Privacy Policy

Account information: Full name, email address, phone number, and password (stored as a one-way hash) when you register.

WhatsApp credentials: Your Green API Instance ID and API Token, which are required to connect your WhatsApp account to our platform. These are stored encrypted in our database.

Broadcast data: Messages you compose, images you upload, and the WhatsApp group names you target for broadcasting.

Usage data: Broadcast history, delivery results (sent/failed per group), scheduled broadcast configurations, and message templates you create.

Payment information: Payments are processed by Razorpay. We do not store your card details. We receive payment confirmation, plan selection, and transaction IDs from Razorpay.

Support data: Contact form submissions, chat conversations with our AI support widget, and any complaints you raise.

We use your information to:

• Operate and maintain the GUPO Broadcast platform
• Send WhatsApp broadcasts on your behalf using Green API
• Process payments and manage your subscription plan
• Send transactional emails (welcome, password reset, broadcast reports, plan expiry reminders)
• Provide AI-powered message composition (via Groq/Llama)
• Respond to support requests and complaints
• Prevent fraud and abuse of our platform
• Comply with applicable laws and regulations

We do not sell your personal data to third parties.

GUPO Broadcast uses the following third-party services. Each has its own privacy policy:

• Green API (green-api.com) — WhatsApp messaging gateway. Your WhatsApp credentials are shared with Green API to send messages.
• Supabase — Cloud database provider that stores your account and broadcast data.
• Razorpay — Payment processing. Governed by Razorpay's Privacy Policy.
• Resend — Email delivery for transactional emails.
• Groq — AI model provider used for message composition assistance and customer support chat. Message prompts are sent to Groq servers.
• Railway — Cloud infrastructure hosting our application servers.
• Redis — In-memory data store for task queuing and session management.

We retain your data for as long as your account is active. Specifically:

• Account data: Retained until you delete your account
• Broadcast history: Retained for the duration of your account
• Message content: Stored in your broadcast history; deleted when you delete your account
• Payment records: Retained for 7 years as required by Indian accounting regulations
• Support chat: Retained for 90 days from the last interaction

In accordance with India's Digital Personal Data Protection Act 2023, you have the following rights as a Data Principal:

• Right to access: Request a summary of personal data we hold about you
• Right to correction: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your account and associated personal data
• Right to grievance redressal: Raise a complaint with our Grievance Officer
• Right to nominate: Nominate another individual to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, email us at support@gupo.in with subject line "Data Rights Request". We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Passwords stored as bcrypt hashes (never in plain text)
• HTTPS encryption for all data in transit
• Access controls limiting who can access your data
• Database access through authenticated, role-limited API keys

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

We use only essential session cookies required for authentication. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required as we use only strictly necessary cookies.

GUPO Broadcast is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of GUPO Broadcast after changes constitutes acceptance of the revised policy.

As required under the DPDPA 2023 and IT Act, 2000, we have designated a Grievance Officer to address data-related complaints:

For any questions about this Privacy Policy or your personal data, contact us at: support@gupo.in