Privacy Policy

1. Who We Are

Mathstrat provides a WhatsApp CRM platform that helps businesses connect their own WhatsApp Business account, manage opted-in contacts, send approved WhatsApp templates, monitor campaign delivery, automate replies, and respond to customer messages.

For privacy questions or data deletion requests, contact us at mathstratofficial@gmail.com.

2. Data We Collect

Depending on how the platform is used, we may process the following data:

• Company account details such as business name, owner name, email address, subscription status, and account status.
• Login and security data such as hashed passwords, secure session identifiers, audit logs, and timestamps.
• WhatsApp Business connection details such as WhatsApp Business Account ID, phone number ID, business phone number, webhook configuration, and encrypted access tokens.
• Customer contact data uploaded by companies, including customer names, phone numbers, marketing permission status, unsubscribe status, and source information.
• WhatsApp campaign data such as template names, campaign names, selected recipients, delivery status, failed message details, and read/delivery events received from Meta.
• Inbox and message data such as incoming customer messages, outgoing replies, message timestamps, and Meta message identifiers.
• Billing and subscription data when paid plans are enabled, including plan, renewal status, payment status, invoices, and payment provider references.

3. How We Use Data

We use data to:

• Create and manage company workspaces.
• Authenticate users and protect account access.
• Connect company-owned WhatsApp Business accounts to the platform.
• Send WhatsApp template messages and replies through the WhatsApp Business Platform.
• Receive customer replies and delivery/read status updates from Meta webhooks.
• Display campaign results, inbox conversations, unsubscribe status, automation status, and operational activity.
• Manage subscriptions, billing status, plan limits, and account suspension where applicable.
• Improve security, reliability, support, and compliance.

4. WhatsApp and Meta Data Processing

Companies using this platform connect their own WhatsApp Business account. WhatsApp messages and related events are processed through Meta's WhatsApp Business Platform / Cloud API. When a company sends a message, our platform sends the request to Meta using the company's configured WhatsApp credentials. When a customer replies or a message status changes, Meta sends webhook events back to our platform.

Companies are responsible for collecting valid customer consent before sending marketing messages and for following WhatsApp Business Messaging Policy, applicable privacy laws, and anti-spam rules.

5. How We Share Data

We do not sell customer contact lists or WhatsApp conversations. We may share data only as needed with:

• Meta / WhatsApp Business Platform to send messages, receive message events, and manage templates.
• Hosting, database, logging, email, storage, and infrastructure providers used to operate the platform.
• Payment processors when subscription billing is enabled.
• Legal, compliance, or security authorities when required by law or necessary to protect the platform.

6. Data Storage and Security

We use server-side authentication, database access controls, tenant-level data separation, password hashing, secure HTTP-only cookies, and encrypted storage for sensitive WhatsApp access tokens where configured. Access to company data is limited based on user role and company workspace.

No method of internet transmission or electronic storage is completely risk-free, but we take reasonable technical and organizational steps to protect data from unauthorized access, misuse, loss, or disclosure.

7. Data Retention

We retain company, customer, campaign, inbox, automation, and billing data for as long as required to provide the service, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain business records. Companies may request deletion of their workspace data, subject to legal and operational retention requirements.

8. User Choices and Deletion Requests

Companies can remove contacts, suppress contacts from future campaigns, and manage WhatsApp setup information inside the platform. Customers can unsubscribe from marketing messages by replying with opt-out language such as STOP where supported by the business workflow.

To request access, correction, export, or deletion of data, email mathstratofficial@gmail.com. We may need to verify the requester before processing the request.

9. Children's Privacy

The platform is intended for business use and is not directed to children. Companies should not knowingly upload or process data belonging to children unless they have the legal right to do so.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised last updated date. Continued use of the platform after updates means the updated policy applies.