Privacy Policy

Last Updated: September 16, 2026

Munnottu ("Munnottu", "we", "us", or "our") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you:

• Visit or use munnottu.com;
• Create or use a Munnottu account;
• Use our CRM, lead-generation, automation, communication, AI, and customer-support services;
• Connect third-party services such as WhatsApp, Instagram, Facebook, or other supported platforms;
• Contact us or communicate with us; or
• Otherwise interact with Munnottu.

By using Munnottu, you acknowledge that you have read and understood this Privacy Policy.

1. About Munnottu

Munnottu is a business communication, lead-generation, customer relationship management, and automation platform designed to help businesses manage leads, customer conversations, marketing communications, and support workflows.

Our services may include integrations and features involving:

• WhatsApp Cloud API;
• Instagram;
• Facebook Messenger;
• RCS;
• Click-to-WhatsApp advertising;
• Sales CRM;
• Lead management;
• Customer support automation;
• AI agents and automated responses;
• Marketing automation;
• Analytics and reporting; and
• Other communication and business automation tools.

2. Information We Collect

We may collect different categories of information depending on how you use Munnottu.

2.1 Account and Registration Information

When you create an account, we may collect:

• Full name;
• Email address;
• Phone number;
• Company or business name;
• Job title or business information;
• Login credentials;
• Account preferences;
• Billing and subscription information; and
• Other information you voluntarily provide.

We use this information to create and administer your account, provide our services, communicate with you, and maintain account security.

2.2 Business and CRM Data

If you use Munnottu's CRM and lead-management features, you may provide information relating to your customers, prospects, leads, or contacts.

This may include:

• Names;
• Phone numbers;
• Email addresses;
• Company information;
• Customer notes;
• Lead information;
• Communication history;
• Conversation records;
• Tags and labels;
• Sales pipeline information;
• Customer preferences;
• Uploaded contact lists;
• Campaign information; and
• Other information entered or imported by you.

Munnottu processes this information primarily to provide the services requested by the business customer.

You are responsible for ensuring that you have the appropriate rights, permissions, notices, and lawful basis to collect and process this information through Munnottu.

3. WhatsApp, Instagram, Facebook and Other Integrations

Munnottu may integrate with third-party platforms and services, including Meta products and WhatsApp Cloud API.

When you connect such services to Munnottu, we may process information made available through those integrations, including where applicable:

• Account identifiers;
• Business account information;
• Phone numbers;
• Contact information;
• Messages;
• Conversation content;
• Message metadata;
• Media;
• Message templates;
• Comments;
• Customer interactions;
• Delivery and engagement information; and
• Other information permitted by the relevant platform.

The availability and processing of such information depends on the permissions granted by you and the APIs and policies of the relevant third-party platform.

Your use of third-party platforms remains subject to their respective terms and privacy policies.

Munnottu does not control the privacy practices of third-party platforms.

4. AI Agents and Automated Processing

Munnottu may provide AI-powered features, including AI agents, automated responses, conversation assistance, lead qualification, customer-support automation, and related functionality.

To provide these features, information contained in conversations, customer records, business instructions, knowledge bases, or other relevant data may be processed by our systems and applicable third-party AI or technology service providers.

AI-generated responses may not always be accurate or appropriate.

Businesses using Munnottu are responsible for reviewing their AI configurations, instructions, workflows, and automated communications and for determining whether human review is appropriate.

Munnottu does not guarantee that AI-generated content will be error-free, complete, or suitable for a particular purpose.

5. Payment and Billing Information

If you purchase a paid Munnottu subscription or service, we may collect information necessary to manage your subscription and billing relationship.

Payment transactions may be processed by third-party payment service providers.

Depending on the payment method and provider, payment information may be collected and processed directly by the payment provider rather than being stored by Munnottu.

We may receive limited payment-related information, such as:

• Transaction ID;
• Payment status;
• Subscription information;
• Billing amount;
• Currency;
• Payment method type;
• Billing dates; and
• Other information required for accounting and subscription management.

Third-party payment providers process payment information according to their own privacy policies and terms.

6. Cookies and Similar Technologies

Munnottu may use cookies, pixels, local storage, session technologies, and similar technologies.

These technologies may be used to:

• Keep you logged in;
• Maintain security;
• Remember preferences;
• Understand how users interact with our website;
• Measure website performance;
• Improve our services;
• Analyze traffic;
• Support marketing activities; and
• Provide relevant functionality.

You may be able to control cookies through your browser settings.

Disabling certain cookies may affect the functionality of some parts of Munnottu.

7. Analytics

Munnottu may use analytics services, including Google Analytics and similar technologies, to understand website and product usage.

Analytics information may include:

• IP address or approximate location information;
• Browser type;
• Device type;
• Operating system;
• Referring pages;
• Pages visited;
• Interaction information;
• Session information;
• Approximate geographic information; and
• Other technical or usage information.

Analytics providers may process information according to their own privacy policies and terms.

8. Advertising and Marketing

Munnottu may use advertising and marketing technologies, including services provided by platforms such as Google and Meta.

These technologies may help us:

• Measure advertising performance;
• Understand campaign effectiveness;
• Generate leads;
• Reach potential customers;
• Retarget users where permitted;
• Analyze conversions; and
• Improve marketing campaigns.

Where required by applicable law, we will obtain appropriate consent before using technologies that require consent.

You may be able to control certain advertising preferences through the relevant advertising platform or your browser/device settings.

9. How We Use Personal Information

We may use personal information to:

1. Create and manage user accounts;
2. Provide Munnottu services;
3. Process subscriptions and payments;
4. Provide CRM and lead-management functionality;
5. Process business communications;
6. Facilitate WhatsApp, Instagram, Facebook, RCS, and other integrations;
7. Provide AI and automation features;
8. Send transactional communications;
9. Send marketing communications where permitted;
10. Respond to customer support requests;
11. Detect and prevent fraud, abuse, and unauthorized activity;
12. Maintain platform security;
13. Monitor and improve system performance;
14. Analyze usage and product performance;
15. Maintain backups;
16. Comply with legal obligations;
17. Enforce our agreements and policies;
18. Protect our rights, users, and systems; and
19. Develop and improve our products and services.

10. Legal Bases for Processing

Where applicable data-protection laws require a legal basis for processing personal information, we may rely on one or more of the following:

• Performance of a contract;
• Compliance with legal obligations;
• Legitimate interests;
• Consent;
• Protection of legal rights and interests; and
• Other lawful bases permitted under applicable law.

Where processing is based on consent, you may withdraw consent where permitted by applicable law.

Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

11. Business Customer Responsibilities

If you use Munnottu to collect, store, import, analyze, or communicate with your own customers or contacts, you may be acting as the controller or equivalent responsible party for that personal information.

Munnottu may act as a service provider, processor, or equivalent role depending on the circumstances and applicable law.

You are responsible for:

• Having a lawful basis to collect and process personal information;
• Providing appropriate privacy notices to your customers;
• Obtaining required consents;
• Complying with applicable marketing and messaging laws;
• Complying with WhatsApp, Meta, RCS, and other platform requirements;
• Maintaining appropriate data-retention practices;
• Responding to data-subject requests where applicable;
• Configuring your Munnottu account appropriately;
• Protecting your account credentials;
• Ensuring uploaded contact lists were lawfully obtained; and
• Using Munnottu in compliance with applicable laws.

Munnottu is not responsible for a business customer's independent collection, use, disclosure, or other processing of personal information.

12. Data Sharing and Disclosure

We may disclose or provide access to personal information to trusted third parties when reasonably necessary to provide, secure, operate, or improve Munnottu.

These may include:

• Cloud hosting providers;
• Database and infrastructure providers;
• Payment processors;
• Analytics providers;
• AI and technology providers;
• Email and communication providers;
• WhatsApp and Meta;
• Instagram and Facebook;
• RCS or messaging providers;
• Customer-support providers;
• Security and fraud-prevention providers;
• Professional advisers;
• Legal and regulatory authorities where required; and
• Other service providers acting on our behalf.

We do not authorize third parties to use personal information for purposes inconsistent with the services they provide to Munnottu, except where otherwise permitted or required by law.

13. International Data Transfers

Munnottu may use service providers and infrastructure located in countries other than the country in which you reside.

As a result, personal information may be transferred, stored, or processed internationally.

Where applicable law requires safeguards for international transfers, we will seek to use appropriate mechanisms, such as contractual safeguards or other legally recognized transfer mechanisms.

Users in the European Economic Area, United Kingdom, and other jurisdictions with applicable data-transfer requirements may have additional rights under local law.

14. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide our services;
• Maintain your account;
• Fulfill contractual obligations;
• Provide customer support;
• Maintain business and financial records;
• Resolve disputes;
• Prevent fraud and abuse;
• Maintain backups and security;
• Comply with legal obligations; and
• Enforce our agreements.

Retention periods may vary depending on the type of information and the purpose for which it was collected.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

15. Account and Data Deletion

You may request deletion of your Munnottu account and personal information, subject to applicable law and legitimate retention requirements.

Account deletion may result in the loss of:

• CRM records;
• Leads;
• Customer information;
• Conversations;
• Campaign data;
• Account configurations; and
• Other information associated with your account.

Some information may need to be retained for legal, security, fraud-prevention, accounting, dispute-resolution, backup, or other legitimate purposes.

Where information is retained, it will be handled in accordance with applicable legal requirements.

16. Data Security

Munnottu uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, destruction, or loss.

Security measures may include:

• HTTPS/TLS encryption for data transmitted between systems;
• Authentication controls;
• Role-based access controls;
• Access restrictions;
• Security monitoring;
• Infrastructure security measures;
• Backup procedures;
• Logging and auditing; and
• Other reasonable security controls.

However, no internet transmission or storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and for restricting unauthorized access to your account.

17. Team Members and Role-Based Access

Munnottu may allow business customers to create team accounts or provide different users with different permissions.

Business administrators are responsible for:

• Assigning appropriate permissions;
• Removing former team members;
• Protecting login credentials;
• Monitoring account access; and
• Ensuring that team members access data only as authorized.

Munnottu may process account activity and access information for security, auditing, and operational purposes.

18. Data Breach and Security Incidents

If Munnottu becomes aware of a security incident involving personal information, we will take reasonable steps to investigate, contain, mitigate, and remediate the incident.

Where required by applicable law, we may notify affected customers, users, regulators, or other relevant parties.

Notifications may be provided through email, account notifications, website notices, or other appropriate communication channels.

19. Marketing Communications

We may send you service-related and transactional communications, including:

• Account notifications;
• Security alerts;
• Billing notifications;
• Product updates;
• Service announcements;
• Support communications; and
• Other operational messages.

Where permitted by law, we may also send promotional communications.

You may opt out of promotional communications by using the unsubscribe mechanism included in the communication or by contacting us.

Opting out of marketing communications will not prevent us from sending essential transactional, security, or service-related communications.

20. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• Right to access personal information;
• Right to correct inaccurate information;
• Right to request deletion;
• Right to restrict processing;
• Right to object to certain processing;
• Right to data portability;
• Right to withdraw consent;
• Right to opt out of certain marketing activities; and
• Right to lodge a complaint with an applicable data-protection authority.

Some rights may be subject to legal limitations or exceptions.

To exercise applicable rights, contact us using the information provided in the Contact Us section.

21. European Economic Area and United Kingdom Users

If you are located in the European Economic Area or United Kingdom, applicable data-protection laws such as the GDPR or UK GDPR may provide you with additional rights.

Depending on the circumstances, you may have rights to:

• Access your personal data;
• Correct inaccurate personal data;
• Request erasure;
• Restrict processing;
• Object to processing;
• Receive certain data in a portable format;
• Withdraw consent; and
• Complain to your relevant supervisory authority.

Where Munnottu processes information on behalf of a business customer, requests relating to that customer's customer data may need to be directed to the relevant business customer.

22. California and Other U.S. Privacy Rights

Depending on your location and applicable U.S. privacy laws, you may have additional privacy rights.

These may include rights to:

• Know what categories of personal information are collected;
• Request access to certain information;
• Request deletion;
• Request correction;
• Opt out of certain processing or targeted advertising;
• Limit certain uses where applicable; and
• Exercise other rights provided by applicable state law.

We will process valid privacy requests in accordance with applicable law.

23. Children's Privacy

Munnottu is intended for businesses and professional users.

Munnottu does not knowingly collect personal information from children under the age of 18 for the purpose of creating accounts or using our services.

If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

24. Sensitive Personal Information

Munnottu is not designed to intentionally collect sensitive personal information such as health information, biometric information, or government identification documents as a standard feature of the service.

Business customers should avoid uploading sensitive personal information unless the relevant processing is lawful, necessary, and supported by the applicable Munnottu service.

If a business customer chooses to process sensitive information through Munnottu, that customer remains responsible for ensuring that the processing complies with applicable laws and regulations.

25. Third-Party Websites and Services

Munnottu may contain links to or integrations with third-party websites and services.

We are not responsible for the privacy practices, content, security, or policies of third-party services.

We recommend reviewing the privacy policy and terms of any third-party service before providing personal information to that service.

26. WhatsApp and Meta Compliance

When Munnottu provides functionality involving WhatsApp, Instagram, Facebook, or other Meta services, those services are also subject to the applicable Meta and platform terms, policies, and requirements.

Businesses using Munnottu are responsible for ensuring that their communications, campaigns, customer data, templates, advertisements, and other activities comply with applicable Meta and WhatsApp policies.

Munnottu does not override or replace the privacy policies, terms, or requirements of Meta or other third-party platforms.

27. Automated Decision-Making

Munnottu may provide automation and AI-assisted functionality that can classify, qualify, route, prioritize, or respond to leads and customer communications based on rules or configured AI workflows.

Unless otherwise required by applicable law, Munnottu does not represent that its automated processing constitutes a legally significant decision-making process.

Businesses remain responsible for reviewing automated workflows where human review is necessary or required by law.

28. Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information from information collected through our services.

Where such information is properly aggregated or de-identified so that it can no longer reasonably identify an individual, we may use it for purposes including:

• Analytics;
• Product development;
• Service improvement;
• Security;
• Performance measurement; and
• Business reporting.

We will not intentionally use properly de-identified information to re-identify individuals except where permitted by law.

29. Business Transfers

If Munnottu is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction.

Any such transfer will be handled in accordance with applicable law.

30. Legal Disclosures

We may disclose personal information where we reasonably believe disclosure is necessary to:

• Comply with applicable law;
• Respond to valid legal processes;
• Protect our rights or property;
• Protect the safety of users or others;
• Investigate fraud or abuse;
• Enforce our agreements; or
• Prevent or address security incidents.

31. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we may update the Last Updated date at the beginning of this Privacy Policy.

For material changes, we may provide additional notice where required by applicable law.

Your continued use of Munnottu after the effective date of an updated Privacy Policy constitutes acceptance of the updated policy to the extent permitted by law.

32. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns regarding the handling of your personal information, please contact Munnottu through the contact information provided on our website.

For privacy-related requests, please provide sufficient information for us to verify your identity and understand your request.

33. Important Notice for Business Customers

Munnottu is a technology platform that enables businesses to manage leads, customers, communications, automation, and CRM data.

If you use Munnottu to process information relating to your customers, employees, leads, or other individuals, you are responsible for determining:

• What personal information you collect;
• Why you collect it;
• Your lawful basis for processing it;
• What notices you provide to individuals;
• How long you retain it;
• Who you share it with;
• Whether consent is required;
• Whether marketing communications are permitted; and
• Whether your use of Munnottu complies with applicable privacy, telecommunications, advertising, consumer-protection, and messaging laws.

Munnottu provides technology and infrastructure to facilitate these activities but does not determine the purposes for which a business customer independently uses its customer data.