Privacy Policy

Your account data is information about the business using the Service: the name and email of each team member, your workspace name, your plan and billing history. We are the controller of this data.

Your customers’ data is everything you bring into the Service about the people you message: their phone numbers, names, and the conversations you have with them. You are the controller of that data and we process it only to provide the Service to you. We do not sell it, and we do not use it to train anything.

• Team member names, email addresses, roles and sign-in times.
• Contacts you add or import, and contacts created when someone messages you: phone number, Instagram handle, name, tags and any attributes you record.
• WhatsApp and Instagram conversations sent or received through the Service, including message content, delivery status and timestamps.
• Message templates, broadcasts, automations and the results of each send.
• Advertising data read from the Meta accounts you connect: campaign names, spend, impressions and conversions.
• Access tokens for the Meta accounts you connect, so the Service can act on your behalf.
• An audit log of changes made in your workspace, and technical logs of failures.

Some customers use the Service in healthcare settings. Conversations may therefore contain health information. We do not ask for it, we do not analyse it, and it is stored under the same workspace isolation as everything else — but you remain responsible for what your staff send and for having a lawful basis to message your patients.

We use a small number of providers to run the Service. Each only receives what it needs.

• Supabase — database, authentication and server functions. Data is stored in the Mumbai (ap-south-1) region.
• Vercel — hosting and delivery of the web application.
• Meta Platforms — WhatsApp and Instagram messages are delivered by Meta, and advertising data comes from them. Their handling is governed by their own terms.
• Our email provider — sends account email such as password resets and invitations. It does not receive your contacts or conversations.

Contacts, conversations and campaign data are kept for as long as your workspace is active. Technical failure logs are deleted after 30 days. If you close your account we delete your workspace and everything in it within 30 days, except where we are required to keep billing records for longer.

You can delete an individual contact or conversation at any time from within the Service, and that deletion is immediate.

Anyone who receives a WhatsApp message sent through the Service can reply STOP to be unsubscribed. We record that immediately and block further broadcasts to them. Replying START resubscribes.

Every record belongs to exactly one workspace, and that isolation is enforced by the database itself rather than by application code alone. Staff of Phraum IT Consulting LLP do not read customer conversations; a small number of administrators can see workspace names, plans and technical error messages in order to run the platform and provide support.

You may ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to adsandchats@gmail.com and we will respond within 30 days. If you are an individual who has been messaged by one of our customers, contact that business first — they decide what is stored about you, and we will support them in acting on your request.

If this policy changes materially we will tell account owners by email before it takes effect.

Phraum IT Consulting LLP
H.No. 402, Pl. no. 224C, Vijaya Lakshmi Nilayam, Street no. 8, Addagutta Society, Kukatpally, Hyderabad, Telangana 500072, India
adsandchats@gmail.com