Privacy Policy

Last updated: 30 September 2026

This policy explains how UpGrow Academy LLP ("we", "us") collects, uses and protects information when you use UpGrow Connect at wa.upgrowsalesflow.com (the "Service"). The Service lets businesses connect their WhatsApp Business number and send their WhatsApp chats and leads to tools they choose, such as Google Sheets, HubSpot, Zoho CRM or a webhook.

1. Two kinds of data, two roles

Your account data. Information about you as our customer: name, business name, email, phone, password (stored only as a secure hash), billing and GST details, and sign-in activity. We decide how this is used.
Your customers' WhatsApp data. When you connect a WhatsApp number, we receive the messages, contact names, phone numbers, media and delivery statuses of the people who chat with your business. We process this data only on your behalf and on your instructions. You decide what is collected and where it is sent. You are responsible for having the right to share it with us and with the destinations you connect.

2. What we collect

Account and billing details you give us when you sign up or pay.
WhatsApp Business account details from Meta when you connect: account and phone number IDs, display name, quality rating and an access token. The token is stored encrypted.
WhatsApp messages, contacts, media and statuses sent to us by Meta for your connected numbers. If you choose the WhatsApp Business app option, this can include contacts and past chats that you agree to share from the app.
Access details for the tools you connect (for example HubSpot or Zoho sign-in tokens), stored encrypted.
Technical data: IP address, browser type and log entries, used for security and troubleshooting.

3. How we use it

To run the Service: receive your WhatsApp data from Meta, store it, and deliver it to the destinations you choose.
To manage your account, send service emails (verification, password reset, billing), and give support.
To keep the Service secure, prevent abuse, and meet legal and tax obligations.

We do not sell personal data, use your customers' WhatsApp data for advertising, or use it to train AI models.

4. Data from Meta (Facebook and WhatsApp)

We connect to WhatsApp through Meta's official WhatsApp Business Platform. Data we receive through Meta's platform is used only to provide the Service to you, as permitted by Meta's Platform Terms and Developer Policies. It is not shared with anyone except the destinations you configure and the service providers listed below. You can disconnect a number at any time from the Numbers page. You can also remove our app from your Facebook business settings.

5. Who we share data with

Meta Platforms, to send and receive WhatsApp data through the WhatsApp Business Platform.
Destinations you connect (Google Sheets, HubSpot, Zoho CRM, your webhook URLs). Data goes there because you set it up; their own privacy policies apply once it arrives.
Service providers who help us run the Service under confidentiality obligations: hosting (Hostinger), email delivery, and payments (Razorpay).
Authorities, only when the law requires it (see below).

Requests from public authorities

If a government body or other public authority asks us for personal data, we: (1) check that the request is lawful and properly made; (2) challenge or refuse requests we consider unlawful or too broad; (3) disclose only the minimum data needed to comply; and (4) keep a written record of each request, our response and the legal reasoning. Where the law allows, we tell the affected business before disclosing its data.

6. How long we keep it

Raw webhook data from Meta: up to 30 days, for troubleshooting.
Messages, contacts and media: while your account is active, or until you delete them or close your account.
Invoices and payment records: as long as Indian tax and company law requires.
When you close your account, we delete your WhatsApp data and account data within 30 days, except records we must keep by law.

7. Security

We use HTTPS for all traffic, AES-256 encryption for stored access tokens, hashed passwords, per-account data separation and access controls. No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. Email us at info@upgrowacademy.com. If you are a customer of one of our clients (someone who chatted with a business on WhatsApp), please contact that business first. We will help them handle your request.

9. Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

10. Children

The Service is for businesses and is not meant for anyone under 18.

11. Changes

If we change this policy, we will update the date above. We will email you about important changes.

12. Contact and Grievance Officer

UpGrow Academy LLP
Manalvayal House, Kariyambadi Post, Wayanad, Kerala 673591
Grievance Officer: Ram Mohan, grievance@upgrowacademy.com
Support: info@upgrowacademy.com

We aim to respond to privacy requests and grievances within 30 days.