Privacy policy

• Account data: your name, email address and password (stored as a salted hash by our authentication provider).
• Workspace content: contacts, conversations, templates, campaigns, automations and files you or your customers send through your connected WhatsApp number.
• Connection credentials: WhatsApp Business Platform tokens and any AI provider keys you add. These are encrypted before they are stored.
• Technical data: session cookies, device and browser type, IP address and basic usage logs needed to run and secure the service.

• To provide the inbox, campaigns, automations and the other features you use.
• To authenticate you, prevent abuse and keep the service secure.
• To send essential emails such as verification, password reset and team invitations.
• To diagnose problems and improve reliability.

We do not sell your data, and we do not use your conversations to advertise to you.

For the contacts and messages in your workspace, you are the data controller and we act as your processor. You are responsible for having a lawful basis, including obtaining opt-in consent before messaging people on WhatsApp, and for honouring requests from your own customers.

We share data only with providers needed to run the service:

• Supabase — database, authentication and file storage.
• Meta Platforms — WhatsApp messages are sent and received through the WhatsApp Business Platform and are subject to Meta’s own terms and privacy policy.
• AI providers (optional) — if you enable an AI assistant, the relevant message text and knowledge snippets are sent to the provider whose key you configured (for example OpenAI, Groq or Anthropic).
• Hosting and email infrastructure providers that deliver the application and transactional email.

We may also disclose information when required by law or to protect our users.

We use strictly necessary cookies to keep you signed in and local storage to remember your theme. We do not use advertising or cross-site tracking cookies.

We keep workspace data while your account is active. You can delete contacts and messages from the app, and you can ask us to delete your account and associated data at any time by emailing us. Photos, videos, voice notes and documents in your media library are kept until you delete them or close the workspace; free storage is limited by your plan. We also keep subscription and billing records (plan, amounts, dates) as long as needed for accounting and legal obligations. Backups are purged on a rolling basis.

Data is encrypted in transit (HTTPS). Sensitive credentials are encrypted at rest and workspace data is protected by row-level access controls. No system is perfectly secure, so please use a strong, unique password.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise a right, email support@scale360x.com. We will respond within a reasonable time.

The service is intended for businesses and is not directed at children under 16.

We may update this policy and will change the date above when we do. Questions? Contact support@scale360x.com.