Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — your name, email address, and password (or, if you sign in with Google, your name, email address, and profile picture as shared by Google).
• Channel connection data — access tokens and configuration for messaging channels you connect (e.g. WhatsApp Business, Instagram, Messenger, Telegram). Access tokens are encrypted at rest.
• Contact and conversation data — contact details and message content that flow through the channels you connect, stored so you can view conversation history, run automations, and manage your pipeline.
• Usage data — log data such as IP address, browser type, pages visited, and timestamps, used for security and troubleshooting.
• Cookies — used to keep you signed in and remember preferences (e.g. light/dark mode). We do not use third-party advertising cookies.

2. How we use your information

• To provide, operate, and maintain the Onchatup service.
• To send and receive messages on your behalf through the channels you connect.
• To run automations, broadcasts, and pipelines you configure.
• To communicate with you about your account, security, or changes to our service.
• To detect, prevent, and address technical issues or abuse.

3. Sign in with Google

If you choose to sign in with Google, we receive only your name, email address, and profile picture from Google — the minimum needed to create and authenticate your account. We do not access your Gmail, Google Drive, or any other Google data, and we never sell or share this information with third parties for advertising.

4. Third parties we share data with

We use the following service providers to operate Onchatup. Each only receives the data necessary to perform its function:

• Supabase — database, authentication, and file storage.
• Meta Platforms — WhatsApp Business Platform, Instagram, and Messenger messaging APIs.
• Google — optional sign-in (OAuth).
• Vercel — application hosting.

We do not sell your personal data to anyone, and we do not share it with third parties for their own marketing purposes.

5. Data retention

We retain your account and conversation data for as long as your account is active. If you delete your account, we delete your personal data and connected-channel tokens within 30 days, except where we are required to retain records to comply with law.

6. Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your account and associated data.
• Withdraw consent for optional data processing at any time.
• Raise a grievance regarding how your data is handled.

To exercise any of these rights, contact our Grievance Officer at onchatup@gmail.com.

7. Children's privacy

Onchatup is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above.

9. Contact us

Questions about this Privacy Policy can be sent to onchatup@gmail.com.