← Back to Repeat Grow

Privacy Policy

Last updated: October 14, 2026

Repeat Grow ("Repeat Grow", "we", "us", or "our") provides a WhatsApp CRM platform built on the official WhatsApp Business API. This Privacy Policy explains what information we collect, how we use it, and the choices you have, both as a business that uses Repeat Grow (a "Customer") and as an end user whose messages a Customer manages through the platform.

1. Information We Collect

  • Account information: name, email address, phone number, and business details you provide when you sign up or are invited to a Repeat Grow account.
  • WhatsApp Business data: contacts, messages, message templates, and media that flow through a Customer's connected WhatsApp Business number. This data is processed on behalf of the Customer, who controls it.
  • Call recordings for AI notes: WhatsApp voice calls are not recorded unless an agent switches on AI call notes for a call. Then the agent's browser records the call, sends it once to our AI provider (Google Gemini) to write the notes, and the recording is not stored by us. The notes are saved with the contact. The business is responsible for telling the customer that the call is being recorded.
  • Usage data: log data, device and browser information, and general usage patterns that help us operate and improve the platform.
  • Cookies: used to keep you signed in and remember basic preferences (such as theme). On our public website pages we use Google Analytics cookies to count visits and see which pages are useful; it is not loaded inside the signed-in app. We do not use cookies for third-party advertising.

2. How We Use Information

We use the information above to:

  • Provide, operate, and maintain the Repeat Grow platform.
  • Send and receive WhatsApp messages on behalf of a Customer, through the official WhatsApp Business API.
  • Provide customer support and respond to inquiries.
  • Monitor for security issues, fraud, and abuse.
  • Improve and develop new features.

3. How We Share Information

We do not sell personal data. We share information only:

  • With Meta / WhatsApp, as required to send and receive messages through the WhatsApp Business API.
  • With Supabase, our database and infrastructure provider, which stores account and message data on our behalf under its own security and confidentiality commitments.
  • When required by law, regulation, or a valid legal process.
  • With a Customer's own team members, as configured by that Customer within their account.

4. Data Storage & Security

Data is encrypted in transit (HTTPS/TLS) and access to sensitive fields, such as WhatsApp API tokens, is encrypted at rest. Database access is restricted through row-level security policies, and inbound webhooks are verified using signed requests. See our Security page for more detail.

5. Data Retention

We retain account and message data for as long as a Customer's account is active, or as needed to provide the service. When an account owner asks to delete their account in Settings → Your data and our team confirms the request, the business account and its data (contacts, conversations, messages, deals, broadcasts, templates, automations and integration settings) are deleted from our live database. Copies in encrypted backups are removed as those backups expire. We may keep a minimal, anonymous record that a deletion took place, and data we are required by law to retain.

6. Your Rights

You have the right to access, correct and delete your personal data, including under India's Digital Personal Data Protection Act, 2023. Repeat Grow Customers and their team members can do this themselves in Settings → Your data:

  • Download my data gives you a copy of your data as a JSON file. Owners and admins also get their business's data.
  • Delete my account sends us a deletion request. Once our team confirms it, your login is deleted; if you own the business account, the business and all of its data are deleted. We email you when it's done.
  • Your name and details can be changed in Settings → Your profile.

If you are an end user messaging a business that uses Repeat Grow, please contact that business directly, as they control the data. For anything else, contact us using the details below.

7. Children's Privacy

Repeat Grow is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and the rules made thereunder, for any privacy concerns, questions, or grievances regarding this policy, please contact:

Repeat Grow
Email: support@repeatgrow.com

10. Governing Law

This Privacy Policy is governed by the laws of India, without regard to its conflict of law provisions.