Privacy Policy
Last updated: February 2026
Effective date: February 1, 2026
Table of Contents
1. Introduction
OnRaven Platforms Inc. (doing business as "OnRaven," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-channel messaging platform and related services (collectively, the "Services").
Our Services enable businesses ("Customers") to communicate with their end users ("Subscribers") across various messaging platforms including WhatsApp, Instagram, Facebook Messenger, TikTok, SMS, RCS, email, and other channels.
By using our Services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Account Information: Name, email address, phone number, company name, job title, and password when you create an account
- Payment Information: Billing address, payment card details (processed securely by our payment processors)
- Profile Information: Business details, preferences, and settings you choose to provide
- Communications: Content of messages, support requests, and feedback you send to us
- Connected Accounts: Information from third-party platforms you connect to our Services
2.2 Information Collected Through the Services
When you use our Services, we collect:
- Message Content: Messages sent and received through our platform between Customers and Subscribers
- Subscriber Data: Information about Subscribers that Customers collect and store in our platform
- Automation Data: Workflows, chatbot configurations, and broadcast content you create
- Usage Analytics: Feature usage, engagement metrics, and performance data
2.3 Automatically Collected Information
When you access our Services, we automatically collect:
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Log Data: IP address, access times, pages viewed, and referring URLs
- Location Data: General location information derived from IP address
- Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Send technical notices, updates, security alerts, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities in connection with our Services
- Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities
- Personalize and improve your experience
- Facilitate communication between Customers and Subscribers
- Enforce our Terms of Service and other policies
- Comply with legal obligations
4. Legal Basis for Processing
We process personal information based on the following legal grounds:
- Contract Performance: Processing necessary to provide our Services under our Terms of Service
- Legitimate Interests: Processing for our legitimate business interests, such as improving our Services and preventing fraud
- Consent: Processing based on your explicit consent, which you can withdraw at any time
- Legal Obligations: Processing necessary to comply with applicable laws and regulations
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
- Platform Partners: With messaging platforms (Meta, TikTok, etc.) as required to deliver messages
- Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets
- Legal Requirements: When required by law, subpoena, or to protect our rights and safety
- With Consent: With your consent or at your direction
6. Third-Party Platforms
Our Services integrate with third-party messaging platforms including but not limited to:
- Meta Platforms (WhatsApp, Instagram, Facebook Messenger)
- TikTok
- SMS and RCS providers
- Email service providers
- CRM and marketing platforms
When you connect these platforms, we receive information as authorized by you and process it according to this Privacy Policy. The use of your information by these third parties is governed by their own privacy policies.
7. Data Security
We implement robust security measures to protect your personal information:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Multi-factor authentication options
- Regular security audits and penetration testing
- Employee access controls and training
- 24/7 infrastructure monitoring
Our infrastructure is hosted on Amazon Web Services (AWS) in the United States and Canada, leveraging their enterprise-grade security controls. For more details, visit our Security page.
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our Services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Support business operations
When you close your account, we will delete or anonymize your personal information within 90 days, unless retention is required by law or for legitimate business purposes.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Request limitation of processing
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
For California Residents (CCPA/CPRA)
California residents have additional rights including:
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt-out of sale/sharing of personal information
- Right to non-discrimination for exercising privacy rights
For Canadian Residents (PIPEDA)
Canadian residents have rights under PIPEDA including access to personal information, correction of inaccurate data, and the right to challenge compliance.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and Canada where our servers are located.
For transfers from the European Economic Area (EEA), UK, or Switzerland, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
12. Children's Privacy
Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at privacy@onraven.ca.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or through our Services. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
OnRaven Platforms Inc.
Attn: Privacy Team
Toronto, Ontario, Canada
Email: privacy@onraven.ca
Website: onraven.com
For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.
Vous avez reçu un message marketing d'une entreprise utilisant OnRaven ? Apprenez à vous désabonner des messages futurs. Se désabonner du marketing.