Privacy Policy

Gadagram provides a customer relationship management service for solo business owners and teams. This policy applies to visitors, account holders, workspace members and people whose information is managed through a Gadagram workspace.

For account and product operations, Gadagram acts as the controller of account information. For contacts, messages and other customer information uploaded or received by a business, that business is normally the controller and Gadagram processes the information on its instructions.

• Account information: name, email address, avatar, authentication records, workspace role and account preferences.
• Business information: business name, type, country, currency, timezone, team details and AI training information supplied by the business.
• Customer and CRM information: contact names, phone numbers, email addresses, enquiry details, notes, tasks, appointments, bookings, payment records and customer status.
• WhatsApp and Meta information: connected business account identifiers, phone-number identifiers, messages, media, voice notes, delivery events and conversation metadata made available through Meta APIs.
• AI information: prompts, business facts, message content, voice-note transcripts, suggested replies, confidence results and human review decisions.
• Technical information: IP address, approximate country, browser and device information, security logs, webhook events and product activity.
• Subscription information: plan, trial status, billing status and transaction records. Payment-card information is handled by the relevant payment provider when billing is enabled.

• Provide, secure and maintain Gadagram features.
• Receive and send WhatsApp messages on behalf of the connected business.
• Generate AI suggestions, transcripts and automated replies according to workspace settings.
• Manage enquiries, bookings, follow ups, payments, attribution and customer history.
• Prevent abuse, investigate failures and improve performance.
• Provide support, service notices and account communications.
• Meet legal, regulatory and platform obligations.

Depending on where you live, we process information to perform our contract with you, comply with law, protect legitimate business and security interests, and act on consent where consent is required. A business using Gadagram is responsible for having an appropriate legal basis to contact its customers and process their information.

We share information only as needed to operate the service, follow your instructions, complete a transaction, protect the service or comply with law. Service providers may include Supabase for database and authentication infrastructure, Vercel for hosting, OpenAI for configured AI processing, Meta for WhatsApp services, and analytics, tagging or billing providers when those features are enabled.

We do not sell personal information. We do not permit service providers to use workspace customer data for their own unrelated marketing.

Gadagram and its service providers may process information in countries other than your own. Where required, we use contractual, technical and organisational safeguards designed to protect information during international transfers.

We retain information while an account or workspace remains active and for as long as reasonably needed to provide the service, resolve disputes, maintain security and meet legal obligations. Retention periods depend on the type of information, the workspace configuration and applicable law.

You may request deletion using our Data Deletion instructions. Deleted information may remain temporarily in protected backups until those backups are overwritten under standard retention cycles. We may retain limited records where required for fraud prevention, billing, legal claims or regulatory compliance.

We use access controls, encryption, tenant separation, signature verification, audit records and other safeguards designed to protect information. No service can guarantee absolute security. Account holders must protect their passwords, devices, API credentials and connected WhatsApp accounts.

Depending on applicable law, you may ask to access, correct, export, restrict or delete your personal information, or object to certain processing. You may also withdraw consent where processing depends on consent. We may need to verify your identity before completing a request.

If a business contacted you through Gadagram, you may first contact that business because it controls its customer records. You may also contact Gadagram where the request concerns our own processing.

Gadagram is a business service and is not directed to children under 18. Account holders must not knowingly provide children’s personal information unless they have a valid legal basis and all required permissions.

We may update this policy as the product, providers or laws change. Material changes will be communicated through the service or another appropriate channel.

Privacy questions and verified rights requests can be sent to privacy@gadagram.com.