Security & privacy at GUPO
Last updated: 14 October 2026
GUPO Broadcast is run by ATHANYA TECHNOLOGIES (OPC) PRIVATE LIMITED (CIN U62011MR2026OPC480146), a company registered in India. This page explains in plain words how we protect your account, your WhatsApp connection and your contacts. The full legal details are in our Privacy Policy.
Your WhatsApp connection
- Your Green API token is stored encrypted in our database. Only our own servers use it, and only to send the broadcasts you ask for.
- When you delete your GUPO account, we also log your Green API instance out of GUPO.
How your messages are sent
- GUPO sends messages from your own WhatsApp number through Green API, a third-party gateway that works like WhatsApp Web. It is not the official WhatsApp Business API, so WhatsApp can restrict a number — especially one that sends messages people don't expect.
- To keep that risk low, GUPO waits 3–6 seconds between groups and every plan has a daily broadcast limit.
- Send only to groups and contacts who expect to hear from you.
Your account
- Passwords are stored only as a one-way hash — nobody at GUPO can read your password.
- Everything between your browser and GUPO travels over an encrypted HTTPS connection. You can also sign in with Google.
- When our support team opens or changes a customer's personal data, it is recorded in an audit log.
Your data
- We keep your messages, images, group names and contacts only to provide the service — sending, results and history. We do not sell your data.
- For the contacts and groups you add, you decide how they are used; we only process them to deliver the broadcasts you send.
- Images stored to let you retry a broadcast are deleted after 3 days. Support chats are deleted automatically after 90 days (website) or 30 days (WhatsApp).
- We use trusted providers for hosting, the database, email, payments and AI writing help. They are listed in our Privacy Policy; some may store data outside India.
You are in control
- Download my data: Profile → Privacy & data → Download my data gives you a copy of what we hold about you.
- Delete your account: Profile → Privacy & data → Delete Account erases your account, groups, contacts, broadcast history, templates, support chats and stored Green API credentials.
India's data protection law (DPDP Act 2023)
- Your consent is recorded at sign-up with the date and the policy version you agreed to.
- Our Privacy Policy is available in English, Hindi and Marathi.
- We have a named Grievance Officer — contact details are in the Privacy Policy.
- We have a written plan for personal data breaches, including telling the Data Protection Board of India and the people affected, as the law requires.
Found a security problem?
Email support@gupo.in with "Security" in the subject. Please don't share the details publicly until we have fixed it.