Privacy Policy
Last updated: 15 August 2026
Adopted by sms-ocean: 7 October 2026
Corporate policy source: Capricorncorp Privacy Policy
Who We Are & Scope
This Privacy Policy is issued by Capricorncorp and its group company Moonshot AI Private Limited (CIN U70200PB2023PTC060276), a company incorporated in India with its registered office at E-260 B (A), Industrial Area Phase 8-B, S.A.S. Nagar (Mohali), Punjab 160055, India (together, “we”, “our”, “us”).
It applies to:
- our websites, including capricorncorp.com and sms-ocean.com;
- our cloud, hosting, email, and development services;
- our business-messaging products — including sms-ocean and our business-messaging platform built on the WhatsApp Business Platform (operated by Moonshot AI Private Limited), and Callgenix.
Our Roles Under Data Protection Law
We act in two distinct capacities:
Data Fiduciary / Controller
For data about our own customers and website visitors — accounts, billing, enquiries, support — we decide how and why data is processed.
Data Processor
For end-user data our business customers process through our messaging platforms (contact lists, message content, delivery data), we act only on the customer’s instructions. The business you interact with is responsible for that data.
Information We Collect
- Personal data: name, email address, phone number, business details, and other contact details when voluntarily submitted (enquiries, account signup, KYC/GST verification for messaging services).
- Billing data: invoicing details, GSTIN, payment records (processed by RBI-authorised payment processors — we do not store card details).
- Messaging data (as processor): recipient phone numbers, message content and templates, delivery/read status, and consent records that our business customers manage on our platforms.
- Usage data: IP address, browser type, pages visited, time spent, and diagnostic data.
- Cookies: to keep you signed in, improve user experience, and analyse usage patterns.
How We Use Your Information
- To provide, operate, and secure our websites and services
- To route and deliver messages our business customers send through our platforms
- To communicate with you (service notices, support, newsletters you opt into)
- To bill correctly, including GST-compliant invoicing
- To prevent fraud, spam, and abuse — including enforcing messaging-platform policies
- To comply with legal obligations under Indian law
Messaging Services & WhatsApp
Moonshot AI Private Limited operates business-messaging services built on the WhatsApp Business Platform, provided by Meta. When businesses use our platform to message their customers on WhatsApp:
- Opt-in is mandatory. Businesses must obtain your consent before sending you messages, and we maintain consent and opt-out records on their behalf.
- Opt-out is honoured. Replying STOP (or an equivalent instruction) to a business suppresses further marketing messages to you from that business through our platform.
- Meta processes message data as the platform provider, per its own terms; message templates are reviewed and approved by Meta before use.
- We never sell message data, and we use it only to provide the service to the business you are interacting with.
SMS services operate under India’s TRAI DLT framework: sender IDs and content templates are registered and scrubbed per regulation.
Data Security
We use encryption in transit, encryption at rest for sensitive fields, role-based access control, audit logging, and tenant isolation across our platforms. Our infrastructure is hosted in our own data-centre environment in India. No method of transmission over the Internet is 100% secure, but we align our incident response with CERT-In requirements.
Data Retention
- Account and billing data: for the life of the account plus up to 8 years, as required for tax and company-law purposes.
- Messaging data: retained per the business customer’s configuration (default 12 months).
- Security logs: minimum 180 days, per CERT-In directions (2022).
- Consent and opt-out records: while the related contact remains messageable and for 3 years after.
Your Rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you have the right to:
- Access the personal data we hold about you
- Request correction or completion of your data
- Request erasure of your data (see Data Deletion below)
- Withdraw consent at any time, where processing is based on consent
- Nominate another individual to exercise your rights, as provided by law
- Raise a grievance with our Grievance Officer (see Contact below)
If your data was submitted to us by a business using our messaging platforms, please contact that business first — we will support them in fulfilling your request as their processor.
Data Deletion Requests
To request deletion of your personal data:
- Email privacy@capricorncorp.com (or info@capricorncorp.com) from the email address associated with your data, with the subject “Data Deletion Request”.
- Tell us which service your data relates to (website enquiry, account, or messages from a specific business).
- We will acknowledge your request within 72 hours and complete deletion within 30 days, except where retention is required by law (e.g., tax records, security logs).
Platform end-users: if a business messaged you through our platform, we will suppress your number for that business and delete associated data held as processor, on their instruction or yours as the law provides.
Children's Privacy
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 18 without verifiable guardian consent, and our services are not directed at children.
Third-Party Links
Our websites may contain links to third-party websites. We are not responsible for their privacy practices or content.
International Transfers
Our own systems store platform data in India. Message delivery on WhatsApp involves processing by Meta, which may process data outside India under its own terms and safeguards.
Changes to This Policy
We may update this Privacy Policy periodically. We will post the updated policy on this page with a revised “Last updated” date; material changes will be notified to account holders by email or in-product notice.
Contact & Grievance Officer
Grievance Officer (Information Technology Rules, 2021 / DPDP Act, 2023)
- Name: Amrish Verma
- Email: info@capricorncorp.com · privacy@capricorncorp.com
- Phone: +91 160 4030967
- Address: Moonshot AI Private Limited, E-260 B (A), Industrial Area Phase 8-B, S.A.S. Nagar (Mohali), Punjab 160055, India
