Alert SoundBoxPrivacy Policy
This Privacy Policy explains how Bottercc ("we", "us", "our") collects, uses, stores, shares and protects personal data when you use the Alert SoundBox mobile application, the website at soundbox.bottercc.com and the related services (the "Service"). For the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we are the data fiduciary for the personal data described here. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.
- Information we collect
- Notification and SMS access
- How we use information
- Consent
- Who we share information with
- Data stored on your device
- Retention
- Security
- Your rights and choices
- Account and data deletion
- Children
- Transfers outside India
- Website
- Changes to this Policy
- Contact and grievance officer
1. Information we collect
1.1 Information you give us
- Mobile number, used to create and sign in to your account, and to verify it with a one-time code sent on WhatsApp;
- Name (your own or your shop's name), which you enter when you register, and which team members you invite may see;
- Settings and choices, such as speaker language, announcement speed and repeat, theme, and which payment apps to listen to.
1.2 Payment alert information
When the app recognises that a notification or SMS on your device reports an incoming payment, it records: the amount, the payer's name or UPI identifier as shown in the message, the name of the app or bank it came from, the time, the UTR or reference number where present, and how it was detected (notification or SMS). This information is stored on your device and, so that your history can be backed up and restored, on our servers. We do not store the full text of your notifications or SMS messages.
1.3 Subscription and billing information
If you subscribe, we keep your subscription status, plan, dates, the identifiers of your Razorpay subscription and payments, the amounts and the payment status and method (for example "UPI"). We do not receive or store your UPI PIN, card numbers, bank account credentials or any other payment instrument details. Those are handled by Razorpay and your bank.
1.4 Device and technical information
Device model, operating-system and app version, a random device identifier created by the app, the Firebase Installation ID and push-notification token (to send you alerts), IP address and request logs (for security, abuse prevention and rate limiting), and records of calls to our service providers (such as whether a verification code was delivered) used to diagnose problems.
1.5 Team information
If you create or join a team, we store the link between the team owner and the members, the invitations sent, and the payment alerts shared with members (amount, payer name and time). Members can see each other's name and mobile number.
1.6 Truecaller
If you choose "Continue with Truecaller", Truecaller verifies you on your device and, with your approval, shares your name and verified mobile number with us. We do not receive any other Truecaller data.
2. Notification and SMS access (prominent disclosure)
Alert SoundBox's core purpose is to announce payments you receive, so it asks for two sensitive permissions. We explain exactly how they are used:
| Permission | Why we need it and what we do with it |
|---|---|
| Notification access | To read notifications posted by the payment apps you have selected (for example UPI apps and banking apps) and detect incoming payments. Notifications from other apps are ignored. Only the parts needed to identify a payment (amount, payer, time, reference) are kept. |
| Read / receive SMS | To detect incoming payments from bank and UPI SMS messages, including when the device is offline, and to capture the UTR number. The app looks only at messages that look like payment messages; personal messages, one-time passwords and other SMS are not stored or uploaded. |
| Foreground service, battery and auto-start settings | To keep running in the background so that payments are announced on time. |
This information is used only to provide the payment-announcement, history, reporting and team features. It is not used for advertising, profiling, credit scoring or any purpose unrelated to the Service, and we do not sell it. You can revoke either permission at any time in your device settings; the related features will then stop working.
3. How we use information
- to create your account, verify your mobile number and keep you signed in;
- to detect, announce, display, back up and restore your payments, and to prepare your reports;
- to deliver team alerts and invitations and to send you push notifications about the Service, your subscription and important changes;
- to process subscriptions and payments, and to detect and prevent payment fraud and abuse;
- to keep the Service secure, to enforce rate limits, diagnose faults and improve payment detection;
- to respond to your requests and complaints; and
- to comply with law and to establish, exercise or defend legal claims.
4. Consent
We process your personal data on the basis of your consent, which you give by registering, by choosing to grant the permissions described above, and by using the features that rely on them. You can withdraw consent at any time as described in Section 9; withdrawal does not affect processing already carried out, and may mean we can no longer provide some or all of the Service. We may also process data where the law permits or requires it without consent, for example to comply with a legal obligation.
5. Who we share information with
We do not sell your personal data. We share it only as follows:
| Recipient | Purpose and data |
|---|---|
| Razorpay Software Private Limited | Processing subscription payments and UPI AutoPay mandates. Receives your mobile number, a placeholder email address generated by us, and the payment details you enter in its checkout. |
| Fast2SMS (WhatsApp messaging) | Delivering your one-time verification code. Receives your mobile number and the code. |
| Truecaller | Optional sign-in verification, only if you choose it. |
| Google (Firebase Cloud Messaging and Installations; Google Play) | Delivering push notifications and generating an installation identifier; app distribution and updates. |
| Hosting and infrastructure providers | Storing and serving our database and servers, under confidentiality and security obligations. |
| Your team | If you are in a team, payment alerts and your name and number are visible to the other team members as described above. |
| Authorities and advisers | Where required by law, court order or a lawful request from a government authority, or to protect our rights, users or the public; and to our professional advisers under duties of confidentiality. |
If we are involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy. These providers process data on our behalf or under their own privacy policies, which we encourage you to read.
6. Data stored on your device
Your payment history, settings and detection rules are also stored locally in the app so that it works offline. This local data is removed when you clear the app's storage or uninstall the app. Payments detected while the phone is offline are uploaded when it reconnects.
7. Retention
We keep personal data only as long as needed for the purposes in this Policy. Account details and payment history are kept while your account is active. When you ask us to delete your account (Section 10) we delete or anonymise your personal data within 30 days, except that we keep records we are legally required to keep (for example billing and tax records, which are held for the period required by Indian law) and records needed to resolve a dispute or prevent fraud. One-time verification codes expire within minutes and are stored only in hashed form. Service logs are kept for a limited period for security and diagnostics.
8. Security
We use reasonable technical and organisational safeguards: encrypted connections (HTTPS) between the app and our servers, hashed one-time codes, short-lived access tokens, per-IP rate limiting, access controls on our systems, and verification of payment confirmations with our payment partner before access is granted. No system is completely secure, and we cannot guarantee absolute security. Please keep your device and mobile number secure. If a personal-data breach affecting you occurs, we will notify you and the relevant authority as required by law.
9. Your rights and choices
Under applicable law, including the Digital Personal Data Protection Act, 2023, you may:
- ask for a summary of the personal data we hold about you and the third parties it is shared with;
- ask us to correct inaccurate or incomplete data (you can also change your name in the app's Profile settings);
- ask us to erase your personal data;
- withdraw your consent, including by removing app permissions in your device settings or by uninstalling the app;
- nominate another person to exercise your rights in the event of your death or incapacity; and
- make a grievance to us and, if unresolved, to the Data Protection Board of India.
To exercise these rights, write to us at support@bottercc.com from or mentioning your registered mobile number. We may need to verify your identity first, and we will respond within a reasonable time and in any case within the period required by law. You can turn off push notifications in your device settings, and stop optional features such as team alerts from within the app.
10. Account and data deletion
You can ask us to delete your account and the personal data associated with it at any time by emailing support@bottercc.com with the subject "Delete my account" from, or stating, your registered mobile number. The steps are also on our Contact page. We will confirm the request and complete the deletion within 30 days, subject to the exceptions in Section 7. Deleting your account does not cancel a recurring payment mandate: please also cancel your Alert SoundBox AutoPay in your UPI or payment application so that no further payments are taken. Uninstalling the app does not by itself delete the data held on our servers.
11. Children
The Service is intended for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Transfers outside India
Some of our service providers, including Google, may process data on servers located outside India. Where personal data is transferred outside India, we do so in accordance with applicable law and take steps to ensure it is protected by appropriate safeguards.
13. Website
Our website at soundbox.bottercc.com is informational. It does not use advertising or tracking cookies and does not require you to provide personal data. Like most servers, ours may log basic request information (such as IP address and pages requested) for security and to keep the site running.
14. Changes to this Policy
We may update this Policy from time to time. If we make a material change we will notify you in the app or by another reasonable means before it takes effect, and we will update the "Last updated" date above. Your continued use of the Service after the change takes effect means you accept the updated Policy.
15. Contact and grievance officer
If you have questions about this Policy, or a complaint about how your personal data is handled, please contact our Grievance Officer:
Bottercc
Grievance Officer, Alert SoundBox
Email: support@bottercc.com
Website: soundbox.bottercc.com
We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days of receipt. Please also read our Terms of Service, which apply to your use of the Service.