Partner Terms Of Use

Disclaimer

This document contains confidential and / or proprietary information. The content must not be disclosed to third parties without the prior written approval of Gupshup or one of its subsidiaries as appropriate (each referred to as "Gupshup").

No part of this document may be reproduced, stored in any retrieval system or transmitted in any form or by any means. This document includes information pertaining to Gupshup Technology. Duplication and distribution of this document without an authorized approval is strictly prohibited. It is the responsibility of the recipient to ensure that the document is not reproduced or circulated to external entities.

If you have received it by accident or inadvertent means you are responsible to destroy the document and bring it to the notice of securitycompliance@gupshup.io.

While Gupshup endeavors to ensure that the information in this document is correct and has been prepared in good faith, the information is subject to change, and no representation or warranty is given as to the accuracy or completeness of the information. Gupshup does not accept any responsibility or liability for errors or omissions or any liability arising out of its use by external recipients or other third parties.

I. Objective

These Terms of Use govern all access to and use of the Gupshup Partner Offering by Partner(s) registering on the Gupshup Partner Portal (partner.gupshup.io) and Enterprises registering through such Partners. By accessing or continuing to use the Gupshup Partner Offering, they agree to comply with and be bound by these terms, as amended from time to time by Gupshup.

II. Scope

These Terms apply to all Partner(s) who register on or access the Gupshup Partner Portal (partner.gupshup.io) and Enterprises registering for services through such Partners.

III. Definition

  1. Client(s)/Gupshup Partner(s): Any entity (Enterprise or Partner) who is the register owner of the associated Gupshup Wallet and that utilizes Gupshup's messaging services, either for its own communication or on behalf of third-party entities.
  2. Enterprise(s): A business entity using Gupshup's messaging services, specifically through a WhatsApp Business Account (WABA) linked to Gupshup's Meta BSP account or registering through a Partner.
  3. Partner(s): Those who have registered on and accessed the Gupshup Partner Portal (Partner.gupshup.io) to avail Gupshup Offerings.
  4. WABA: A WhatsApp Business Account (WABA) is a verified business account on WhatsApp created through Meta and managed via Business Service Providers like Gupshup, enabling Enterprises to use the WhatsApp Business API for large-scale customer communication.
  5. Wallet: The virtual prepaid balance associated with a Client used to purchase Gupshup services and to pay applicable WhatsApp fees.

IV. Gupshup Partner's Policy

A. Communication policy

Gupshup will communicate with Clients at the designated email address, provided during registering with Gupshup. It is the sole responsibility of each Client to maintain an active and accurate contact email for official notifications during all the time with their relation with Gupshup.

Partners may designate different email addresses for operational, financial, and compliance-related communications within the portal settings.

For Enterprises, the designated email must be confirmed either during WABA golive or through the prescribed API process.

Clients are expected to ensure that emails from Gupshup are not filtered or lost due to misconfigured inboxes or spam filters. All communications will be considered received once sent to the registered address.

B. Security

Clients must enable Multi-Factor Authentication (MFA) for all accounts associated with Gupshup. Failure to do so may result in operational restrictions and shall absolve Gupshup of any liability arising from unauthorized access.

Gupshup shall not be liable for any security incidents, including those occurring within its own systems or premises, where such incidents could have been prevented by the Client's enablement and use of Multi-Factor Authentication (MFA).

Even where MFA is enabled, Clients shall be solely responsible for securing authentication tokens, devices, credentials, etc (i.e., all the modes which can be compromised to seek access). Gupshup will not be held liable for breaches originating from Client-side lapses or compromised factors.

Partners may add users to the Gupshup Partner portal through the Settings section. Single account details is not permitted to be shared between multiple users for security purposes, and if shared it will amount to breach of terms. Further, the Partners shall be responsible for any security breach/or acts not intended.

Mandatory Compliance: By continuing to access the Partner portal, Partners confirm compliance with the MFA and account isolation protocols outlined above.

C. Log Retention, Investigation Support, and Refund Eligibility

Gupshup shall provide support for inquiries or investigations requiring access to message logs within seven (7) days from the date on which the relevant message was submitted to Gupshup. The Company shall have no obligation to retain or furnish message logs, or to provide any related support, for messages beyond this period.

Gupshup shall provide support for investigations related to delivery reports (DLRs) within thirty (30) days from the date on which the relevant message was submitted to Gupshup. Gupshup shall not be responsible for maintaining or retrieving DLR data, nor for providing related investigative support, for any submitted messages after the thirty (30) day window.

Gupshup shall provide support for investigations related to billing events only within thirty (30)days from the date on which the relevant message was submitted to Gupshup. The Company shall not be obligated to investigate, retrieve data, or provide support for billing-related inquiries raised outside this period.

Any refunds or credits, where applicable and granted at the sole discretion of Gupshup, shall only be considered for issues reported within the investigation windows specified in Clauses C.1 through C.3. No refunds, credits, or adjustments shall be issued for matters reported after the expiration of the applicable timeframes.

D. App migration policy

Eligibility for Migration: Gupshup permits any Enterprise application to register or log in through another Partner or directly via Gupshup, subject to the successful completion of Meta's registration process. If the associated WABA or phone number is already linked to an application managed by an existing Partner, the previous application will be automatically deregistered upon successful migration.

No Consent or Dues Clearance Required: Migration of a WABA or phone number to another Partner or directly to Gupshup does not require:

  • Prior consent or approval from the current Partner, or w.r.t outstanding dues, if any.

Enterprise's Financial Responsibility: Any outstanding dues payable to Gupshup by the Enterprise or Wallet owner will remain the responsibility of the Client, regardless of the migration of their WABA or phone number.

Post-Migration Data Retention: Following the successful migration, Gupshup reserves the right to delete the previously associated application and related data from its systems after a retention period of three (3) months, unless otherwise required under law for which the Enterprise need to inform Gupshup in advance. In such a scenario, the cost of retention shall be borne by the Enterprise.

E. App deletion policy

Inactivity-Based Deletion: Gupshup reserves the right to delete any application that remains inactive for a continuous period of ninety (90) days, where inactivity is defined as the absence of any message traffic initiated or processed through the app. In such scenario:-

No Prior Notice Requirement: No prior notice to the Clients/Gupshup Partners shall be issued w.r.t the deletion of app. It is the responsibility of the Clients/Gupshup Partners to ensure periodic usage to retain the app.

Effect of Deletion: Upon deletion, all configurations, linked credentials, and associated data related to the app may be permanently removed from Gupshup's systems, unless otherwise required under applicable law or contractual obligations.

Reactivation: Clients/Gupshup Partners whose apps have been deleted due to inactivity will be required to undergo the standard onboarding and registration process again should they wish to resume services.

F. Overdraft policy

Eligibility and Limit Determination: Gupshup may, at its sole discretion, extend an overdraft facility to Partners or Enterprise customers, subject to an internal evaluation of the account's usage, payment history, and risk profile. The maximum allowable overdraft limit shall be determined and communicated by Gupshup, and may vary across accounts.

Opt-In and Usage: Clients/Gupshup Partners may opt to use the overdraft facility within the prescribed limit. Usage of the overdraft implies acceptance of the terms outlined in this policy.

Interest, Fees and Charges: Gupshup reserves the right to levy service fees, interest, or penalties on the utilized overdraft amount. Such charges, if applicable, shall be communicated in advance and will be billed to the Wallet owner. Failure to pay these charges on time may result in suspension or withdrawal of the overdraft facility.

Right to Modify Limits: Gupshup reserves the right to revise, reduce or revoke the overdraft limit at any time, including reducing it below the currently outstanding overdraft amount based on risk assessment or non-compliance. Any such revision shall be communicated through written communication with a minimum thirty (30) days' prior notice to the Wallet owner (Partner or Enterprise).

Suspension and Automatic Hold: In the event of (i) breach of any material terms of the Gupshup Partner Policy, (ii) material deterioration in payment behavior, or (iii) regulatory or legal concerns, Gupshup may impose a temporary or permanent hold on the overdraft facility with immediate effect, pending further review or remediation by the Client(s)/Gupshup Partner(s).

Repayment Obligations: The Wallet owner (Partner or Enterprise) shall remain fully responsible for repaying any outstanding overdraft. Gupshup may require partial or full repayment by providing a thirty (30) days' written notice, and the Wallet owner agrees to settle the specified amount within the stipulated period. In case of default, Gupshup reserves the right to deduct dues from future Wallet recharges or recover through other legal or contractual means.

Renewal and Tenure: The overdraft facility, unless otherwise specified, shall be valid for a defined tenure and subject to review prior to renewal. Renewal shall not be automatic and shall depend on usage behavior, repayment record, and ongoing compliance with this policy.

Exception Handling: Requests for exceptions to the policy (e.g., temporary limit enhancement, waiver of interest, or repayment extension) must be submitted in writing and shall be considered on a case-by-case basis at the sole discretion of Gupshup. Any approval shall be recorded and acknowledged mutually.

G. Refund policy

Wallet balances maintained by Clients on the Gupshup platform are non-refundable under normal circumstances. Such balances may only be utilized as credits towards eligible services offered by Gupshup.

In exceptional cases where Gupshup, at its sole discretion, agrees to process a Wallet refund, the Wallet owner shall be solely responsible for:

  • Providing reasonable documentation to verify the legitimacy of the refund request, and
  • Ensuring and demonstrating that the refund does not result in a violation of any applicable anti-money laundering (AML) laws or regulations.

H. Unused commission policy

Commission Validity Period: Commissions earned between April 1 of a given year (Year 1) and March 31 of the following year (Year 2) (referred to as the "Commission Year") must be redeemed by March 31 of the subsequent year (Year 3).

Expiry of Unused Commissions: Any commissions not redeemed by April 1 of Year 3 shall automatically expire and be reversed from the Partner's account. Such expired commissions shall become unredeemable and shall not be reinstated under any circumstances.

E.g. If you earn a commission in June '22, you will have until March 31st '24 to redeem the commission for that month. After March 31st '24, the commission will lapse out from the Partner Portal account making it unredeemable.

I. Wallet deletion policy

Gupshup may delete any Client Wallet and forfeit any Wallet balance for any Wallet that has no transaction (either credit or debit) for two successive years.

Inactivity-Based Wallet Deletion: Gupshup reserves the right to permanently delete any Client Wallet that has had no transaction (credit or debit) for a continuous period of one (1) year.

Forfeiture of Balance: Upon such deletion, any remaining Wallet balance may be forfeited without further obligation or liability on the part of Gupshup. Wallet owners are advised to actively monitor and utilize their Wallet balances to avoid such forfeiture.

J. Other Conditions

Callback Management

  • Partners must register only HTTPS endpoints as callbacks.
  • All callbacks must include an HTTP authentication header with a valid API key or bearer token to ensure secure communication.
  • IP whitelisting shall not be used as the sole security measure for callbacks; token-based authentication is mandatory.
  • All callback endpoints must be capable of responding within 100 milliseconds (100ms) of receiving a request from Gupshup.
  • The callback endpoint must return an HTTP 200 (OK) or 202 (Accepted) status code upon successful processing.

Media Handling

  • Partners must avoid repeatedly uploading the same media files.
  • When sending messages with recurring media, Partners shall first upload the file to retrieve a media ID and reuse the same media ID across relevant messages to optimize performance and bandwidth.

API Integration Standards

  • Partners are required to use HTTP keep-alive / persistent connections wherever possible to improve efficiency and reduce connection overhead.
  • API calls should be structured and throttled in accordance with the API rate limits.

Authentication and Credential Management

  • Partners must periodically rotate API keys and authentication tokens to prevent misuse and enhance security.
  • Credentials must be stored and managed securely and must not be shared by the Partners; hardcoding keys in public repositories or exposing them in Clientside code is strictly prohibited.

Compliance with Meta Policies

  • Partners must stay updated with and adhere to all applicable Meta policies, including the WhatsApp Business and Tech Provider Program guidelines.
  • Gupshup shall not be responsible for any violations or penalties resulting from a Partner's non-compliance with Meta's evolving standards.

K. Term and Termination

Term:

These Terms shall commence upon the date of the Clients/Gupshup Partners registration on the Gupshup Partner Portal or usage of Gupshup messaging services and shall continue in full force and effect until terminated in accordance with the provisions below.

Termination by Either Party:

Either party may terminate their relationship with the other party by providing thirty (30) days' prior written notice, without assigning any reason.

Termination for Cause:

Gupshup may immediately suspend or terminate access to the Partner Portal or messaging services without notice in the event of:

  • A material breach of these Terms or the Partner Policy;
  • Fraud, misuse, or unlawful use of the platform;
  • Non-compliance with applicable laws or Meta policies;
  • Failure to make timely payments.

Termination Due to Regulatory Action or Platform Changes:

Gupshup may terminate the Terms with immediate effect if required to do so by law, regulatory authorities, or due to changes in Meta's policies or platform rules that impact Gupshup's ability to continue offering the Partner Portal or messaging services.

Effect of Termination:

Upon termination:

  • All rights and licenses granted to the Clients/Gupshup Partners shall immediately cease;
  • Any unpaid dues from Clients/Gupshup Partners shall become immediately payable;
  • Gupshup may delete previously associated application and related data from its systems after a retention period as per the applicable law, unless otherwise required under applicable law.
  • Any unused credits towards Clients/Gupshup Partners shall be refunded if the termination is due to closure of such services or due to Gupshup voluntary closure of such services only and not in any other case.

L. Survival:

V. Clauses relating to confidentiality, data retention, payment obligations, and governing law shall survive termination.

M. Intellectual Property Rights

All rights, title, and interest in and to the Gupshup Platform, APIs, documentation, software, trademarks, trade names, logos, and other proprietary materials ("Gupshup IP") shall remain the sole and exclusive property of Gupshup or its licensors.

Nothing in this Policy shall be construed as granting the Clients/Gupshup Partners any ownership rights or licenses, express or implied, to the Gupshup IP, except as may be expressly permitted by Gupshup in writing.

All intellectual property developed by the Clients/Gupshup Partners independently of Gupshup shall remain the Clients/Gupshup Partners property, provided it does not include or infringe upon any Gupshup IP.

N. Confidentiality

Each party agrees to maintain the confidentiality of any non-public information disclosed by the other party (whether oral, written, or digital) that is designated as confidential or that reasonably should be understood to be confidential, including technical, commercial, and operational information ("Confidential Information").

The receiving party shall not disclose or use any Confidential Information except for the purpose of performing its obligations under this policy or as required by law.

The confidentiality obligations shall survive for a period of two (2) years after the termination of the partner relationship.

Confidentiality obligations shall not apply to information that:

  • Is or becomes publicly known through no fault of the receiving party;
  • Is lawfully received from a third party without restriction;
  • Was independently developed without reference to the Confidential Information.

O. Representations and Warranties

Each party represents and warrants that:

  • It has full power and authority to enter into and comply with these Terms;
  • The execution of these Terms does not violate any other agreement to which it is a party.
  • They shall comply with all applicable laws, regulations, and third-party policies (including Meta policies) in their use of the platform;
  • They shall not knowingly upload, transmit, or distribute malicious code, spam, or any content that violates third-party rights.

The Gupshup Partners further represent and warrant that:

  • They shall not make any representation, warranty, or commitment on behalf of Gupshup or its affiliates regarding the Platform or related services, whether or not covered under this Agreement.

P. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts located in Mumbai, Maharashtra, India.

Q. Publicity

Neither party shall issue any press release or make any public statement regarding their relationship under this Gupshup Policy without the prior written consent of the other party.

Any use of the other party's trademarks, trade names, or logos shall be subject to the trademark usage guidelines provided by that party (if any) and shall not create any rights of ownership therein.

R. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a competent court, the remaining provisions shall continue in full force and effect, and the invalid provision shall be replaced with a valid provision that most closely reflects the intent of the original.