Privacy Policy

Repeat Grow ("Repeat Grow", "we", "us", or "our") provides a WhatsApp CRM platform built on the official WhatsApp Business API. This Privacy Policy explains what information we collect, how we use it, and the choices you have, both as a business that uses Repeat Grow (a "Customer") and as an end user whose messages a Customer manages through the platform.

1. Information We Collect

• Account information: name, email address, phone number, and business details you provide when you sign up or are invited to a Repeat Grow account.
• WhatsApp Business data:contacts, messages, message templates, and media that flow through a Customer's connected WhatsApp Business number. This data is processed on behalf of the Customer, who controls it.
• Usage data: log data, device and browser information, and general usage patterns that help us operate and improve the platform.
• Cookies: used to keep you signed in and remember basic preferences (such as theme). We do not use cookies for third-party advertising.

2. How We Use Information

We use the information above to:

• Provide, operate, and maintain the Repeat Grow platform.
• Send and receive WhatsApp messages on behalf of a Customer, through the official WhatsApp Business API.
• Provide customer support and respond to inquiries.
• Monitor for security issues, fraud, and abuse.
• Improve and develop new features.

3. How We Share Information

We do not sell personal data. We share information only:

• With Meta / WhatsApp, as required to send and receive messages through the WhatsApp Business API.
• With Supabase, our database and infrastructure provider, which stores account and message data on our behalf under its own security and confidentiality commitments.
• When required by law, regulation, or a valid legal process.
• With a Customer's own team members, as configured by that Customer within their account.

4. Data Storage & Security

Data is encrypted in transit (HTTPS/TLS) and access to sensitive fields, such as WhatsApp API tokens, is encrypted at rest. Database access is restricted through row-level security policies, and inbound webhooks are verified using signed requests. See our Security page for more detail.

5. Data Retention

We retain account and message data for as long as a Customer's account is active, or as needed to provide the service. Data is deleted or anonymized within a reasonable period after an account is closed, except where retention is required by law.

6. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. If you are an end user messaging a business that uses Repeat Grow, please contact that business directly, as they control the data. If you are a Repeat Grow Customer, contact us using the details below.

7. Children's Privacy

Repeat Grow is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and the rules made thereunder, for any privacy concerns, questions, or grievances regarding this policy, please contact:

Repeat Grow
Email: support.repeatgrow@gmail.com

10. Governing Law

This Privacy Policy is governed by the laws of India, without regard to its conflict of law provisions.