AiScalify ("we", "us", or "our") respects your privacy and is deeply committed to protecting your personal data and the business data you process through our B2B SaaS platform. This comprehensive Privacy Policy explains how we collect, process, use, and share information when you access our website, WhatsApp automation tools, Flow Builder, and CRM services (collectively, the "Services").
1. Information We Collect
We collect various types of information depending on how you interact with our Services:
1.1 Information You Provide to Us
- Account Registration: When you sign up, we collect your full name, email address, phone number, company name, industry vertical, and password.
- Billing Information: To process your SaaS subscription, you must provide billing details. Note: We use a third-party PCI-DSS compliant processor (Cashfree) and do not store raw credit card numbers on our servers.
- Support & Communications: If you contact our support team or book a demo, we collect the contents of your messages and your contact details.
1.2 Information Collected Automatically
- Usage Data: We automatically log your interaction with our dashboard, including features accessed (e.g., Flow Builder, Kanban Pipeline), session duration, and clickstream data.
- Device & Connection Data: IP address, browser type, operating system, and device identifiers are collected for security and analytics purposes.
- Cookies & Tracking: We use cookies to maintain your authenticated sessions, remember your preferences, and track the effectiveness of our marketing campaigns.
1.3 Data Processed on Your Behalf (CRM Data)
As a CRM and WhatsApp Automation platform, you will upload, sync, or generate customer data (Leads). This includes your customers' phone numbers, chat transcripts, custom fields (e.g., budget, location), and pipeline stages.
Important Distinction: For this CRM Data, AiScalify acts strictly as a "Data Processor." You, the client, are the "Data Controller." We only process this data to execute your automations and provide the Inbox interface. We do not use your customer data for our own marketing or sell it to third parties.
2. How We Use Your Information
We use the data we collect primarily to provide, secure, and improve our Services. Specific uses include:
- Service Delivery: To operate the Shared Inbox, execute Flow Builder sequences, process incoming webhooks, and trigger Meta-approved templates.
- Financial Processing: To manage your Cashfree software subscription and issue invoices.
- AI Features: For our AI Smart Chat Suggestions, we temporarily process your recent chat history and provided Knowledge Base to generate contextual replies. This data is processed securely and is never used to train public LLM foundation models.
- Security & Compliance: To detect fraudulent activity, enforce our Terms and Conditions, and ensure compliance with Meta's WhatsApp Commerce Policies.
- Product Improvement: To analyze aggregated, anonymized usage metrics to develop new CRM verticals and automation nodes.
3. Data Sharing & Sub-Processors
AiScalify does not rent or sell your data. We only process data through trusted, world-class third-party infrastructure providers (sub-processors) who maintain the highest global security and privacy standards:
- Meta Platforms, Inc: Because we utilize the Official WhatsApp Business API, messaging data is routed through Meta's infrastructure. By using AiScalify, you acknowledge and agree to Meta's data handling policies.
- Payment Gateways (Cashfree): We share your billing information solely for the purpose of executing recurring software subscription charges.
- Cloud Infrastructure Providers: Your data is securely hosted on enterprise-grade cloud servers (e.g., AWS, Google Cloud) equipped with modern firewalls and access controls.
- AI API Providers: We use secure, enterprise API endpoints (like Gemini/OpenRouter) for Smart Suggestions. These providers are contractually prohibited from using our API payloads to train their models.
- Legal Requirements: We may disclose data if required by law, subpoena, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.
4. Data Retention
We retain your account information and CRM data for as long as your subscription is active. If you cancel your subscription, we may retain your data for a grace period of up to 90 days to allow for account recovery. After this period, or upon your explicit written request, your CRM data, chats, and lead profiles will be permanently and irreversibly deleted from our active servers, subject to any legal retention obligations (such as tax/billing records).
5. Security Measures
Protecting your business data is our highest priority. We implement robust security protocols, including:
- 256-bit AES Encryption: All data is encrypted both in transit (TLS 1.2+) and at rest on our databases.
- Role-Based Access Control (RBAC): Our system ensures that Agents can only access leads explicitly assigned to them, while Branch Managers are restricted to their specific branch's data.
- Internal Access Audits: AiScalify staff cannot access your CRM data unless explicitly granted permission by you for technical support purposes.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about your account.
- Right to Deletion: You can request the deletion of your account and associated CRM data.
- Right to Portability: You can export your CRM leads at any time via our dashboard export tools (subject to your Admin RBAC permissions).
- Marketing Opt-Out: You may unsubscribe from our promotional emails at any time by clicking the "unsubscribe" link at the bottom of our emails.
7. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: