1. Who we are
aimray.com is a business communication service that constantly endeavours to provide premium messaging services for businesses of all sizes to fit their communication and promotional needs. This Privacy Policy is provided by Aimray ("Aimray", "we", "us", "our"), based in India, and applies to:
- the Aimray Business mobile app for Android (Google Play, package
com.aimchat.ndroid) and for iPhone (Apple App Store) (together, the "App"); - the website aimray.com (the "Website"); and
- the Aimray Messaging API and related business communication services (the "Services").
By using the App, Website or Services you agree to the practices described here. If you don't agree, please don't use them. This policy should be read together with our Terms of Use.
2. Summary
- You sign in with your phone number; we use it to create and secure your account.
- Messages are encrypted with AES-256 on your device before they're sent and are stored encrypted.
- We don't sell your personal information, show third-party ads or track you across other companies' apps and websites.
- Your address book stays on your device: it's used only to show which contacts use Aimray.
- We use Google Firebase to run the service (sign-in, database, file storage and notifications).
- Businesses can sign in to the Website with Google to request Messaging API access. We use those details only to verify the business, provide the API and email you about your request.
- You can delete chats in the app at any time and request deletion of your account and its data.
3. Information we collect
3.1 Information you provide
| Category | Examples | Required? |
|---|---|---|
| Account information | Mobile phone number and country code, display name | Yes, to create an account |
| Profile information | Profile photo, banner image, bio, business contact details, quick reply and greeting message | Optional |
| Messages and content | Messages, replies, photos, videos, documents, voice notes, shared locations and contact cards, link previews, status updates, reactions and comments | Only what you choose to send |
| Business content | Catalogue collections and products (photos, prices, offer prices, country of origin), chat labels | Optional |
| Calls | Call signalling data (who called whom, when, call type and duration) needed to connect calls and show your call history | Only when you make or receive calls |
| Contact with us | Name, email, phone, company and message when you use our forms, email us or request Messaging API access | Only when you contact us |
| Website business account | When you sign in to the Website with Google: your name, email address, profile photo and Google sign-in user ID | Only to request Messaging API access |
| Messaging API customers | Registered business name, business type and category, registration number (such as CIN, LLPIN or GSTIN), description of the business, address, contact phone and email, website, up to three business contact numbers to send messages from, billing contacts, and the messages your systems send through the API | Only for API customers |
3.2 Information collected automatically
- Account and app data: your user ID, account creation time, app version, device type and operating system.
- Usage and status data: message delivery and read status, your online status and last-seen time (you can turn these off in Settings), blocked users and settings such as dark mode or bubble colours.
- Push notification tokens: identifiers from Firebase Cloud Messaging / Apple Push Notification service used to deliver message and call notifications.
- Security data: app-integrity checks (Firebase App Check with Google Play Integrity on Android) that help block abuse, and limited technical logs (such as IP address and timestamps) kept by our infrastructure providers.
- Website account data: when you sign in to the Website, the time of your last sign-in and the IP address you signed in from, plus the dates you sent your business details and when they were reviewed.
3.3 Information from others
Other users may share content that includes information about you, for example by sending you a message, sharing your contact card or adding you to a chat label on their device. Businesses using the Messaging API may send you messages if you've agreed to hear from them. When you sign in to the Website with Google, Google shares your name, email address, profile photo and whether your email address is verified with us, as allowed by your Google account settings.
4. Device permissions
The App asks for permissions only when a feature needs them. You can refuse or withdraw any permission in your device settings; the related feature will then stop working, but the rest of the App will continue to work.
| Permission | Why we ask |
|---|---|
| Contacts | To show which of your contacts use Aimray and let you invite others. Your address book is read on your device and is not uploaded to our servers. |
| Camera | To take photos and videos to share, and for video calls. |
| Microphone | To record voice notes and for voice and video calls. |
| Photos / media | To pick photos, videos and documents to send, or to use as your profile picture, banner or product images. |
| Location | Only when you choose to share your location in a chat. We don't track your location in the background. |
| Notifications | To alert you about new messages and incoming calls. |
5. How we use information
We collect information primarily to fulfil your requirements and deliver a personalised experience. Specifically, we use it to:
- create and secure your account and verify your phone number;
- deliver messages, media, status updates, calls and notifications;
- provide business features such as your profile, catalogue, labels, quick replies and greetings;
- provide the Messaging API and bill API customers;
- verify businesses that request Messaging API access and the contact numbers they add, and email them when a request or number is received, approved or not approved;
- respond to support requests, enquiries and reports;
- keep the Services safe: prevent spam, fraud and abuse, enforce our Terms and Child Safety Standards;
- maintain, troubleshoot and improve the Services; and
- comply with legal obligations and respond to lawful requests.
We don't use the content of your messages for advertising, and we don't sell personal information.
6. Legal bases for processing
Where laws such as the EU/UK GDPR apply, we rely on: performance of a contract (to provide the Services you ask for); legitimate interests (to keep the Services secure, prevent abuse and improve them); consent (for example device permissions, website analytics and web push notifications, which you can withdraw at any time); and legal obligations. Under India's Digital Personal Data Protection Act, 2023, we process personal data for the lawful purposes described in this policy, based on your consent or legitimate uses permitted by law.
7. Encryption & security
Any information you give us is held with the utmost care and security:
- Message text is encrypted with AES-256 on your device before it is sent and is stored in encrypted form.
- All data travels between the App and our servers over encrypted TLS (HTTPS) connections.
- Access to our systems is restricted to authorised personnel who need it to run the Services, and is protected by security rules and authentication.
- You can compare safety numbers with a contact to confirm their identity.
No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law.
8. How we share information
The information collected from our users is never sold. We share it only as follows:
- With the people you communicate with: your name, profile photo and other profile details are visible to people you chat with and, where you choose, to other users. Messages, media and calls go to their recipients. Status updates are shown to your contacts.
- With service providers who process data on our behalf under contract, including Google Firebase (Authentication including SMS verification and Google sign-in on the Website, Cloud Firestore, Cloud Storage, Cloud Messaging and App Check, provided by Google LLC), Apple Push Notification service for notifications on iPhone, and our website hosting provider, which stores Website accounts and Messaging API access requests in a database on our servers and sends our emails. See Firebase privacy information.
- For legal reasons: we cooperate fully where we're required by law or legal process to provide information, and to protect the rights, safety and property of our users, the public or Aimray, including reporting child sexual abuse material to the authorities.
- Business transfers: if Aimray is involved in a merger, acquisition or sale of assets, information may be transferred under the protections of this policy.
9. Advertising & tracking
The App contains no third-party advertising and does not track you across apps and websites owned by other companies, as "tracking" is defined by Apple's App Tracking Transparency framework. We don't share your data with data brokers or ad networks.
10. Data retention
| Data | How long we keep it |
|---|---|
| Account and profile | While your account is active, then deleted after you delete your account |
| Messages and media | Until you delete the chat or your account (copies already delivered to other people stay on their devices) |
| Status updates | Up to 30 days, or until you delete them |
| Catalogue, labels, settings | Until you delete them or your account |
| Contact form and support messages | Up to 24 months after the conversation ends |
| Website account, business details and contact numbers | While you use the Messaging API or keep your Website account. Requests that aren't approved are kept up to 24 months after the decision, then deleted. |
| Security logs and backups | Limited periods (typically up to 90 days) set by our providers |
| Data required for legal reasons | As long as required by law or to resolve disputes, including preserving evidence of child exploitation for law enforcement |
11. Deleting your data and account
- In the App: long-press one or more chats and tap Delete, then choose Delete All Data to remove the conversations and their messages and media from your device and our cloud database. You can also delete your own status updates and catalogue items.
- Delete your account: submit a request on our Delete Account page or email info@aimray.com with your registered phone number. After verifying the request, we delete your account and associated personal data within 30 days, except data we must keep for legal reasons (see section 10).
- Website account and Messaging API request: you can remove contact numbers that haven't been approved yet on the API access page. To delete your Website account, business details and all contact numbers, email info@aimray.com from the Google account you sign in with, or use the privacy request form. We delete them within 30 days, except billing and other records we must keep by law.
12. Your rights
Depending on where you live, you may have the right to access, correct, update, delete or port your personal information; to object to or restrict certain processing; to withdraw consent; and to nominate another person to exercise your rights (India). You can edit most information directly in the App. For other requests, contact info@aimray.com or use the privacy request form. We'll respond within the time required by law (usually within 30 days) and may need to verify your identity first.
California and other US state residents: we don't sell or "share" personal information for cross-context behavioural advertising, and we won't discriminate against you for exercising your rights. You may also complain to your local data protection authority or, in India, approach our grievance contact below and then the Data Protection Board of India.
13. Children & child safety
The App is intended for users who are at least 18 years old, or the age of majority in their jurisdiction. By creating an account, you confirm that you meet this age requirement. We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent) without verifiable parental consent. If we learn that a child has provided personal information without such consent, we will delete the account and the information promptly.
We have a zero-tolerance policy against child sexual abuse and exploitation (CSAE). Read our full Child Safety Standards, including how to report concerns.
14. International data transfers
Our service providers, including Google, may store and process data in India and in other countries. Where we transfer personal information across borders, we rely on appropriate safeguards such as the providers' standard contractual clauses and security commitments, and we comply with applicable cross-border transfer rules.
15. How the Aimray team contacts you
The Aimray team may contact you from time to time to tell you about features and functionality of the App. We may contact you for either "service" or "sales" reasons through email, SMS, in-app messages or telephone calls. Calls will come from a regular mobile or landline number, not from the "140" or "180" series. You can opt out of promotional communications at any time by replying STOP, using the unsubscribe link, or emailing info@aimray.com. We'll still send essential service messages, such as verification codes.
If you request Messaging API access on the Website, we email the address of the Google account you signed in with when we receive your request and when your request or a contact number is approved or not approved. These are service emails about your request, not marketing.
16. Website cookies, analytics & notifications
- Essential: a session cookie keeps the security check (captcha) on our forms working and keeps you signed in to your Website account until you sign out or close your browser, and your browser's local storage remembers your cookie and notification choices.
- Google sign-in: when you click "Continue with Google", Google and Firebase Authentication open a sign-in window and may use their own cookies and browser storage to complete the sign-in. We sign you out of Firebase in your browser as soon as your Website session starts. See Google's Privacy Policy.
- Analytics (optional): only if you click "Accept", we use Google Analytics for Firebase to understand how visitors use the Website. It may set cookies and collect your IP address, device and browser information and pages visited. You can change your choice at any time using "Cookie settings" in the footer.
- Push notifications (optional): if you enable notifications, your browser registers with Firebase Cloud Messaging and we may send you news about Aimray Business. You can turn them off at any time in your browser's site settings.
- Forms: when you submit a form we process the details you enter plus your IP address, browser and the page you came from, to respond to you and to prevent spam.
17. Google Play & Apple App Store disclosures
The Data safety section on Google Play and the App Privacy details on the Apple App Store summarise the data practices described in this policy. In short: the App collects contact information (phone number and name), user content (messages, photos, videos, audio, files and other content you share), identifiers (your user ID and push tokens) and, only when you share it, location. This data is used for app functionality, communication, security and account management; it is linked to your account, is not used to track you, and is not sold. Data is encrypted in transit and you can request deletion. Downloading the App from Google Play or the App Store is also subject to Google's and Apple's own privacy policies.
18. Changes to this policy
We may change this Privacy Policy from time to time, based on your comments or because of changes in our Services or the law. We'll update the "Last updated" date above and, for significant changes, notify you in the App or by other appropriate means before the changes take effect.
19. Contact us
If you have any questions about this Privacy Statement or want to exercise your rights, please write to us:
- Privacy and grievance contact: info@aimray.com
- App support: info@aimguru.com
- Child safety point of contact: Rajesh, info@aimguru.com
- Online: contact form