Privacy Policy & Data Protection Standards

Molecule Technologies operates cloud telephony, WhatsApp Business API, MobileCRM, and automated messaging infrastructure for businesses across India. We recognize the criticality of your customer data and communications confidentiality. We adhere strictly to Indian telecommunication regulations, the Digital Personal Data Protection (DPDP) framework, and global cloud security practices.

To provide unified business communications and comply with mandatory telecom verification protocols, we collect only necessary data categories:

• Business & Account Identity: Organization name, GSTIN, registered address, authorized representative contact details, billing contacts, and DLT Entity ID.
• Website Inquiries & Demo Requests: When submitting forms on our website (Contact Us, Demo Booking, Support Tickets, or Consultation inquiries), we collect your full name, work email address, contact phone number, company name, service requirements, and inquiry message.
• Telephony & Communication Metadata: Call Detail Records (CDRs) including originating number, destination number, call timestamps, duration, recording files (when enabled by you), SMS delivery status, and WhatsApp conversation session metrics.
• Technical & Gateway Logs: IP address, device telemetry, browser type, API tokens, webhook transaction logs, and platform authentication events.
• Client Support Interactions: Inquiries, tickets submitted via our helpdesk, feature requests, and diagnostic troubleshooting logs.

We process collected information under legitimate contractual and regulatory obligations to deliver services seamlessly:

• Routing inbound IVR calls, executing outbound automated voice broadcasts, and managing WhatsApp Business cloud channels.
• Delivering transactional OTPs, service alerts, and promotional broadcasts through carrier DLT pipelines.
• Managing pay-as-you-go balance calculations, pulse rate billing, and issuing GST-compliant tax invoices.
• Executing real-time anti-fraud checks, scrubbing spam patterns, and maintaining high platform deliverability.
• Providing 24x7 customer support, resolving service tickets, and alerting you to critical system updates.

All communication services delivered by Molecule Technologies are governed by Telecom Commercial Communications Customer Preference Regulations (TCCCPR 2018) enacted by the Telecom Regulatory Authority of India (TRAI):

• Principal Entity (PE) Registration: All outbound SMS and voice broadcasting requires verified business KYC and registered DLT headers.
• Template Scrubbing: Messages are hashed and verified against pre-approved DLT templates before carrier transmission to block unauthorized spam.
• National Do Not Call (NDNC / DND) Registry: Promotional voice calls and SMS are automatically scrubbed against active DND registers, adhering strictly to Indian regulatory delivery time slots (9:00 AM to 9:00 PM).

We protect your business records with bank-grade multi-layer security controls:

• Encryption in Transit: All API requests, dashboard traffic, and webhook payloads are protected with TLS 1.3 cryptographic protocols.
• Encryption at Rest: Database backups, call audio logs, and customer CRM records are secured with 256-bit AES encryption.
• Data Residency: All Molecule telephony and database infrastructure is physically hosted in ISO 27001 certified Tier-3 & Tier-4 data centers situated within India.
• Access Governance: Strict Role-Based Access Control (RBAC), multi-factor authentication (MFA), and automated intrusion detection systems.

To deliver calls and messages, we interconnect with vetted telecommunication providers and platform partners:

• Tier-1 Telecom Operators: We interface directly with licensed Indian telecom service providers (such as Airtel, Reliance Jio, Vodafone Idea, and Tata Teleservices) strictly for call routing and message dispatch.
• Meta WhatsApp Cloud: Official API communication is processed via Meta Cloud Infrastructure in accordance with the WhatsApp Business Platform terms.
• Form Processing Infrastructure (FormSubmit): Website contact and demo requests are processed via FormSubmit (formsubmit.co) as an email forwarding gateway. FormSubmit acts as a data processor solely to route incoming messages directly to our secure enterprise support mailbox, without storing message bodies permanently or selling submitted information.
• Strict Data Boundaries: Partners are contractually bound under Data Processing Agreements (DPAs) and are prohibited from utilizing customer records for independent purposes.

We retain information strictly for durations required by operational fulfillment and Indian statutory mandates:

• Call Detail Records (CDRs): Retained in compliance with Department of Telecommunications (DoT) licensing mandates for regulatory auditing.
• Message Payloads: Content bodies for SMS and automated voice messages are purged from transmission buffers once delivery receipts are verified.
• Customer CRM Data: You maintain full ownership. You can export or delete contact books and lead entries directly from your dashboard at any time.
• Website Lead & Demo Inquiries: Contact information submitted via web inquiry forms is retained for a maximum of 90 days if not converted into an active customer account, after which records are purged from inquiry logs.

Under applicable Indian data protection frameworks, you have sovereign control over your enterprise records:

• Access & Portability: Request copies of your account records, CDR logs, and financial transaction statements in CSV/JSON format.
• Correction & Rectification: Update corporate profile information, GSTIN records, or contact designations anytime via the client portal.
• Account Decommissioning: Close your account and request complete eradication of non-regulatory account records upon contract termination.
• Right to Deletion for Inquiries: Any individual who has submitted a web inquiry or demo request may request immediate removal of their contact details at any time by emailing support@moleculetechnologies.in.

If you have questions, regulatory inquiries, or wish to exercise data rights, our dedicated compliance desk is available: