 14:11:39 +0530 Subject: [PATCH] privacy policy and business integration --- frontend/src/App.tsx | 2 + frontend/src/features/auth/AuthPage.tsx | 5 +- frontend/src/features/landing/LandingPage.tsx | 7 +- .../src/features/legal/PrivacyPolicyPage.tsx | 278 ++++++++++++++++++ frontend/src/index.css | 52 +++- 5 files changed, 341 insertions(+), 3 deletions(-) create mode 100644 frontend/src/features/legal/PrivacyPolicyPage.tsx diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx index 5b17f2c..c5c656c 100644 --- a/frontend/src/App.tsx +++ b/frontend/src/App.tsx @@ -25,6 +25,7 @@ import { KycPage } from './features/compliance/KycPage' import { DltPage } from './features/compliance/DltPage' import { ComplianceGate } from './features/compliance/ComplianceProvider' import { AdminApp } from './features/admin/AdminPortal' +import { PrivacyPolicyPage } from './features/legal/PrivacyPolicyPage' function Placeholder() { return ( @@ -41,6 +42,7 @@ export default function App() { } /> + } /> } /> } /> } /> diff --git a/frontend/src/features/auth/AuthPage.tsx b/frontend/src/features/auth/AuthPage.tsx index d5d7dbe..8d6c9a4 100644 --- a/frontend/src/features/auth/AuthPage.tsx +++ b/frontend/src/features/auth/AuthPage.tsx @@ -81,7 +81,10 @@ export function AuthPage({ initialMode }: { initialMode: 'login' | 'register' }) {error &&

{error}

} -

By continuing, you agree to Urmi’s Terms of Service and Privacy Policy.

+

+ By continuing, you agree to Urmi’s Terms of Service and{' '} + Privacy Policy. +

diff --git a/frontend/src/features/landing/LandingPage.tsx b/frontend/src/features/landing/LandingPage.tsx index d027c35..35db98a 100644 --- a/frontend/src/features/landing/LandingPage.tsx +++ b/frontend/src/features/landing/LandingPage.tsx @@ -61,7 +61,12 @@ export function LandingPage() { -
UrmiSMS infrastructure for the agentic internet.© 2026 Urmi Technologies
+
+ Urmi + SMS infrastructure for the agentic internet. + Privacy Policy + © 2026 Urmi Technologies +
) } diff --git a/frontend/src/features/legal/PrivacyPolicyPage.tsx b/frontend/src/features/legal/PrivacyPolicyPage.tsx new file mode 100644 index 0000000..dcb2511 --- /dev/null +++ b/frontend/src/features/legal/PrivacyPolicyPage.tsx @@ -0,0 +1,278 @@ +import { Link } from 'react-router-dom' + +const LAST_UPDATED = 'October 2, 2026' +const CONTACT_EMAIL = 'privacy@urmiai.com' + +export function PrivacyPolicyPage() { + return ( +
+
+ Urmi +
+ Log in + Start building +
+
+ +
+
+
+ Legal +

Privacy Policy

+

Last updated: {LAST_UPDATED}

+

+ This Privacy Policy describes how Urmi Technologies (“Urmi”, “we”, “us”, or “our”), operated by + Genzenith Services LLP, collects, uses, discloses, and protects personal information when you use our + website at urmiai.com, our developer console, APIs, and related + messaging services—including SMS, voice, OTP, and WhatsApp Business messaging. +

+
+ +
+

1. Who we are

+

+ Data controller: Genzenith Services LLP (trading as Urmi Technologies)
+ Website: https://urmiai.com
+ Privacy contact: {CONTACT_EMAIL} +

+

+ Urmi provides business messaging infrastructure for enterprises and developers. If you interact with + Urmi only as an end user of one of our customers (for example, you receive an SMS, voice call, or + WhatsApp message from a business using Urmi), that business is typically the data controller for your + message content, and Urmi processes data on their behalf as a service provider. +

+
+ +
+

2. Scope

+

This policy applies to:

+
    +
  • Visitors to our website and marketing pages
    • +
  • Registered users of the Urmi developer console and admin portal
    • +
  • Developers and businesses that integrate with Urmi APIs
    • +
  • End users whose personal data is processed when our customers send or receive messages through Urmi
    • +
  • Users who communicate with Urmi’s own business WhatsApp number or other Urmi-operated channels
    • +
+
+ +
+

3. Information we collect

+

3.1 Account and identity information

+
    +
  • Name, email address, and account credentials
    • +
  • Organization name, billing details, and compliance documentation (e.g. KYC, DLT registration)
    • +
  • Authentication data if you sign in with a third-party provider (such as Google OAuth)
    • +
+ +

3.2 Messaging and communications data

+
    +
  • Phone numbers (sender and recipient), message content, timestamps, delivery status, and error codes
    • +
  • Voice call metadata (caller, callee, duration, routing information) and related session data
    • +
  • OTP codes, template names, campaign identifiers, and API request logs
    • +
  • + WhatsApp data: When you or our customers use WhatsApp through Urmi, we may process + WhatsApp user phone numbers, message content (text, media, templates, interactive replies), message + identifiers, read/delivery receipts, and webhook event payloads received from Meta Platforms, Inc. +
    • +
+ +

3.3 Technical and usage information

+
    +
  • IP address, browser type, device information, and referring URLs
    • +
  • API keys (stored in hashed or secured form), request metadata, and audit logs
    • +
  • Cookies and similar technologies (see Section 9)
    • +
+ +

3.4 Information from third parties

+
    +
  • Telecom carriers, SMS aggregators, voice providers, and Meta’s WhatsApp Business Platform
    • +
  • Compliance registries and identity verification services where required by law
    • +
+
+ +
+

4. How we use information

+

We use personal information to:

+
    +
  • Provide, operate, maintain, and improve the Urmi platform and APIs
    • +
  • Send, receive, route, deliver, and log messages on behalf of our customers
    • +
  • Authenticate users, prevent fraud and abuse, and enforce our terms
    • +
  • Meet legal, regulatory, and telecom compliance obligations (including India DLT and KYC requirements)
    • +
  • Provide customer support, billing, and service notifications
    • +
  • Analyze aggregated usage to improve reliability, security, and performance
    • +
  • Comply with Meta Platform Terms, WhatsApp Business Messaging Policy, and applicable messaging laws
    • +
+

+ WhatsApp-specific commitment: We use WhatsApp data only to provide messaging services + requested by our customers or by Urmi for its own business communications. We do not use WhatsApp message + content or contact information for unrelated advertising, profiling, or resale. +

+
+ +
+

5. Legal bases for processing (where applicable)

+

Depending on your location and relationship with Urmi, we process personal data based on:

+
    +
  • Contract: To perform our agreement with account holders and deliver requested services
    • +
  • Legitimate interests: Security, fraud prevention, service improvement, and B2B operations
    • +
  • Legal obligation: Telecom, tax, anti-spam, and regulatory compliance
    • +
  • Consent: Where required for marketing communications, cookies, or optional integrations
    • +
+
+ +
+

6. How we share information

+

We may share personal information with:

+
    +
  • + Meta / WhatsApp: When messages are sent or received via the WhatsApp Business Platform, + data is transmitted to and from Meta in accordance with Meta’s terms and the WhatsApp Business Messaging + Policy. See{' '} + + WhatsApp Business Messaging Policy + {' '} + and{' '} + + Meta Privacy Policy + . +
    • +
  • Telecom and messaging partners: SMS gateways, voice carriers, and delivery providers necessary to route messages
    • +
  • Infrastructure providers: Cloud hosting, databases, logging, and security services
    • +
  • Professional advisers: Lawyers, auditors, and insurers where reasonably necessary
    • +
  • Authorities: When required by law, court order, or to protect rights, safety, and security
    • +
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards
    • +
+

We do not sell personal information.

+
+ +
+

7. International data transfers

+

+ Urmi is based in India. Your information may be processed in India and in other countries where we or our + service providers operate. Where required, we implement appropriate safeguards for cross-border transfers, + including contractual protections with subprocessors. +

+
+ +
+

8. Data retention

+

We retain personal information only as long as necessary for the purposes described in this policy, including:

+
    +
  • Account data: for the life of the account and a reasonable period thereafter
    • +
  • Message logs and API records: as needed for delivery, billing, dispute resolution, and legal compliance
    • +
  • Compliance records (KYC/DLT): as required by applicable Indian telecom regulations
    • +
  • WhatsApp webhook and message records: for operational, support, and audit purposes, then deleted or anonymized per our retention schedule
    • +
+

Retention periods may vary based on legal requirements and customer configuration.

+
+ +
+

9. Cookies and similar technologies

+

+ We use cookies and similar technologies to keep you signed in, remember preferences, secure the platform, + and understand how our website and console are used. You can control cookies through your browser settings. + Disabling certain cookies may affect platform functionality. +

+
+ +
+

10. Security

+

+ We implement technical and organizational measures designed to protect personal information, including + access controls, encryption in transit (HTTPS/TLS), secure credential handling, and monitoring. No method + of transmission or storage is completely secure; we cannot guarantee absolute security. +

+
+ +
+

11. Your rights and choices

+

Depending on applicable law, you may have the right to:

+
    +
  • Access, correct, or update your personal information
    • +
  • Request deletion of your personal information, subject to legal and contractual exceptions
    • +
  • Object to or restrict certain processing
    • +
  • Withdraw consent where processing is consent-based
    • +
  • Lodge a complaint with a supervisory authority
    • +
+

+ Account holders can update profile information in the Urmi console or contact us at{' '} + {CONTACT_EMAIL}. +

+

+ End users of our customers (e.g. recipients of SMS or WhatsApp messages) should contact the + business that sent the message first. If you cannot reach them, contact us and we will assist or forward + your request as appropriate. +

+

+ WhatsApp users: You may block or stop messaging a business on WhatsApp at any time using + WhatsApp’s in-app controls. To request deletion of data Urmi holds about you in connection with WhatsApp + messaging, email {CONTACT_EMAIL} with your phone number and a + description of your request. +

+
+ +
+

12. Children’s privacy

+

+ Urmi’s services are intended for businesses and developers. We do not knowingly collect personal + information from children under 13 (or the minimum age required in your jurisdiction). If you believe a + child has provided us personal information, contact us and we will take appropriate steps to delete it. +

+
+ +
+

13. Third-party services and links

+

+ Our platform integrates with third-party services (including Meta WhatsApp, telecom carriers, and optional + OAuth providers). Their collection and use of information is governed by their own privacy policies. We + encourage you to review those policies before using integrated features. +

+
+ +
+

14. Meta Platform and App Review

+

+ Urmi’s application “URMI AI” on the Meta Developer Platform uses WhatsApp Business APIs to enable + business messaging. In connection with Meta App Review and Platform Terms, we disclose that: +

+
    +
  • We access WhatsApp data only to provide messaging functionality authorized by our customers or Urmi’s own business operations
    • +
  • We comply with Meta Platform Terms, Developer Policies, and WhatsApp Business Messaging Policy
    • +
  • We maintain this publicly accessible Privacy Policy URL for Meta app configuration
    • +
  • Users may contact {CONTACT_EMAIL} regarding data practices related to our Meta-integrated services
    • +
+
+ +
+

15. Changes to this policy

+

+ We may update this Privacy Policy from time to time. We will post the revised policy on this page and + update the “Last updated” date. Material changes may be communicated via the console or email where + appropriate. Continued use of our services after changes become effective constitutes acceptance of the + updated policy. +

+
+ +
+

16. Contact us

+

+ For privacy questions, data subject requests, or complaints, contact: +

+

+ Urmi Technologies / Genzenith Services LLP
+ Email: {CONTACT_EMAIL}
+ Website: https://urmiai.com +

+
+
+
+ + +
+ ) +} diff --git a/frontend/src/index.css b/frontend/src/index.css index 6f20a84..2269ee3 100644 --- a/frontend/src/index.css +++ b/frontend/src/index.css @@ -203,7 +203,57 @@ main { padding: 30px clamp(20px, 3vw, 44px) 50px; } .developer-band h2 { color: white; margin-bottom: 7px; }.developer-band p { margin: 0; color: #8fa0b6; } .developer-band > a { flex: 0 0 auto; display: flex; align-items: center; gap: 8px; color: white; background: #1475ff; border-radius: 8px; padding: 12px 16px; text-decoration: none; font-size: 11px; font-weight: 700; } .landing-footer { min-height: 100px; display: flex; align-items: center; gap: 22px; padding: 20px max(5vw, 24px); color: #788ba5; background: #07172f; } -.landing-footer img { width: 90px; height: 48px; object-fit: contain; }.landing-footer span { font-size: 10px; }.landing-footer small { margin-left: auto; font-size: 9px; } +.landing-footer img { width: 90px; height: 48px; object-fit: contain; } +.landing-footer span { font-size: 10px; } +.landing-footer small { margin-left: auto; font-size: 9px; } +.legal-footer-link { color: #9cacbf; font-size: 10px; text-decoration: none; } +.legal-footer-link:hover { color: white; } +.legal-page .landing-actions { margin-left: auto; } +.legal-main { + padding: 48px max(5vw, 24px) 72px; + background: #f6f8fb; + min-height: calc(100vh - 176px); +} +.legal-document { + max-width: 820px; + margin: 0 auto; + background: white; + border: 1px solid #e6ebf2; + border-radius: 14px; + padding: 40px 44px; + color: #334155; + line-height: 1.65; +} +.legal-header { margin-bottom: 28px; padding-bottom: 24px; border-bottom: 1px solid #e6ebf2; } +.legal-header h1 { margin: 8px 0 10px; font-size: 32px; color: #0f172a; line-height: 1.2; } +.legal-meta { margin: 0 0 16px; color: #64748b; font-size: 12px; } +.legal-intro { margin: 0; font-size: 14px; } +.legal-document section { margin-top: 28px; } +.legal-document h2 { + margin: 0 0 12px; + font-size: 18px; + color: #0f172a; + line-height: 1.35; +} +.legal-document h3 { + margin: 18px 0 8px; + font-size: 14px; + color: #1e293b; +} +.legal-document p { margin: 0 0 12px; font-size: 13px; } +.legal-document ul { + margin: 0 0 12px; + padding-left: 22px; + font-size: 13px; +} +.legal-document li { margin-bottom: 6px; } +.legal-document a { color: #1475ff; text-decoration: none; } +.legal-document a:hover { text-decoration: underline; } +.legal-document strong { color: #0f172a; } +@media (max-width: 720px) { + .legal-document { padding: 28px 22px; } + .legal-header h1 { font-size: 26px; } +} /* Unified authentication */ .auth-page { min-height: 100vh; display: grid; grid-template-columns: minmax(380px, .8fr) minmax(520px, 1.2fr); background: white; }