Privacy Policy

1. User Data Collection

We collect personal details that you provide directly to us during registration, setup, and support inquiries. This may include:

• Your name, company name, billing address, and account details.
• Email address (e.g., support details, correspondence logs).
• WhatsApp Business Account (WABA) numbers and integration tokens.

2. CRM Data Storage

All contact details, tags, logs, custom fields, and conversation histories uploaded or generated within the CRM dashboard are stored securely on our database. We employ advanced hosting architecture to ensure data isolation, high availability, and routine encrypted backups. Your customer records remain your property, and we act strictly as data processors for this information.

3. WhatsApp Communication

To facilitate communications through the WhatsApp Business API, we transmit messaging payloads (text templates, quick-reply responses, dynamic variables, and rich media assets) directly to Meta's servers. These communications comply fully with the WhatsApp Business Platform policies. We do not inspect message contents except as technically required to render the service, trigger workflows, or debug API performance.

4. Cookies & Tracking Technologies

We utilize persistent and session cookies to recognize authenticated user sessions, store dashboard configuration preferences, and monitor platform stability. You may opt to disable cookies in your browser settings, though doing so might affect platform performance and prevent access to certain interactive services.

5. Analytics & Usage Metrics

To maintain high-quality uptime and diagnose performance anomalies, we track system parameters, browser types, log events, and screen interactions. These analytics help us optimize loading times, evaluate user flow effectiveness, and security-audit suspicious logins.

6. Security Practices

Security is central to the Sooprapps architecture. All data transfers between the browser and our servers are encrypted using TLS 1.3 (HTTPS). Core databases are isolated, and payment transactions are offloaded entirely to PCI-DSS compliant third-party payment gateways (e.g., Razorpay).

7. User Rights & Data Portability

Under relevant data protection regulations (including GDPR and Indian IT policies), you retain the right to request access to, correction of, or portable exportation of the personal information stored in your account. To retrieve your data files, contact our compliance officer.

8. Data Deletion Requests

You may request complete and permanent deletion of your profile, CRM contact records, and metadata history at any time. Refer to our dynamic Data Deletion Instructions page or email our support desk. Upon validation, deletion is processed within 7 business days.

9. Third-Party Integrations

Sooprapps integrates with third-party software (such as e-commerce systems, spreadsheet tools, and messaging networks). We are not responsible for the privacy policies of these external platforms. We advise checking their independent terms before configuring webhook endpoints or sync permissions.