Privacy Policy

QuickAuth is a developer API product operated by CodeLamda Technologies Pvt. Ltd., a private limited company incorporated under the Companies Act, 2013, with its registered office at:

7th Floor, APMC, Krushi Bazaar, 704 Sahara Darwaja, Begampura,
Surat, Gujarat 395003, India

The Service provides OTP delivery via SMS, WhatsApp, and voice; WhatsApp OTP (passwordless authentication); and marketing broadcast campaigns through a unified, developer-facing API.

References to "we", "us", "our", or "QuickAuth" in this Policy refer to CodeLamda Technologies Pvt. Ltd.

• Account information: Name, email address, company name, and phone number provided during registration.
• API usage data: Request logs, endpoint usage, error rates, and message delivery statistics.
• Technical data: IP addresses, API call timestamps, and delivery status records.
• Billing information: Invoicing and payment details. We do not store payment card data directly — this is handled by our payment processors.

When a Developer makes an API call to send an OTP or message, they submit their end user's contact information to us. We receive and process only:

• Phone number — for SMS, WhatsApp, or voice delivery.
• Email address — where applicable and submitted by the Developer.

• To provision, manage, and secure API access.
• To send account-related communications and service notifications.
• To monitor usage, detect abuse, and enforce our Terms of Service.
• To provide technical support.
• To generate aggregate, anonymised analytics to improve the Service.
• To comply with legal obligations under applicable Indian law and any other applicable jurisdiction.

End user contact information is used solely to deliver the OTP or message requested by the Developer's API call. We do not use this data for profiling, advertising, marketing to end users, or any purpose beyond fulfilling the Developer's instruction.

We do not sell your data. We do not share data for advertising. We share information only in the following limited circumstances:

To deliver OTPs and messages, we transmit end user phone numbers or emails to the relevant delivery infrastructure. This may include:

• Telecom carriers — for SMS and voice OTP delivery.
• Meta Platforms, Inc. — for WhatsApp message delivery, subject to Meta's privacy policy.

These providers act as sub-processors and are bound by their own data processing agreements and privacy policies.

We may disclose data when required by law, court order, or a government or regulatory authority, including under the Information Technology Act 2000, the Digital Personal Data Protection Act 2023, or any other applicable legislation.

In the event of a merger, acquisition, restructuring, or sale of assets involving CodeLamda Technologies Pvt. Ltd., data may be transferred as part of that transaction. We will provide reasonable notice before data becomes subject to a materially different privacy policy.

After the applicable retention period, data is securely and irreversibly deleted or anonymised.

Under applicable data protection law, including India's Digital Personal Data Protection Act 2023 (DPDP Act):

• QuickAuth acts as a Data Processor when processing end user data on the Developer's instruction.
• Each Developer is the Data Fiduciary / Data Controller for their end users and is solely responsible for the lawful basis on which they collect and share end user data with us.

By using the QuickAuth API, Developers represent and warrant that they have obtained all necessary consents and authorisations required to share end user data with QuickAuth for the purpose of message delivery.

We implement industry-standard technical and organisational measures to protect your data, including:

• TLS 1.2+ encryption for all data in transit.
• API key authentication with rate limiting and anomaly detection.
• OTP values are not stored in plaintext after delivery.
• Access controls limiting internal access to data on a need-to-know basis.
• Regular security reviews and vulnerability assessments.

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to rights and freedoms, we will notify affected parties as required by applicable law.

QuickAuth is a developer API intended exclusively for use by businesses and developers. The Service is not directed to, and should not be used in connection with, individuals under the age of 16 years.

We do not knowingly collect or process personal data from children under 16. If a Developer uses the QuickAuth API in a manner that involves end users under the age of 16, the Developer bears full responsibility for obtaining any additional consents required under applicable law (including parental consent where required).

If we become aware that we have inadvertently collected personal data from an individual under 16, we will take prompt steps to delete such data from our systems.

• Right to access — Request a summary of personal data we hold about you.
• Right to correction — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of data no longer necessary for the purpose it was collected.
• Right to grievance redressal — Lodge a complaint with our Grievance Officer (see Section 11).
• Right of nomination — Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

• Rights of access, rectification, erasure, restriction of processing, data portability, and objection.
• Right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, please contact us at contact@quickauth.in. We will respond within 30 days.

Our infrastructure is primarily operated from India. If you access the Service from outside India, your data may be transferred to, stored, and processed in India. By using the Service, you consent to this transfer.

Where we transfer data internationally — for example, to messaging carriers or cloud infrastructure providers located outside India — we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable law.

In accordance with the Information Technology Act 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Digital Personal Data Protection Act 2023, we have designated a Grievance Officer to address complaints and queries regarding the processing of personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Policy at quickauth.in/privacy-policy with a revised effective date.
• Send an email notification to registered Developer accounts at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of those changes. If you do not agree to the updated Policy, you must discontinue use of the Service before the effective date.

For any privacy-related questions, requests, or concerns, please contact us: