Privacy Policy

Effective Date: 1st June 2025
Last Updated: 1st June 2025

MRPLN LLC (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information, as well as your rights as user and your customers under global and regional data protection laws, we provide tailored solution for maximum complying with different data protection lows for Enterprises including the General Data Protection Regulation (GDPR), Saudi Personal Data Protection Law (PDPL), UAE Federal Law No. 45 of 2021, and relevant US privacy laws.
Please reach us to have tailored Data protection specific measures for your data (applies for Enterprise Subscription plans)

By using our website or services,
you agree to this Privacy Policy and our Data Processing Agreement (DPA) and Terms of Use .
you agree/Opted in to receive communication from MRPLN with contact information you providing to us for marketing and other logistic purposes .
No mobile information , Emails or any personal data will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purpose other than data processing mentioned Below.
If you disagree, please refrain from using our platform.

1. Who We Are

Data Controller: MRPLN LLC
Contact Information:
- Email: contact@mrpln.com
- Address: 5830 E 2nd St, Ste 7000 #21096, Casper, Wyoming 82609, USA

For privacy-related questions or concerns, please contact us.

2. Information We Collect

We collect the following types of information:

2.1 Direct Personal Data

Information you provide directly, such as:

Name, email address, phone number, WhatsApp number, organization, city of residence, and billing information and Business essential information required for using our services or other user required information for essential for providing the service and communication.

2.2 Indirect Personal Data

Information about third parties (e.g., your customers) that you upload to our platform. This may include names, emails, phone numbers, WhatsApp number, content preference, address, profession, education or other data. this information you collect from your customers and authorized to share with us to provide the service requested, after Getting and confirm required consent.

For Direct and indirect Personal data
No mobile information , phone numbers, Emails or any personal data will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent please refer to the consent and data management section ; this information will not be shared with any third parties for marketing purpose other than data processing mentioned Below.

2.3 Device Information

Automatically collected data when you visit our website, such as:

Browser type, IP address, time zone, and cookie identifiers.
Interaction data, including pages viewed and referring URLs.

2.4 Data We Collect as a technology provider and data processer

- Account information (name, email, business details)

- WABA credentials (encrypted, for API access only)

- Template content (for Meta submission and approval)

- Campaign data (for automation and analytics)

- Customer data (for targeted campaigns)

- Usage analytics (for service improvement)

3. How We Use Your Data

We process your data for the following purposes:

Provision of Services: To provide and improve our platform, process transactions, and respond to inquiries.
Analytics and Insights: To understand usage patterns and enhance user experience.
Compliance and Legal Obligations: To comply with applicable laws and regulations.
AI-Powered Features: To deliver AI-driven services, where applicable.

4. Roles and Responsibilities

Data Controller:
- For personal data uploaded to our platform, you (the user) act as the data controller, responsible for ensuring compliance with data protection laws, including obtaining necessary consents from your customers. see Consent & User Data | MRPLN
Data Processor:
- We act as the data processor, handling data solely on your instructions as outlined in our Data Processing Agreement (DPA).
- Read the Data Processing Agreement (DPA) at our Terms of Use.
Sub-Processors:
- We use trusted third-party providers for data processing, Data Storage, Hosting, email notifications, SMS communication serves, WhatsApp communication serves, building and Managment of webpages and other services, including but not limited to:
  - AWS (Amazon web servers), Microsoft, WordPress, SendGrid, Twilio, OpenAI, DeepSeek, Google, and others.

A full list of sub-processors is available upon request.

5. Data Transfers

Storage Location:
- Customer records are visible and accessible only to the user who uploaded them.
- Data is encrypted at rest and in transit, stored on secure infrastructure (e.g., AWS in UAE / USA).
- Default Data storage region is United States (AWS USA).
- Enterprise users can request Data storage Localization by contacting us before plan start and registration.
- MRPLN does not use, share, or sell any customer data beyond the nature of data processing on behalf of our users. Data Processing Agreement
- Users can delete contacts at any time and request full removal for compliance purpose.
Cross-Border Transfers:
- Where data transfers store location are necessary (e.g., for support or analytics), we implement safeguards such as Standard Contractual Clauses (SCCs) for GDPR compliance.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request access to your data. and data entered for your customers.
Correction: Request correction of inaccurate data.
Erasure: Request deletion of your data (subject to legal obligations).
Restriction/Objection: Restrict or object to certain processing activities.
Withdraw Consent: Withdraw consent where processing is based consent.

To exercise your rights, contact us or send written signed consent by email.

7. Data Security

We implement robust measures to protect your data, including:

Encryption of data.
Role-based access controls.
Regular audits and vulnerability assessments.

8. Data Retention

Direct Data: Retained as long as necessary for the purposes outlined or as required by law.
Indirect Data: Retained only as long as necessary to provide services or fulfil legal obligations.
Deletion: Upon account termination or request, data will be securely deleted or anonymized. based on availability and resourced timelines.

9.Tech Provider Data Processing

WhatsApp Business API Integration

When you use MRPLN's WhatsApp Business API integration services:

- We act as your technical provider for Meta's WhatsApp Business API

- We store your WABA credentials securely for API access

- We process template submissions and manage account health on your behalf

- We maintain compliance with Meta's WhatsApp Business API policies

- We do not access or store the content of your WhatsApp messages

Sender Management Data

- Email sender credentials are encrypted and stored securely

- SMS sender credentials are encrypted and stored securely

- WhatsApp Business Account credentials are encrypted and stored securely

- All sender data is used solely for campaign delivery and analytics

Data Retention

- WABA credentials: Retained for active accounts only

- Template data: Retained for approved templates

- Analytics data: Retained for 24 months

- User consent: Retained for compliance purposes

10. Customers Consent & Data Management

Consent Collection & Opt-In Process (User Responsibility)
MRPLN does not collect or request customer consent directly.
The sole responsibility for obtaining valid consent lies with the business or marketer (the MRPLN user).
Before uploading or adding a contact to the platform, users must:
- Collect clear and verifiable consent from the individual to receive communication through the selected channel (WhatsApp, SMS, Email) .
- Confirm this consent in the MRPLN interface by manually checking the consent confirmation box during customer creation (via web form or Excel upload).
- Ensure that the consent was informed, specific, and compliant with applicable laws.
- To use MRPLN SMS Toll-Free number user include this in the consent " You Agree to Receive Marketing massages through MRPLN Toll free Number "
This confirmation means that:
- The user's customer explicitly agreed to receive communications from your business or marketing messages from MRPLN and SMS on your behalf
- You, as the user, are accountable for storing proof of this consent. MRPLN may require Valid documentation of how users collected the needed consents.
- MRPLN records your confirmation of consent for compliance purposes but does not verify or manage consent collection on your behalf.
✅ Consent Confirmation is a mandatory step before saving or uploading any customer. No data will be added to the MRPLN system unless the user explicitly confirms that prior consent has been obtained.
How Consent is Collected by Users
Before a marketer adds a customer to MRPLN, they are required to collect consent through one or more of the following methods:
- ✅ A checkbox on their website or landing page
- ✅ A sign-up form where the customer agrees to receive Marketing communication from your business or through MRPLN on your behalf.
- ✅ Verbal or written confirmation (e.g., during a sales call or clinic visit)
This opt-in occurs before any data is uploaded to MRPLN. When uploading customer data, users must explicitly confirm they collected proper consent (as seen in the screenshot above). MRPLN retain the right at any time to ask for documented Consent collected from the user's customers.
📎 Screenshot of consent confirmation checkbox is provided below for reference.
. Opt-Out & Unsubscribe (MRPLN / USER Managed)
While consent collection is your responsibility, MRPLN helps enforce opt-out controls to protect end customers and comply with anti-spam laws:
- MRPLN automatically appends unsubscribe instructions to outbound emails when the user has not included them.
- For SMS and WhatsApp, we recommend and support using keywords like "STOP" .,"UNSUBSCRIBE" or "Opt-out".
- If an end customer opts out, MRPLN will:
  - Flag and exclude the contact from future communication.
  - Remove them from the active contact list uploaded by the user.
  - Ensure no further messages are delivered to that contact from the same business.
⚠️ MRPLN users are expected to respect opt-outs and should not re-upload the same contact unless fresh consent is collected.
Your Responsibility as a User
By using MRPLN, you acknowledge and agree to:
- Collect and confirm valid opt-in consent before adding any customer.
- Not upload any customer without explicit permission for the intended communication channel.
- Handle all regulatory duties related to customer data and consent.
- Respect MRPLN’s policies and privacy commitments.
- Data will be stored in United States region, unless you user are on Enterprise plan and request another region.
- you agree to this Privacy Policy and our Data Processing Agreement (DPA) and Terms of Use .
- you agree/Opted in to receive communication from MRPLN with contact information you providing to us for marketing and other logistic purposes .
  If you disagree, please refrain from using our platform.

11. Data Breach Notification

We will notify you promptly of any data breaches and assist you in meeting legal obligations.

12. Updates to This Policy

We reserve the right to update this Privacy Policy without further notice for minor changes. For significant changes, we will notify you via email or platform notifications before updates take effect. The latest version will always be accessible on our website.

Contact Us

For privacy Policy-related inquiries, contact:
MRPLN LLC
5830 E 2nd St, Ste 7000 #21096, Casper, Wyoming 82609, USA
Email: contact@mrpln.com