Privacy Policy

This Privacy Policy explains how CloudSingh collects, uses, stores, and protects your information when you use our platform. We are committed to safeguarding your privacy and handling your data responsibly.

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and password (stored as a hashed value). If you create a workspace, we store the workspace name and configuration settings.

Usage Data

We collect information about how you use the platform, including:

• Pages visited and features used within the dashboard
• API request counts and endpoint usage patterns
• Campaign creation, scheduling, and delivery statistics
• Login timestamps and session duration

Message Metadata

We store metadata about messages sent through the platform, including recipient phone numbers, message status (sent, delivered, failed), timestamps, and campaign associations. We do not store the content of WhatsApp messages after they have been delivered.

Session Data

We collect information about your WhatsApp session connections, including connection status, session identifiers, and authentication state. This is necessary to maintain and reconnect your WhatsApp sessions.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the CloudSingh platform
• Process and deliver your messages and campaigns
• Generate analytics and reporting for your dashboard
• Improve the platform's performance, features, and user experience
• Enforce rate limits and usage quotas associated with your plan
• Communicate with you about your account, service updates, or support requests
• Comply with legal requirements and respond to lawful requests

3. Data Storage and Security

Your data is stored in a PostgreSQL database with encryption at rest. All data transmitted between your browser and our servers is encrypted using TLS.

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Access to production data is restricted to authorized personnel only.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Cloudflare R2 — Used for storing file attachments and media uploaded through the platform (campaign assets, media messages). Files are stored encrypted.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Data Retention

We retain your account data for as long as your account is active. Message metadata is retained according to your plan's configuration. If you close your account, we will delete your data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data and account
• Export — Request an export of your data in a machine-readable format

To exercise any of these rights, contact us at support@cloudsingh.in.

7. Cookies

We use session cookies to maintain your login state and preferences. We do not use third-party tracking cookies or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the platform. The "Effective date" at the top of this page indicates when the policy was last updated.

9. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@cloudsingh.in.