Privacy Policy

MeritsOnly ("Platform", "we", "us", or "our") is a product of NBN Ventures, a company registered in Bangalore, Karnataka, India. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, lead generation widgets, customer portal, and related services.

By accessing or using MeritsOnly, you agree to this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

1. Information We Collect

a) Information You Provide

• Account Registration: Business name, contact name, email address, phone number, and password when you sign up for a MeritsOnly account.
• Lead Form Submissions: Name, email, phone number, and any additional fields submitted through our lead generation widgets by end users visiting our customers' websites.
• Profile Settings: Timezone preferences, WhatsApp number, and other optional profile information.
• Communications: Any information you provide when contacting us for support or inquiries.

b) Information Collected Automatically

• Usage Data: Pages visited, features used, widget interactions, and referral sources.
• Device Data: Browser type, operating system, screen resolution, and IP address.
• Cookies & Similar Technologies: Session cookies for authentication, preference cookies for settings, and analytics cookies to improve our services.

2. How We Use Your Information

• To provide, operate, and maintain the MeritsOnly platform and services.
• To process and deliver leads captured through our widgets to the respective customer accounts.
• To send account-related notifications (activation emails, lead alerts, billing updates).
• To personalize your experience (timezone-based date display, niche-specific templates).
• To improve our platform through usage analytics and feedback.
• To detect, prevent, and address fraud, spam, and security issues.
• To comply with legal obligations and enforce our Terms of Service.

3. SMS / Text Messaging

MeritsOnly offers SMS text messaging as part of its notification services. By providing your phone number during account registration and checking the SMS consent checkbox, you expressly opt in to receive text messages from MeritsOnly.

a) Types of Messages

• Lead Notifications: Alerts when new leads are captured through your widget.
• Account Alerts: Security notifications, login alerts, and account status updates.
• Service Updates: Important changes to the platform, scheduled maintenance, and feature announcements.

b) Message Frequency & Rates

• Message frequency varies based on your account activity (e.g., number of leads captured, account events).
• Message and data rates may apply depending on your mobile carrier and plan.
• MeritsOnly does not charge additional fees for SMS messages; standard carrier rates apply.

c) How to Opt In

You opt in to receive SMS messages by checking the SMS consent checkbox during account registration on our signup page. This consent is separate from your agreement to our Terms of Service and Privacy Policy. You must explicitly check the SMS consent box to receive text messages.

d) How to Opt Out

• Reply STOP to any SMS message from MeritsOnly to immediately opt out of all text messages.
• Reply HELP to any message for assistance or contact support@meritsonly.com.
• You may also disable SMS notifications in your account settings within the customer portal.
• Opting out of SMS will not affect your account functionality — you will continue to receive notifications via email.

e) SMS Data Privacy

• Phone numbers provided for SMS are used solely for delivering the message types described above.
• We do not sell, share, or rent your phone number to third parties for marketing purposes.
• SMS messages are delivered through our third-party messaging provider (Twilio), which is contractually bound to protect your data.
• Your consent to receive SMS messages is not a condition of purchase. You may use MeritsOnly without opting in to SMS.

4. Data Encryption & Security

We take the security of your data seriously. All lead data submitted through our widgets is encrypted at rest using industry-standard AES-256 encryption. Lead information is only decrypted when an authorized customer explicitly requests to view it through their secure portal.

• All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• Passwords are hashed using bcrypt and are never stored in plaintext.
• Access to customer data requires authentication via JWT tokens with secure expiration policies.
• Our infrastructure is hosted on secure cloud servers with regular security audits.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following circumstances:

• Service Providers: Trusted third-party services that help us operate (e.g., email delivery via Resend, cloud hosting, payment processing). These providers are contractually bound to protect your data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
• With Consent: When you explicitly authorize us to share your information.

6. Cookies

We use cookies and similar tracking technologies to enhance your experience:

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format (e.g., CSV export of leads).
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.
• Objection: Object to processing of your data for specific purposes.

To exercise any of these rights, contact us at support@meritsonly.com. We will respond within 30 days.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account data: Retained for the duration of your account and for 90 days after deletion.
• Lead data: Retained as long as the associated customer account is active. Customers can delete individual leads from their portal.
• Usage analytics: Aggregated and anonymized data may be retained indefinitely for product improvement.
• Billing records: Retained for 7 years as required by Indian tax and accounting laws.

9. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

MeritsOnly is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

11. Applicable Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act). By using MeritsOnly, you consent to the processing of your data in accordance with applicable Indian law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users via email and update the "Last updated" date at the top of this page. Your continued use of the platform after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: