InviteBack Policies

InviteBack Terms of Service

Effective Date: 11 July 2026 Last Updated: 11 July 2026

These Terms of Service ("Terms") are the main agreement between your business and InviteBack. They explain what you can expect from us, what we expect from you, and what happens in the situations that matter most — payments, suspensions, disputes, and everything in between.

We've tried to write this the way we'd want it explained to us — plainly, and with the reasoning included. If anything feels unclear, our Policies page has a quick glossary, and you can always write to us directly.

---

Who You're Agreeing With

InviteBack is a software product owned and operated by Sahil Kumar, a sole proprietorship trading as salez.online, based in Chandigarh, India. When these Terms refer to "InviteBack," "we," "us," or "our," this is who's meant.

By creating a InviteBack account, your business ("you," "your," or "Business") agrees to these Terms. Clicking to accept, or simply continuing to use InviteBack after signup approval, creates a valid and binding agreement between you and InviteBack — Indian law (Section 10-A of the Information Technology Act, 2000) recognizes this kind of electronic acceptance the same way it would recognize a signed paper contract.

---

Who Can Use InviteBack

InviteBack is built for businesses, not individual personal use. To use InviteBack, you need to:

• Be at least 18 years old
• Have the authority to sign up and operate InviteBack on behalf of the business you're registering

Anyone can submit a signup application — but an application isn't the same as an active account. Every new Workspace needs to be manually approved before it goes live.

Why We Approve Accounts Manually

A few reasons, working together:

• To keep spam and fraud off the platform
• To make sure applicants are running a legitimate business
• To keep onboarding quality high, so support can actually help you well
• To make sure your WhatsApp setup goes smoothly from day one

We reserve the right to approve or reject any application at our discretion. We're not obligated to share a reason for a rejection, though we may choose to.

---

When We Might Suspend or End an Account

We want every legitimate business to succeed on InviteBack — these rules exist to protect that, for you and for everyone else using the platform.

Temporary Suspension

We may temporarily suspend a Workspace while we investigate or resolve an issue — for example, a billing problem, a spam complaint, or a security concern. Access during a suspension depends on the reason for it. A billing issue might mean limited access until payment is sorted out; a security or fraud investigation might mean immediate restriction. We can't promise the same level of access in every situation, because the right response genuinely depends on what's going on.

Permanent Termination

For serious or repeated violations — fraud, illegal activity, repeated spam, or serious platform abuse — we may permanently terminate an account. Where it's reasonably possible, we'll give you a chance to export your customer data first. But where immediate action is necessary — to protect against fraud, security threats, legal risk, or the platform itself — we reserve the right to terminate without waiting.

Reasons We Might Suspend or Terminate an Account

This list gives you a sense of what we're watching for, though it isn't exhaustive:

• Non-payment
• Fraud or chargebacks
• Spam complaints
• Messaging customers without proper consent
• Violating WhatsApp's own policies
• Violating our Acceptable Use Policy
• Illegal activity
• Security risks or attempts to abuse the platform

Reactivation

If your account was suspended for something minor — a billing hiccup, an accidental policy slip — we may restore it once the issue is resolved. If it was permanently terminated for fraud, illegal activity, or serious abuse, we're under no obligation to bring it back, and we reserve the right to decline future applications from the same business or individual.

If your suspension was temporary and your account is restored, your unused purchased credits come back with it. Promotional or free credits may not be restored. Where we terminate an account for cause, we reserve the right to treat remaining credits as forfeited.

Ending Your Own Account

You can request to close your account whenever you'd like. To confirm it's really you, we'll ask you to go through our support team first — this protects your data from being deleted by someone who isn't authorized to make that call.

---

Credits — The Short Version

InviteBack runs on a prepaid credit system: you buy credits, and they're used as you send campaigns and use eligible features. The full rules — onboarding credits, purchased credits, promotional credits, expiry, and manual adjustments — live in our Credit Policy, which is part of this agreement.

One important note up front: credits are a closed-loop entitlement to use InviteBack's own services. They're not money, a wallet, or a payment instrument — they can't be transferred, withdrawn, or exchanged for cash outside InviteBack.

---

Payments — The Short Version

We currently operate on a prepaid basis — no recurring subscription, though we may introduce one in the future under separate terms. Payments are processed through Razorpay, and we may accept manual/offline payments for larger business customers at our discretion.

The complete rules on invoicing, pricing changes, refunds, and chargebacks live in our Payments & Billing Policy and Refund Policy, both part of this agreement.

---

What You Can and Can't Do

Using InviteBack responsibly keeps the platform trustworthy for everyone — including your own WhatsApp delivery, which depends on InviteBack maintaining a good compliance standing with WhatsApp.

The full list of what's allowed and what isn't lives in our Acceptable Use Policy, which is part of this agreement. A few highlights worth knowing upfront:

• InviteBack is meant for messaging people you already have a real business relationship with — not cold outreach or purchased contact lists
• You're responsible for having proper consent before messaging anyone
• We may restrict a campaign or account immediately, without waiting for a formal suspension process, if continued activity threatens WhatsApp compliance or other businesses on the platform

---

WhatsApp and Third-Party Platforms

InviteBack integrates with WhatsApp using supported integration methods. You remain responsible for complying with WhatsApp's own Business Messaging Policies and for obtaining your customers' consent before messaging them.

We can't guarantee message delivery if WhatsApp or Meta suspends an account, changes their platform policies, or blocks delivery for any reason outside our control. Because our own service sometimes depends on how these third-party platforms operate, we may need to adjust InviteBack's pricing or features in response to changes on their end — if that happens, we'll give you reasonable notice.

---

Data Ownership and Privacy

Your business owns its customer data — full stop. InviteBack processes it to provide you the service, but we don't own it, sell it, or share it with other businesses.

The complete details on how we collect, use, and protect data live in our Privacy Policy and Data Retention & Deletion Policy, both part of this agreement.

---

Intellectual Property

What InviteBack Owns

InviteBack owns the platform itself — the software, source code, APIs, databases, workflow engine, design, branding, and underlying technology. When you use InviteBack, we give you a limited, non-exclusive license to use it while your account stays active and compliant with these Terms. This license isn't a transfer of ownership.

What You Own

You own the content you create — your message templates, workflow configurations, notes, tags, custom fields, and uploaded files. InviteBack owns the software that lets you create them, but never the creations themselves.

Feedback

If you send us feedback, ideas, or feature requests, we may freely use them to improve InviteBack without owing you anything in return. This doesn't affect ownership of any of your unrelated content.

Our Branding

Please don't use InviteBack's name, logo, or trademarks in a way that implies sponsorship, partnership, or endorsement without our written permission. Factual statements like "We use InviteBack" are always fine, as long as they're truthful.

Keeping Our Technology Ours

Please don't try to reverse-engineer, decompile, scrape, or extract InviteBack's source code, or use our confidential technology to build a competing service. That said, you're always free to leave InviteBack and use a different platform — this restriction is about protecting our own technology, not about restricting your choices.

---

Using InviteBack With Your Team or an Agency

You may authorize employees, consultants, or an agency to operate InviteBack on your business's behalf — but each Workspace should represent one business. An agency shouldn't run multiple unrelated businesses through a single Workspace. We may introduce dedicated agency or partner accounts in the future under separate terms.

Whoever you authorize to use your Workspace — an employee, a manager, an agency — their actions are treated as your business's actions. You're responsible for keeping your login credentials secure and managing who has access.

---

Service Availability

We work hard to keep InviteBack reliable, but as an early-stage platform, we don't currently offer a guaranteed uptime commitment or formal service-level agreement. We make commercially reasonable efforts to keep things running smoothly and will keep improving as we grow.

Beta and Experimental Features

From time to time, we may release features marked as beta or experimental. These may change, be modified, or be discontinued at any time, and may not be as reliable as our core features. They're not covered by the same expectations as the rest of the platform.

As-Is Basis

InviteBack is provided on an "as available" and "as is" basis. We can't guarantee uninterrupted or error-free operation, or perfect compatibility with every third-party platform — but we're continuously working to improve.

---

Limits on Our Liability

Given the nature of a growing platform integrating with third-party services we don't control (like WhatsApp, telecom providers, and payment gateways), we need to set some reasonable limits:

• InviteBack's total liability arising from your use of the service won't exceed the total amount your business paid us in the twelve months before the claim arose
• We're not liable for indirect or consequential losses — lost profits, lost revenue, lost business opportunities, reputational harm, or business interruption — particularly where these arise from something outside our control, like WhatsApp, Meta, internet connectivity, or telecom providers

These limits exist because we want to offer you a genuinely useful, affordably priced platform — and that's only possible if our exposure to open-ended liability is reasonably bounded.

---

If Something Outside Our Control Happens

We won't be responsible for delays or failures caused by events genuinely outside our reasonable control — natural disasters, government action, court orders, internet or cloud infrastructure outages, cyberattacks, changes to WhatsApp or Meta's platform, payment gateway outages, strikes, pandemics, regulatory changes, or the discontinuation of a third-party service we depend on.

---

If Your Use of InviteBack Causes a Claim Against Us (Indemnification)

If your business's use of InviteBack — including a breach of these Terms or our Acceptable Use Policy — leads to a legal claim, regulatory action, or loss for InviteBack, you agree to cover the reasonable costs that result. This isn't meant to be one-sided; it simply reflects that you're responsible for how you use the platform.

---

Support

We aim to provide timely, reasonable support during normal business hours, though we don't currently commit to a specific response time in these Terms. We may publish more specific support commitments separately, and these may change as we grow.

---

Using Your Name for Marketing

We'll only use your business's name, logo, testimonials, screenshots, or metrics in our own marketing with your explicit permission. Once granted, that permission covers the specific purpose agreed at the time, and you can withdraw it for future use whenever you'd like — though we may not be able to recall materials already published before your withdrawal.

---

Reporting a Security Issue

If you or a security researcher discovers a vulnerability in InviteBack, we'd genuinely appreciate hearing about it. Our full Responsible Disclosure Policy explains how to report it and what protections apply to good-faith researchers.

---

Staying Within the Law

You agree to use InviteBack in compliance with all applicable laws, and not in any jurisdiction where doing so would be prohibited.

---

InviteBack's Role Under Indian Law

InviteBack acts as an intermediary under India's Information Technology Act, 2000 — meaning we provide a platform for businesses to communicate with their own customers, without controlling or authoring that content ourselves. In line with applicable law, we publish these rules for using our platform, maintain a grievance process (see our Privacy Policy for our Grievance Officer's details), and will act on lawful takedown requests when required.

---

If We Update These Terms

We may update these Terms as InviteBack evolves. For routine updates, continuing to use InviteBack after the change takes effect means you've accepted it. For changes that materially affect your existing rights, pricing commitments, or introduce new fees, we'll ask for your explicit acceptance instead of relying on continued use alone.

We'll notify you of changes by email, an in-app notice, or another reasonable method.

---

If InviteBack's Ownership Changes

We may assign or transfer these Terms if our business structure changes — for example, if we incorporate as a company, or if InviteBack is acquired — as long as your rights under these Terms aren't materially reduced. You can't transfer or assign your own account to someone else without our prior written approval.

---

Operational Communications

As part of providing the service, we'll send you operational emails — invoices, payment confirmations, security notices, policy updates, and account status changes. These aren't optional, since they're part of how we run the service safely. Marketing emails are separate, and you can unsubscribe from those anytime without affecting the operational ones.

---

If a Dispute Comes Up

These Terms are governed by the laws of India, and any disputes will be handled by the courts of Chandigarh, India.

---

A Few Standard but Important Details

Entire Agreement. These Terms, together with our Privacy Policy, Acceptable Use Policy, Credit Policy, Payments & Billing Policy, Refund Policy, Data Retention & Deletion Policy, and Responsible Disclosure Policy, make up the complete agreement between you and InviteBack. This is so that informal conversations, demos, or marketing materials don't create confusion about what was actually promised.

If One Clause Doesn't Hold Up. If a court finds any part of these Terms invalid or unenforceable, the rest of the Terms remain fully in effect.

Language. These Terms are authoritative in English. We may offer translations in Hindi, Punjabi, or other languages for convenience, but if there's ever a conflict, the English version governs.

What Survives if Your Account Ends. Even after your account closes, a few things continue to apply where relevant: payment obligations for amounts already owed, acceptable use violations, indemnification, limitation of liability, dispute resolution, governing law, intellectual property rights, legal retention obligations, and any claims or liability that arose before termination.

---

Need Help?

If any part of these Terms doesn't make sense, or you just want to talk through how something applies to your business, write to us at support@inviteback.in. We built InviteBack to be genuinely useful for businesses like yours — these Terms are here to keep that relationship fair, not to make it complicated.

InviteBack Privacy Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

At InviteBack, we help small and medium businesses stay in touch with their customers. Doing that well means handling data responsibly — both yours, and the data of the customers you message. This policy explains exactly how we do that.

If any term here feels unfamiliar, check our Policies page for a quick glossary — we also re-explain the important ones as they come up below.

---

Two Kinds of Data We Handle

Before anything else, it helps to understand that InviteBack deals with two different categories of personal data, and we treat them differently.

Your business's own information — your name, phone number, email, billing details, and how you use InviteBack. For this data, InviteBack is the Data Fiduciary — the DPDP Act's term for whoever decides why and how personal data is used. We decide why we collect your billing details (to charge you correctly) and your phone number (to reach you about your account).

Your customers' information — the contacts, phone numbers, and chat history you upload or generate while using InviteBack to message your own customers. For this data, your business is the Data Fiduciary, and InviteBack is only the Data Processor. We process this data because you've instructed us to, in order to help you run your business. We don't decide why your customers are contacted — you do.

This distinction matters throughout this policy, so we'll call it out again wherever it's relevant.

---

Data Ownership — The Short Version

You own your customers' data. Full stop. InviteBack stores and processes it on your behalf, but we don't own it, we don't sell it, and we don't use one business's customer data to help another business.

If you ever leave InviteBack, your customer relationships leave with you.

---

What We Collect

From Your Business

• Your name, business name, phone number, and email address
• Billing and payment details (processed through Razorpay — we don't store your full card details ourselves)
• Login credentials and account activity
• Support conversations you have with us

From Your Use of InviteBack

• The contacts, phone numbers, notes, tags, and custom fields you upload or create
• Message and campaign history sent through the platform
• Workflow configurations and templates you build
• Usage patterns — which features you use, how often, and how the platform performs for you

Automatically, Through Cookies and Similar Technology

We use a few standard categories of web technology to make InviteBack work properly:

Category	What It's For
Authentication & session cookies	Keeping you logged in securely
Security cookies	Protecting your account from unauthorized access
Preference cookies	Remembering your settings so you don't reset them every visit
Analytics tools	Helping us understand how InviteBack is used, so we can improve it
Performance & error monitoring	Catching bugs and slowdowns before they affect you

Essential cookies (authentication and security) are required for InviteBack to function — there's no way to turn these off and still use the platform. Non-essential cookies, like analytics, can be controlled where applicable law gives you that choice. As InviteBack grows, we may introduce additional analytics or product-improvement tools within these same categories.

---

Why We Use Your Data

We use the information above to:

• Provide, operate, and maintain InviteBack
• Process your payments and issue invoices
• Approve, manage, and support your account
• Detect and prevent fraud, spam, and abuse
• Comply with legal obligations, including tax and regulatory requirements
• Communicate with you about your account, billing, and important updates
• Improve InviteBack — see the next section for exactly how

---

Aggregated and Anonymized Data

To keep improving InviteBack, we may use data that's been aggregated and anonymized — meaning it can no longer identify any specific business or individual — for purposes like:

• Improving platform performance and reliability
• Improving spam and fraud detection
• Understanding which features are working well
• Building anonymous industry insights (for example, "average response time across restaurants using InviteBack")
• Improving our AI-powered features
• Security analysis

We draw a hard line here. Even with anonymized data, InviteBack will never:

• Sell your data, or any customer's data, to anyone
• Share identifiable customer information from one business with another business
• Use identifiable customer data to market another business's products or services
• Train public, external AI models using identifiable customer data

Your raw customer data always stays yours. Only anonymized, aggregated patterns are ever used to make InviteBack better for everyone.

---

Your Responsibility for Your Own Customers

Since your business is the Data Fiduciary for your customers' data, you're responsible for:

• Having a proper legal basis and, where required, consent before messaging someone through InviteBack
• Not uploading purchased or scraped contact lists
• Responding to your own customers if they ask to access, correct, or delete their personal data — InviteBack will reasonably assist you with this where technically feasible, but the request should come to you first, since you're the one with the direct relationship
• Complying with any special legal protections that apply to a customer's data — for example, the DPDP Act's additional rules around processing a minor's personal data, if any of your customers are minors

InviteBack relies on your representation that you have the right to contact the people you upload.

---

How We Store and Protect Data

Your data may be processed or stored using infrastructure operated by InviteBack or trusted service providers, in jurisdictions appropriate for reliably operating the platform. As InviteBack grows, this infrastructure may evolve.

Where personal data is transferred outside India, we'll do so in a way that complies with applicable Indian law — including not transferring data to any country the Indian government has specifically restricted, if such a restriction is ever notified.

We use reasonable technical and organizational safeguards appropriate to the sensitivity of the data we hold, including encryption for backups and access controls limiting who can view your data internally.

No system is perfectly secure, and we can't guarantee against every possible risk — but we take this seriously, and we tell you what happens if something goes wrong in the next section.

---

If a Data Breach Happens

If we become aware of a confirmed personal data breach affecting your business's data, we'll notify affected businesses without undue delay — taking into account applicable legal requirements and the practical need to first investigate and contain the incident properly. We won't promise an artificial timeline like "within 24 hours" if that would come at the cost of understanding what actually happened and fixing it correctly.

---

How Long We Keep Data

We only keep personal data for as long as it's needed to provide the service, comply with the law, or resolve disputes. The full details — including what happens when you delete your account, and how long backups are retained — are in our Data Retention & Deletion Policy.

A quick preview: even where you ask us to delete something, we may need to retain limited records for legal or tax purposes — for example, GST invoices, which Indian law requires businesses to retain for several years.

---

Exporting Your Data

As long as your account is active and in good standing, you can export your own business's customer data at any time. We may offer this in one or more commonly used, machine-readable formats — the exact format may evolve as InviteBack develops, but the ability to take your data with you won't go away.

---

Your Rights

Under the DPDP Act, individuals (Data Principals) generally have rights to access, correct, and request erasure of their personal data, along with the right to file a grievance about how their data is handled.

• If you're a business using InviteBack: these rights apply to your own account information, and you can exercise them by writing to us at support@inviteback.in.
• If you're a customer of a business that uses InviteBack: these rights apply to your data too — but since the business you interacted with is the Data Fiduciary for your information, your request should go to that business directly. InviteBack will support the business in fulfilling it wherever we reasonably can.

---

Grievance Officer

In accordance with Indian law, we've designated a Grievance Officer to handle privacy-related complaints:

Grievance Officer: Sahil Kumar Contact: support@inviteback.in

Unlike the data breach timeline above, this is a fixed commitment required under applicable Indian regulations: we aim to acknowledge grievances within 24 hours and resolve them within 15 days.

---

Changes to This Policy

We may update this Privacy Policy from time to time as InviteBack evolves. We'll notify you of material changes the same way we notify you of changes to our Terms of Service — through email, an in-app notice, or another reasonable method. Continued use of InviteBack after a routine update means you've accepted it; for changes that materially reduce your rights, we'll ask for your explicit acceptance instead.

---

Need Help?

Questions about how your data — or your customers' data — is handled? Write to us at support@inviteback.in. We'd always rather explain clearly than leave you guessing.

InviteBack Acceptable Use Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

InviteBack only works if the businesses on it are trustworthy — both because your own customers deserve that, and because WhatsApp only keeps working with platforms that keep their side of that bargain. This policy explains what "using InviteBack responsibly" actually means in practice.

If a term here feels unfamiliar, our Policies page has a quick glossary.

This Acceptable Use Policy is part of our Terms of Service — agreeing to the Terms means agreeing to this too.

---

We May Ask Questions

Sometimes the only way to know whether a business belongs on InviteBack — or whether an existing account is still operating the way it should — is to ask. We may request additional information during onboarding, or during an investigation into a report or a suspicious pattern, so we can protect both the platform and the legitimate businesses on it. This isn't about making things difficult for you; it's how we keep InviteBack trustworthy enough that WhatsApp, and your own customers, keep trusting it.

---

The Golden Rule

InviteBack exists to help you talk to people who already know your business — not to help you find new people to talk to.

That one idea is behind almost every rule below. If what you're doing grows a real relationship with someone who expects to hear from your business, you're almost certainly fine. If it's about reaching people who haven't asked to hear from you, it almost certainly isn't.

---

Who This Applies To

Everyone who touches your Workspace (your business's account inside InviteBack) is covered by this policy — you, your employees, and any agency or consultant you've authorized to operate it on your behalf. As our Terms of Service explain, their actions are treated as your business's actions, so it's worth sharing this policy with anyone you give access to.

---

What InviteBack Is For

• Messaging customers — people who've bought from you, inquired with you, or otherwise have a real, ongoing relationship with your business
• Running campaigns, automations, and workflows to serve those existing relationships better
• Managing your own customer data — contacts, tags, notes, and message history — to run your business more efficiently

---

What You Can't Do

Contacting People Without a Real Basis

• Upload purchased, scraped, or rented contact lists
• Message people who haven't given you a proper basis to contact them — see "Consent Comes From You" below
• Use InviteBack for cold outreach, cold sales prospecting, or any messaging where the recipient wouldn't recognize your business

Spam and Deceptive Messaging

• Send unsolicited bulk messages, chain messages, or anything a reasonable person would call spam
• Impersonate another person, business, or brand
• Use misleading sender names, deceptive links, or false claims about your product, pricing, or identity
• Send phishing attempts, malware, or any link designed to compromise a recipient's device or accounts
• Misuse AI-generated content — for example, to impersonate a real person, fabricate reviews or testimonials, or mislead a customer about who or what they're speaking with
• Impersonate InviteBack, its employees, representatives, or support staff without written permission

Illegal or Harmful Content

• Anything illegal under Indian law or the law of the jurisdiction you're messaging into
• Content that harasses, threatens, or abuses another person
• Content promoting violence, hate, or discrimination
• Sexually explicit content, or anything sexualizing a minor — this applies with zero exceptions and zero tolerance

Misusing the Platform Itself

• Unless InviteBack provides a dedicated agency or partner account, each Workspace should represent one business, as our Terms of Service explain
• Attempting to manipulate, exploit, or defraud our credit system — the full rules on credits live in our Credit Policy, which is part of this agreement
• Attempting to copy, reverse-engineer, scrape, or reproduce InviteBack's underlying technology to build a competing product — our Terms of Service cover this in more detail
• Using InviteBack's APIs or automation features in a way that circumvents WhatsApp's own rate limits or platform policies
• Attempting to bypass InviteBack's own rate limits, campaign safeguards, scheduling controls, or anti-spam protections

---

Businesses We Don't Support

Beyond specific actions, there are some categories of business InviteBack doesn't support at all — regardless of how carefully they're run. These include:

• Illegal products or services
• Counterfeit goods
• Gambling or betting services where prohibited
• Adult services
• Political campaigning or election messaging
• Pyramid schemes or MLM-style scams
• Sale of controlled drugs without proper authorization
• Weapons or illegal firearms
• Businesses operating without a legally required license
• Any other activity prohibited under applicable law

If your business falls into a category that's unclear, or close to one of these lines, we may ask for additional information before approving or continuing your account.

---

Consent Comes From You

Since your business is the Data Fiduciary for your customers' data — you're the one who decides why and how they're contacted — the responsibility for having a proper basis to message someone sits with you, not with InviteBack.

In practice, that means before you message someone through InviteBack, you should be confident that:

• They have an existing relationship with your business (a purchase, an inquiry, a signup, or similar), or
• They've otherwise given you a clear basis to contact them, consistent with the DPDP Act and any other law that applies to your business

InviteBack relies on your representation that this is true for every contact you upload. We don't independently verify each contact's consent — we can't — but we do watch for the patterns that usually mean consent wasn't obtained honestly, like high complaint rates or lists that behave like purchased data.

---

Staying in Good Standing With WhatsApp

Because InviteBack sends messages through WhatsApp, our entire platform's delivery depends on maintaining a healthy compliance standing with them. A few practical rules that follow from that:

• Honor opt-outs immediately — if someone asks to stop hearing from you, stop
• Keep your complaint and block rates low; WhatsApp watches this closely, and so do we
• Follow WhatsApp's own Business Messaging Policies, in addition to this one
• Don't attempt to disguise message content or intent to get around WhatsApp's template approval or category rules

If your account's messaging patterns put InviteBack's own WhatsApp standing at risk, we may need to act quickly — restricting a campaign or feature before we've gone through a full suspension process. Our Terms of Service explain this in more detail under "When We Might Suspend or End an Account."

---

What Happens If This Policy Is Violated

We won't repeat the full suspension and termination process here — it's already covered in our Terms of Service, and repeating it in two places risks the two versions drifting apart over time. In short: violations of this policy are one of the reasons an account can be suspended or terminated, and the severity of the response depends on the severity and pattern of what happened.

---

Reporting a Violation

If you come across another business misusing InviteBack — spam, harassment, or anything else this policy covers — let us know at support@inviteback.in. Every report is investigated fairly before any action is taken; a report on its own doesn't automatically lead to a suspension, since we look into what actually happened first. If what you've found is a security vulnerability rather than a policy violation, our Responsible Disclosure Policy explains the right way to report that instead.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service — email, an in-app notice, or another reasonable method. Continued use after a routine update means you've accepted it; for changes that materially affect your obligations, we'll ask for explicit acceptance instead.

---

Need Help?

Not sure if something you're planning falls inside or outside this policy? Ask us first at support@inviteback.in — we'd much rather help you get it right upfront than deal with a suspension later.

InviteBack Credit Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

InviteBack runs on credits instead of a traditional subscription — you use what you need, when you need it, without committing to a recurring plan before you're ready to. This policy explains exactly how credits work, so there's never any confusion about what you're spending and why.

This Credit Policy is part of our Terms of Service, which briefly introduces credits under "Credits — The Short Version." This is the complete version of those rules.

---

What Credits Are

Credits are a closed-loop entitlement to use InviteBack's own services — sending campaigns, running workflows, and using other eligible features. They are not money, a wallet, or a payment instrument. Credits can't be transferred to another Workspace, withdrawn as cash, or exchanged for anything outside InviteBack.

We built it this way deliberately: it lets us keep pricing simple and usage-based, without the complexity (or the regulatory weight) of operating something that resembles a financial product.

---

Promotional Credits vs. Purchased Credits

We treat these two credit types differently, so it's worth being clear about which is which.

Promotional Credits

Promotional Credits are credits we give your Workspace for free — most commonly, 300 promotional credits after your account is approved, so you can try InviteBack properly before spending anything. We may also grant Promotional Credits for referrals, goodwill, or other reasons at our discretion.

Depending on the specific promotion, Promotional Credits may expire, and as explained below, aren't restored in every situation where Purchased Credits are.

Purchased Credits

Purchased Credits are credits your Workspace buys and pays for. Because you've paid for them, we treat them with more protection — they remain valid for as long as your Workspace stays active, and they're the credits that come back to you if a temporary suspension is resolved, as explained in our Terms of Service.

Purchased Credits have no monetary value outside InviteBack and can't be transferred to another Workspace or exchanged for cash.

---

How Credits Are Earned

• Onboarding — 300 Promotional Credits, granted automatically once your account is approved
• Purchases — Purchased Credits, bought at the pricing shown at checkout, processed through Razorpay
• Occasional promotions — referral rewards, goodwill credits, or other Promotional Credits we may grant from time to time, at our discretion

---

How Credits Are Consumed

Credits are deducted as you use eligible features — primarily sending campaigns and messages, and using certain automation or workflow features. Where InviteBack has both a Promotional and Purchased balance, we generally consume Promotional Credits first, so the credits you paid for last longer.

Exact per-action credit costs are shown in the product itself, since these may be adjusted as WhatsApp's own costs or InviteBack's feature set evolve.

---

Manual Adjustments

We may manually adjust your credit balance in a few situations — for example, correcting a billing error, resolving a support issue, or issuing goodwill credits after a service problem. We'll always be transparent about why an adjustment was made if you ask.

---

Expiry

Purchased Credits remain valid for as long as your Workspace remains active — they don't expire on their own. Promotional Credits are different: depending on the specific promotion, they may expire after a set period, reflecting the fact that they were a gift rather than a purchase. Wherever Promotional Credits carry an expiry, the applicable window is always shown in the product, so you'll never be caught by surprise.

---

Corrections

If you believe your credit balance is wrong — a campaign was charged incorrectly, or an adjustment doesn't look right — write to us at support@inviteback.in and we'll investigate. Where we find an error on our end, we'll correct it.

---

Fraud and Misuse

Attempting to manipulate, exploit, or defraud the credit system — for example, creating multiple Workspaces to collect repeated onboarding credits, or exploiting a bug to generate credits you haven't paid for — is a violation of our Acceptable Use Policy and may result in suspension or termination, as described in our Terms of Service.

---

What Happens to Credits If Your Account Is Suspended or Terminated

We won't repeat the full suspension and termination rules here — they live in our Terms of Service. As a quick summary specific to credits: if a temporary suspension is resolved, your unused Purchased Credits come back with it, though Promotional Credits may not be restored. If your account is terminated for cause, remaining credits — Promotional or Purchased — may be treated as forfeited.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service. Continued use after a routine update means you've accepted it; for changes that materially reduce the value of credits you already hold, we'll ask for explicit acceptance instead.

---

Need Help?

Questions about your credit balance, an onboarding grant, or anything else in this policy? Write to us at support@inviteback.in — we're happy to walk through exactly what happened with your account.

InviteBack Payments & Billing Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

Money matters deserve to be predictable. This policy explains exactly how pricing, payments, invoicing, and taxes work on InviteBack, so there's never a surprise on your bill.

This Payments & Billing Policy is part of our Terms of Service, which briefly introduces payments under "Payments — The Short Version." This is the complete version of those rules.

---

Who This Is For

InviteBack is a B2B product — we sell to businesses, not individual consumers, and this policy is written with that relationship in mind.

---

How Pricing Works

InviteBack currently operates on a prepaid basis — you buy credits as you need them, rather than committing to a recurring subscription. We may introduce a subscription option in the future, under separate terms we'll communicate clearly before any Workspace is moved onto it.

Current pricing is always shown in the product before you buy. We don't believe in pricing that requires a sales call to understand.

---

How You Pay

Payments are processed through Razorpay. We don't store your full card details ourselves — Razorpay handles that as our payment processor, using their own security standards.

For larger business customers, we may accept manual or offline payments (like a bank transfer) at our discretion, where that makes more sense for how your business operates.

---

Invoices and GST

Every payment generates an invoice, available in your account. Where applicable, GST is calculated and shown on your invoice in line with Indian tax law. If your business needs its GSTIN reflected on invoices for input tax credit purposes, you can add it in your billing details, and we'll include it going forward.

We're a sole proprietorship — Sahil Kumar, trading as salez.online — and our invoices reflect that as the contracting entity, consistent with our Terms of Service.

---

Failed Payments

If a payment fails — an expired card, insufficient funds, a bank decline — we'll let you know and give you a chance to retry with a different payment method. Credits from a failed payment are never granted; they're only added once payment actually succeeds.

---

Chargebacks

If you dispute a charge directly with your bank or card network instead of contacting us first, we treat that as a chargeback. Since chargebacks affect InviteBack's own standing with Razorpay, an unresolved chargeback may result in account suspension while we investigate — consistent with the suspension process in our Terms of Service. If you have a billing concern, reaching out to support@inviteback.in first is always faster and keeps your account in good standing while we sort it out.

---

Price Changes

We may adjust pricing as InviteBack evolves — for example, in response to changes in WhatsApp's own costs, or as we add new capability to the platform. We'll give you reasonable notice of any pricing change before it takes effect. Credits you've already purchased keep working the way they did when you bought them; a price change only affects future purchases.

---

Taxes

You're responsible for any taxes associated with your own business's operations and revenue. We're responsible for correctly charging, collecting, and remitting GST on our own invoices to you, as required under Indian law.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service. Continued use after a routine update means you've accepted it; for changes that materially affect your existing pricing commitments, we'll ask for explicit acceptance instead.

---

Need Help?

Questions about an invoice, a failed payment, or how GST is calculated on your account? Write to us at support@inviteback.in — billing questions get a real answer, not a runaround.

InviteBack Refund Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

Since InviteBack runs on prepaid credits rather than a subscription, refunds work a little differently than you might expect from other software. This policy explains when a refund is possible, and how we think about requests that fall in between.

This Refund Policy is part of our Terms of Service and works alongside our Payments & Billing Policy and Credit Policy.

---

Our Philosophy on Refunds

We'd rather earn your business every month than lock you into a purchase you regret — that's part of why InviteBack is prepaid in the first place. At the same time, credits are a usage entitlement, not a returnable product, and Purchased Credits already used to send real campaigns to real customers can't simply be "returned." Because of that, refunds on InviteBack are handled at our discretion, case by case, rather than through a fixed automatic formula.

---

Situations Where a Refund May Be Considered

• A genuine payment error — you were charged twice, or charged the wrong amount
• A confirmed platform issue that prevented you from using credits you'd purchased
• Purchased Credits that remain completely unused, requested within a reasonable time of purchase

---

Situations Where a Refund Is Generally Not Available

• Credits that have already been used to send campaigns or messages
• Promotional Credits — since these were never paid for, there's nothing to refund
• Dissatisfaction with WhatsApp's own delivery, policies, or platform changes outside our control
• A change of mind after credits have been active in your account for an extended period
• Accounts suspended or terminated for a violation of our Acceptable Use Policy or Terms of Service

---

How We Review a Request

When you write in requesting a refund, we look at what happened, when, and how many credits (if any) remain unused on your account. We aim to be fair rather than rigid — a genuine payment error is treated differently from a simple change of mind, and we'll always explain our reasoning either way.

---

Time Window

Refund requests should be made within a reasonable time of the purchase in question — generally, the sooner you reach out after noticing an issue, the more straightforward the review. There's no need to worry about hitting an exact deadline down to the day; if something seems wrong, tell us and we'll look into it.

---

Discretion

Even outside the situations listed above, we may choose to issue a refund or goodwill credit where we think it's the right thing to do — and equally, meeting the criteria above doesn't guarantee a refund in every circumstance, since context matters. We try to use this discretion the way we'd want it used on us: fairly, and with an explanation.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service. Continued use after a routine update means you've accepted it.

---

Need Help?

If something about a payment feels wrong, write to us at support@inviteback.in with what happened and when. We'd rather understand the full picture than apply a rule that doesn't fit your situation.

InviteBack Data Retention & Deletion Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

Knowing exactly how long your data sticks around — and what happens when you decide to leave — shouldn't require guesswork. This policy lays out precisely that.

This Data Retention & Deletion Policy is part of our Terms of Service and expands on the "How Long We Keep Data" section of our Privacy Policy.

---

While Your Account Is Active

For as long as your Workspace is active, we keep your business's data — and the customer data you've uploaded or generated — so InviteBack can actually work: sending messages, running workflows, and showing you your own history and analytics.

---

If Your Account Is Suspended

A suspension isn't a deletion. While your Workspace is suspended — for example, during a billing issue or an investigation — your data is retained as-is, so that a resolved suspension can restore your account exactly as it was, including your customer data and configurations.

---

If Your Account Is Closed or Deleted

When you close your account, or we delete it following termination, we remove your business's and your customers' personal data from our active systems within 30 days of the closure being confirmed — except where we need to retain specific records for the legal and backup reasons described below.

Closing your account is a one-way door once this window passes, so we always recommend exporting anything you want to keep before requesting closure — see "Exporting Before You Go" below.

---

Backup Retention

Even after data is removed from our active systems, it may persist in encrypted backups for a limited additional period — generally up to 90 days — before those backups themselves are rotated out. This is a standard practice to protect against data loss from technical failures, not an extension of active access to your data.

---

Legal Retention

Some records need to stick around longer than the rest, because Indian law requires it. The clearest example: GST invoices, which must be retained for at least 6 years from the relevant filing period, regardless of when your account closes. Where a legal dispute, regulatory inquiry, or law enforcement request requires us to preserve specific records longer, we'll retain only what's necessary for that purpose.

---

Exporting Before You Go

As long as your account is active and in good standing, you can export your own business's customer data at any time, in a commonly used, machine-readable format — as described in our Privacy Policy. We strongly recommend doing this before requesting account closure, since recovery isn't possible once the deletion window has passed.

---

Restoring a Closed Account

If you change your mind shortly after closing your account, contact us — if your data hasn't yet passed the 30-day active-deletion window, we may be able to restore it. Once that window has passed, or once backups have rotated past the 90-day mark, restoration generally isn't possible, so we'd encourage reaching out sooner rather than later if you're unsure.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service. Continued use after a routine update means you've accepted it; for changes that shorten your ability to export or restore data, we'll give you clear advance notice.

---

Need Help?

Thinking about closing your account, or want to double-check what happens to a specific piece of data? Write to us at support@inviteback.in before you make the call — we'd rather help you plan it right than have you lose something by accident.

InviteBack Responsible Disclosure Policy

Effective Date: 11 July 2026 Last Updated: 11 July 2026

Security researchers who take the time to report a vulnerability responsibly are doing InviteBack — and every business that trusts us with their customer data — a genuine favor. This policy explains how to report a security issue, and what protection you have for doing it in good faith.

This Responsible Disclosure Policy is part of our Terms of Service, which briefly points to it under "Reporting a Security Issue."

---

Our Philosophy

No system is perfectly secure, and we'd much rather learn about a weakness from a good-faith researcher than have it discovered some other way. If you report something responsibly, our goal is to fix it quickly and treat you fairly — not to make the process adversarial.

---

Scope

This policy covers security vulnerabilities in InviteBack itself — our web application, APIs, and infrastructure we directly control. It doesn't cover:

• Vulnerabilities in WhatsApp, Meta, Razorpay, or other third-party platforms we integrate with — those should be reported directly to them
• Issues that require physical access to a device, or social engineering of InviteBack staff
• Spam, scam, or Acceptable Use Policy violations by another business on InviteBack — those go to support@inviteback.in under our Acceptable Use Policy instead

---

Safe Harbor

If you make a good-faith effort to comply with this policy while researching or reporting a vulnerability, we won't pursue legal action against you for that research, and we'll consider your access authorized for the purpose of this policy. This protection applies as long as you:

• Report the issue to us promptly and don't disclose it publicly until we've had a reasonable opportunity to investigate and resolve it
• Avoid accessing, modifying, or deleting data that isn't your own
• Avoid degrading InviteBack's service for other businesses — for example, through denial-of-service testing
• Stop testing once you've established a vulnerability exists, rather than continuing to dig into live customer data

---

How to Report

Email us at support@inviteback.in with:

• A description of the vulnerability and its potential impact
• Steps to reproduce it
• Any proof-of-concept code or screenshots that help us understand it quickly

Please avoid including real customer data in your report if you've encountered any — a description of what you saw is enough for us to investigate. We ask that you not publicly disclose a vulnerability until we've had a reasonable opportunity to investigate and resolve it.

---

What Not to Do

• Don't access, download, or share data that isn't yours, even to prove a vulnerability's severity
• Don't run automated scanners or load tests against production without checking with us first
• Don't publicly disclose a vulnerability until we've had a reasonable opportunity to investigate and resolve it
• Don't attempt to extort InviteBack — reports made in exchange for payment demands fall outside this policy's protection entirely

---

What to Expect From Us

We aim to acknowledge a good-faith report within a few business days and keep you reasonably updated as we investigate and fix the issue. Timelines depend on the severity and complexity of what's been found, so we won't promise a fixed number of days for every case — but we will keep communicating rather than going quiet.

---

Recognition

We're grateful for responsible disclosures, and where a researcher would like acknowledgment, we're happy to credit them once a fix is out — with their permission. We don't currently run a paid bug bounty program, but we may consider one as InviteBack grows.

---

Changes to This Policy

We may update this policy as InviteBack evolves, using the same notice process described in our Terms of Service.

---

Need Help?

Found something and not sure if it fits this policy? Write to us at support@inviteback.in — when in doubt, tell us anyway. We'd rather hear about a non-issue than miss a real one.