Privacy Policy

This Privacy Policy explains how TechTurf Technologies Ltd, London, operating the dmcart website and service ("we", "us", or "our"), collects, uses, stores, and shares information when you use our website, dashboard, and related services (the "Service"). TechTurf Technologies Ltd provides AI automation and WhatsApp messaging software for businesses.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Who this policy applies to

This policy applies to:

• Business users — owners, staff, and invitees who create or access a dmcart account
• Website visitors — people who browse our marketing site or legal pages
• End customers of businesses — people whose WhatsApp messages, names, or order details are processed on behalf of a business that uses dmcart

Customers connect their own WhatsApp Business Account to the Service using Meta Embedded Signup. Each customer controls its own WhatsApp account and may disconnect it at any time. When a business connects WhatsApp and processes customer messages, that business is typically the controller of customer personal data. We process that data as a service provider on the business's instructions, except where we act as controller for our own account and platform data.

2. Information we collect

2.1 Account and business information

• Name, email address, and password (stored in hashed form)
• Business name, location names, and related settings
• WhatsApp business number and channel configuration
• Team invites and role information

2.2 Order and operations data

• Customer records (name, phone number, location association, notes)
• Product catalogue, aliases, suppliers, and mappings
• Orders, line items, quantities, units, statuses, and review decisions
• Purchase orders, exports, and operational reports you generate
• Audit logs of important actions in the dashboard

2.3 WhatsApp and messaging data

Through the WhatsApp Business Platform, we use only the data authorised for the connected business account. This lets us send and receive messages, automate customer conversations, process customer orders, and provide messaging analytics for that customer.

• Message content received through connected WhatsApp channels (including text and, where enabled, media used for order capture)
• Sender identifiers (for example phone numbers) and timestamps
• Group or channel metadata needed to route and process orders
• Confirmation and other outbound messages sent on your behalf

2.4 Technical and usage data

• IP address, browser type, device information, and approximate location from IP
• Authentication session data and security-related logs
• Service health, error, and performance diagnostics

2.5 AI processing inputs and outputs

To extract products, quantities, and related fields from informal messages, we process message text (and related catalogue context such as product aliases) with automated systems, which may include third-party large language model providers acting as our processors. Extracted results and confidence signals may be stored with the order for review and fulfilment.

3. How we use information

We use information to:

• Provide, operate, and improve the Service
• Authenticate users and secure accounts
• Connect WhatsApp channels and process inbound/outbound messages
• Extract, structure, review, and confirm orders
• Maintain customer, product, supplier, and location records
• Generate purchase orders, exports, and operational reports
• Send service-related communications (for example account or security notices)
• Detect abuse, troubleshoot issues, and protect the Service
• Comply with legal obligations and enforce our terms

4. Legal bases (where applicable)

Where UK/EEA data protection law applies, we rely on one or more of the following:

• Contract — to provide the Service you sign up for
• Legitimate interests — to secure, improve, and operate the platform in ways that do not override individuals' rights
• Legal obligation — where we must retain or disclose information by law
• Consent — where required (for example certain marketing communications)

Businesses using dmcart are responsible for ensuring they have a lawful basis to process their customers' WhatsApp and order data.

5. How we share information

We may share information with:

• Infrastructure and service providers — hosting, databases, storage, queues, email, monitoring, and AI model providers that process data on our instructions
• Meta / WhatsApp — as needed to connect numbers, receive webhooks, and send messages through WhatsApp Business APIs
• Your organisation — other authorised users of your business account
• Professional advisers and authorities — where required by law, legal process, or to protect rights, safety, and security
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards

We do not sell personal data.

6. International transfers

We may process and store data in the United Kingdom, European Economic Area, and other countries where our providers operate. Where data is transferred internationally, we use appropriate safeguards required by applicable law (such as standard contractual clauses) where required.

7. Retention

We retain information for as long as needed to provide the Service, meet legitimate business needs (including security and dispute resolution), and comply with legal obligations. When you delete data in the dashboard or close an account, we will delete or anonymise personal data within a reasonable period, except where retention is required by law or needed for legitimate residual purposes (for example backups that expire on a rolling schedule).

8. Security

We use technical and organisational measures designed to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls, and encryption of sensitive credentials such as WhatsApp tokens where implemented. No method of transmission or storage is completely secure; if you believe your account has been compromised, contact us promptly.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Business users can update much of their account data in the dashboard. End customers should generally contact the business they ordered from first, since that business controls the customer relationship. You may also contact us using the details below, and you may have the right to lodge a complaint with a supervisory authority.

10. Cookies and similar technologies

We use essential cookies and similar technologies for authentication, session management, security, and core product functionality. We do not use these technologies for third-party advertising. You can control cookies through your browser settings, but disabling essential cookies may prevent login or other core features from working.

11. Children

The Service is designed for businesses and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate. Continued use of the Service after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact

TechTurf Technologies Ltd is the operator of the website and Service. For privacy questions or requests, contact us at privacy@dmcart.co or through your dmcart account support channel if available.

Related: Terms of Service