Last updated: to be set on publish.

1. Introduction

This Privacy Policy explains how GrowKaro CRM ("we", "us") collects, uses, and protects data when you use our WhatsApp Marketing SaaS platform ("Service"), including data belonging to your business ("Tenant data") and data about the people you message through WhatsApp.

2. What We Collect

• Account & signup data: business name, email address, phone number, and password (stored encrypted, never in plain text).
• WhatsApp contact & conversation data: contact names, phone numbers, message content, and delivery status, processed on your behalf to provide campaigns, bots, and chat features.
• Usage data: how you use the platform (features accessed, campaigns sent), used to operate and improve the Service.

3. Tenant Data Separation

GrowKaro CRM is a multi-tenant platform: your business's data is logically isolated from other businesses using the Service. Every relevant record is scoped to your Tenant account, and access controls prevent one Tenant from viewing another Tenant's contacts, messages, or campaigns.

4. How We Use Data

We use collected data to: operate the Service (send your campaigns, run your bots, display your chat history); communicate with you about your account; maintain security and prevent abuse; and improve the platform. We do not sell your data or your contacts' data to third parties.

5. Third-Party Processing

Messages you send are transmitted through Meta's WhatsApp Cloud API to reach recipients — Meta processes this data as WhatsApp's platform operator, under its own privacy terms. We may also use standard infrastructure providers (hosting, email delivery) who process data only as needed to run the Service.

6. Data Retention

We retain account and conversation data for as long as your account is active. If you cancel your account, we retain data for a limited period afterward (to support account recovery or meet legal obligations), after which it is deleted or anonymized. Specific retention periods will be finalized before public launch.

7. Security

We use industry-standard measures to protect data, including encrypted password storage and access controls scoped per Tenant. No method of transmission or storage is 100% secure, and we encourage you to use a strong, unique password for your account.

8. Your Rights

You may request access to, correction of, or deletion of your business's data by contacting us. Your contacts may also have rights over their own data under applicable law — you are responsible for obtaining proper WhatsApp opt-in consent from the people you message.

9. Cookies

Our public website and dashboard may use cookies/local storage for essential functions like keeping you logged in. We do not currently use third-party advertising trackers.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be reflected here with an updated date.

11. Contact

Questions about this policy can be sent via our Contact page.