Privacy Policy

1 Introduction & Scope

SocialsUP Technologies ("we", "us", "our") respects your privacy and is dedicated to protecting the personal information and business contacts you entrust to WatUP. This Privacy Policy details the types of information we gather, how it is processed and protected, and your rights concerning your data.

2 Information We Collect

We collect only the information necessary to provide our WhatsApp outreach and CRM platform:

• Account Information: Your full name, email address, password hash (bcrypt), telephone number, and workspace names.
• Contact Lists: Recipient names, phone numbers, custom attributes, tags, and notes that you import via CSV or create directly in your workspace.
• Campaign & Message Records: Broadcast job status, message templates, delivery receipts (single tick, double tick, blue read receipts), and chat message logs.
• Payment Records: UPI transaction reference numbers (UTR), payment dates, amounts in ₹ INR, and invoice dispatch records. We never store credit card numbers or banking passwords.
• Technical & Bot Security Data: IP addresses, browser types, and Google reCAPTCHA v2 verification tokens to prevent automated abuse.

3 Workspace Isolation & Data Partitioning

WatUP operates on a strict multi-tenant isolation model. Every workspace is logically separated by workspace_id in our database. Your contact lists, message queues, and WhatsApp session authentication tokens are inaccessible to any other workspace or tenant. Each workspace connects strictly to its own WhatsApp session.

4 How We Use Your Information

We use your information exclusively to:

• Dispatch scheduled and live WhatsApp broadcasts and messages initiated by your workspace.
• Verify account credentials and dispatch security OTP verification codes.
• Generate and email formal GST tax invoices upon subscription approval.
• Detect, investigate, and prevent bot abuse, brute-force attacks, and illegal spam.

We never sell, rent, or monetize your contact lists or message content to third parties.

5 Third-Party Services

To provide high-availability SaaS infrastructure, we integrate with trusted service providers:

• Google reCAPTCHA: Bot mitigation on authentication endpoints (governed by Google's Privacy Policy).
• Authenticated SMTP Services: Transactional email dispatch for account verification and invoices.

6 Data Retention & Account Deletion

You have the right to request deletion of your workspace data at any time. Upon account termination, contact records, campaign logs, and WhatsApp authentication sessions are permanently wiped from our active databases.