Privacy Policy

• Provide, operate, and improve the ConnBridge platform.
• Process messages and automate workflows on your behalf.
• Send transactional emails (account verification, password reset, invoices).
• Send service announcements and product updates (you may opt out at any time).
• Respond to support requests and customer service inquiries.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.
• Analyse usage patterns to improve platform features (using aggregated, anonymised data).

We do not sell your personal data to third parties.

We retain your personal information for as long as your account is active or as needed to provide you the Service. After account deletion:

• Account data is deleted within 30 days.
• Message and contact data is deleted within 60 days.
• Billing records may be retained for up to 7 years to comply with applicable tax laws.
• Anonymised analytics data may be retained indefinitely.

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using TLS 1.2+.
• Data at rest is encrypted using AES-256.
• Passwords are hashed using bcrypt and never stored in plaintext.
• Access tokens are stored encrypted and never exposed in logs.
• Access to production data is restricted to authorised personnel only.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit how we process your data.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to certain types of processing, including direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at privacy@connbridge.in. We will respond within 30 days.

We use the following types of cookies:

• Essential Cookies: Required for the platform to function (session management, authentication). Cannot be disabled.
• Preference Cookies: Remember your settings such as language and UI preferences.
• Analytics Cookies: Help us understand how users interact with the platform (using aggregated, anonymised data).

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

ConnBridge is operated from India. Your information may be transferred to and processed in countries other than your own, including India and the United States (AWS cloud infrastructure). By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

As a platform that enables WhatsApp Business API usage, ConnBridge and its users must comply with Meta's WhatsApp Business Policy and Meta Platform Terms. Specifically:

• Users must obtain proper consent from contacts before sending messages.
• Users must not use the platform to send spam or unsolicited bulk messages.
• Users must not circumvent Meta's enforcement actions or policies.
• Message templates must comply with WhatsApp's template guidelines.

Violation of these obligations may result in suspension of WhatsApp access and termination of your ConnBridge account.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification to registered users. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Privacy Officer: