Privacy policy
Last updated:
Who we are
Codeinsyt (“we”) operates this website and notify-me, our messaging platform for businesses. This policy explains how we handle personal data in both. You can reach us at info@codeinsyt.com or at 19 Bluebell Street, Accra, Ghana.
Website: what we collect
Only what you send us through the contact form: your name and email address, optionally your phone number and organisation, and your message.
This website sets no cookies and uses no analytics, advertising or third-party tracking.
Website: why we use it
We use your details solely to reply to your enquiry and to continue any conversation you start. We never sell your data, and we do not use it for marketing without your consent.
Website: how it is processed
Your message is delivered to our team by email through our own notification service. Our servers keep standard technical logs, such as IP address and request time, to protect the site against abuse.
notify-me: the service and our role
notify-me sends SMS, email and WhatsApp messages on behalf of business customers, through an API and an admin console.
For the people our customers message (“recipients”), the business customer is the controller: it decides whom to message and why, and we process recipients' data only on its instructions. For our customers' account data, Codeinsyt is the controller.
notify-me: what we process
About recipients: phone numbers and email addresses, message content and template values, delivery statuses and timestamps, and the message references returned by delivery providers.
About business customers: business name, contact details, sender IDs, API keys (stored only as hashes), prepaid balance and the billing ledger.
For WhatsApp: the WhatsApp Business Account ID, phone number ID, display phone number and message templates, and a business access token. The token is stored encrypted with AES-256-GCM and is never returned by the API.
notify-me: one-time passcodes
When a customer sends a one-time passcode, we store only a salted hash of the code, never the code itself. Codes expire after 5 minutes. The message carrying the code is never stored in readable form: an encrypted copy is kept only until it is handed to the delivery provider, then destroyed.
notify-me: data from Meta and WhatsApp
Data we receive from Meta through the WhatsApp Business Platform is used only to provide the messaging service to the business that connected its WhatsApp account. We never sell it and never use it for advertising or profiling.
Delivery status updates that Meta sends us are accepted only after we verify Meta's signature on them.
notify-me: who receives data
To deliver messages we use these providers: Meta Platforms (WhatsApp Business Platform, Cloud API) for WhatsApp; the SMS gateways Arkesel, mNotify, Hubtel and SMSGlobal for SMS; and an email relay (SMTP) provider for email. Each receives only what it needs to deliver the message.
We do not sell personal data or share it with anyone else, unless the law requires us to.
How long we keep it
Website enquiries: for as long as needed to handle them and for up to 24 months afterwards, unless the law requires longer. Technical logs are deleted after 30 days at most.
notify-me: message text and template values are wiped 90 days after sending. The rest of each message record, such as recipient, status and cost, is deleted after 13 months. Replies people send to a business over WhatsApp or Telegram are deleted after 30 days. A business can also erase a person's contact details at any time, which removes them from its message records. Billing ledger entries are kept as financial records for as long as the law requires. Deleted data can remain in encrypted backups for up to 30 days until they are overwritten.
How we protect it
All traffic to our website and platform is encrypted in transit (HTTPS). Provider credentials and WhatsApp access tokens are stored encrypted, and API keys are stored only as hashes. Access to data is limited by scoped API keys and by admin authorisation.
Deleting your data
If you received a message sent through notify-me, contact the business that sent it, as it decides what is kept about you. You can also email info@codeinsyt.com with the phone number or email address concerned.
Businesses can disconnect WhatsApp at any time in the notify-me console, which deletes the stored access token. You can also remove the app's access in your Facebook settings under Business Integrations. To delete your whole notify-me account, email info@codeinsyt.com from the contact address registered on the account, so we can confirm the request is yours.
We complete deletion requests within 30 days. Billing ledger entries that the law requires us to keep are retained for the required period.
Your rights
You can ask to access, correct or delete your personal data, or object to how we use it, by writing to info@codeinsyt.com. You may also complain to a data protection authority, such as Ghana's Data Protection Commission under the Data Protection Act, 2012 (Act 843), or the supervisory authority where you live.
Changes to this policy
If our practices change we will update this page. The date at the top shows the latest revision.