Privacy policy

1. Who this policy covers

• Businesses that sign up for Crescaler, and the people who use the dashboard on their behalf.
• Their customers: people who chat with a business on WhatsApp through Crescaler.

For customer conversations, the business decides what to send and to whom, and is responsible for that data. Crescaler processes it on the business's behalf, only to provide the service.

2. Data we collect

• Account details: name, email, phone number and password (stored only as a secure hash) of dashboard users.
• Business details: business name, industry, time zone and, if provided, billing and GST details.
• WhatsApp and Meta data: when a business connects WhatsApp, Meta gives us the business's WhatsApp Business Account ID, phone number ID, business portfolio ID, message templates and an access token. We use them only to send and receive that business's messages and manage its templates. Access tokens are stored encrypted.
• Messages and contacts: customer phone numbers and names, messages, delivery status, and any fields the business adds (for example a birthday for reminders).
• Payments: plan and wallet payments are handled by our payment provider (Razorpay). We keep the payment reference and amount, never full card details.
• Technical data: IP address, browser and log data, used for security and to keep the service working.

3. How we use data

• To provide the platform: deliver messages, show conversations, run campaigns, chatbots and reminders.
• To manage accounts, billing and support requests.
• To keep the service secure, prevent abuse, and meet legal obligations.

We do not sell personal data, and we do not use businesses' customer data for our own marketing.

4. Who we share data with

• Meta (WhatsApp): messages are sent and received through the WhatsApp Business Platform, under Meta's terms.
• Service providers: hosting, database, email and payment providers that run the service for us, under confidentiality obligations.
• Authorities: when required by law.

5. Facebook Login and WhatsApp connection

Businesses can connect their WhatsApp account using Facebook Login. We request only the permissions needed to manage that business's WhatsApp account and messages (whatsapp_business_management, whatsapp_business_messaging, business_management). A business can remove Crescaler's access at any time in its Facebook or Meta Business settings. See Data deletion.

6. How long we keep data

We keep data while the business's account is active. When an account is closed, we delete or anonymise its data within 30 days, except records we must keep by law (for example invoices).

7. Security

Data is sent over encrypted connections (HTTPS). Passwords are hashed, access tokens and payment keys are encrypted, and each business can see only its own data.

8. Your rights

You can ask to access, correct or delete your personal data. If you are a business's customer, you can also contact that business directly. Reply STOP to a business on WhatsApp to stop its promotional messages. To make a request, email [email protected].

9. Children

Crescaler is a service for businesses and is not meant for children under 18.

10. Changes and contact

We may update this policy; the date at the top shows the latest version. For questions or complaints (including as our grievance contact under Indian law), email [email protected].