Techup Technologies ("we", "us", or "our") operates Sampark (the "Service"), a WhatsApp and Instagram marketing automation platform. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights over it.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Techup Technologies is the data controller for personal data processed through the Sampark platform. You may contact us at:
Email: privacy@sampark.app
Address: India

2. Information We Collect

2.1 Information You Provide

Account data: name, email address, company name, password (hashed), billing details.
Team member data: names and email addresses of users you invite to your workspace.
Contact lists: phone numbers and names of the contacts you import or create for campaigns.
Message content: templates, campaign content, and automated replies you configure.

2.2 Data from Meta Platforms (Facebook / Instagram)

When you connect your Instagram or Facebook account, we receive and store:

Your Instagram Business Account ID and username.
Your Facebook Page ID linked to your Instagram account.
Access tokens required to send and receive messages on your behalf.
Incoming DMs and comments from your followers (only after you grant webhook permissions).
Message delivery and read status from the Instagram Messaging API.

We request only the minimum permissions necessary: instagram_basic, instagram_manage_messages, pages_manage_metadata, and pages_messaging. We do not collect your personal Instagram feed posts, follower lists, or any data beyond messaging.

2.3 Data from WhatsApp Business API

Your WhatsApp Business Account (WABA) ID and phone number ID.
Message templates you create and submit to Meta for approval.
Inbound and outbound message logs, including message status (sent, delivered, read).
Opt-out records (contacts who reply STOP).

2.4 Usage and Technical Data

Log data: IP address, browser type, pages visited, timestamps.
Device information: operating system, screen resolution.
Cookies and similar tracking technologies (see Section 7).

3. How We Use Your Information

To provide and operate the Service (sending campaigns, managing inboxes, automating replies).
To process billing and manage your subscription.
To send transactional emails (receipts, trial expiry notices, password resets).
To comply with Meta's platform policies and applicable law.
To detect and prevent fraud, abuse, or security incidents.
To improve and develop the Service (aggregated, anonymized analytics only).

We do not sell your personal data or your contacts' data to third parties. We do not use Facebook or Instagram data to serve advertisements.

4. Data Sharing

We share data only as necessary:

Meta Platforms: We communicate with the WhatsApp Business API and Instagram Messaging API to relay your messages. Meta's own privacy policy governs their data use.
Infrastructure providers: Servers, databases, and CDN services (e.g., cloud hosting). These providers process data only on our instructions.
Payment processor: We use a PCI-compliant payment gateway; we do not store raw card numbers.
Legal obligation: We may disclose data if required by law, court order, or to protect the rights of users or the public.

5. Data Retention

Active accounts: Data is retained for the duration of your subscription plus 30 days after cancellation.
Message logs: Retained for 12 months, then purged unless you request earlier deletion.
Meta tokens: Access tokens are deleted immediately when you disconnect your channel from settings.
Billing records: Retained for 7 years as required by Indian tax law.

6. Your Rights

Depending on your jurisdiction, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (see Section 8 below).
Restrict or object to certain processing.
Data portability: receive a machine-readable export of your account data.
Withdraw consent at any time where processing is based on consent.

To exercise any right, email us at privacy@sampark.app from the email on your account. We will respond within 30 days.

7. Cookies

We use strictly necessary cookies (session, CSRF token) to operate the Service. We do not use advertising or cross-site tracking cookies. You may disable cookies in your browser, but core functionality will break.

8. Data Deletion

You can request deletion of all personal data we hold by:

Using the Data Deletion Request form on our website.
Emailing privacy@sampark.app with subject "Delete My Data".

We will complete deletion within 30 days and send a confirmation email. Note that we retain billing records as required by law (see Section 5).

If you connected your Facebook or Instagram account and wish to revoke access and delete related data, you may also use Facebook's App Settings to remove Sampark, then submit a deletion request above.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, contact us immediately.

10. International Transfers

Our servers are located in India. If you access the Service from outside India, your data may be transferred to and processed in India. We implement appropriate safeguards in accordance with applicable data protection laws.

11. Security

We use industry-standard measures including TLS encryption in transit, AES-256 encryption at rest for sensitive tokens, role-based access controls, and regular security audits. No system is 100% secure; please notify us immediately at security@sampark.app if you suspect a breach.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

13. Contact Us

Questions or concerns about this Privacy Policy? Reach us at:

Email: privacy@sampark.app
Contact form: sampark.app/contact