Privacy Policy

1. Overview

This policy applies to engagepro.brightnous.com, our dashboard, APIs, and any related services (together, the "Service"). It covers two categories of people:

• Tenants — the businesses that register an EngagePro account, connect a WhatsApp Business Account, and use our tools to manage leads, flows, templates, and broadcasts.
• Contacts — the individuals a Tenant messages through the Service (their customers, leads, or subscribers).

Each Tenant is the data controller for the Contact data they upload or message through their workspace. EngagePro acts as a data processor / service provider on the Tenant's behalf for that Contact data, and as a data controller for the account and billing data we collect directly from Tenants.

2. Data we collect

2.1 Account & business data

• Name, work email, phone number, and password (hashed) used to register and log in.
• Company / workspace details such as business name, address, and industry.
• Billing details processed via our payment partner (Razorpay), including plan, invoices, and payment status. We do not store full card numbers on our servers.
• Team member roles and invitations within a workspace.

2.2 Contact & conversation data (uploaded by Tenants)

• WhatsApp phone numbers, names, tags, and custom fields Tenants add for their leads/contacts.
• Message content, media, and metadata exchanged between a Tenant and their Contacts through WhatsApp.
• Notes, lead status, pipeline stage, and conversation history recorded by the Tenant's team.
• Knowledge-base documents a Tenant uploads to power AI-assisted replies.

2.3 Technical & usage data

• Log data such as IP address, browser type, device identifiers, and pages visited.
• Cookies and similar technologies used to keep you signed in and understand product usage (see Section 10).

3. WhatsApp & Meta data

EngagePro integrates with the WhatsApp Business Platform, provided by Meta. When a Tenant connects their WhatsApp Business Account, we receive and process data such as their Meta Business/App credentials, phone number ID, message templates, and delivery/read receipts, strictly to operate the messaging features of the Service.

Use of WhatsApp through EngagePro is also governed by Meta's WhatsApp Business Terms and Policies. Tenants are responsible for ensuring they have the necessary rights and opt-in consent from their Contacts before messaging them, in line with WhatsApp's Business Messaging Policy and applicable law.

4. How we use data

• To provide, operate, and maintain the Service — including sending/receiving WhatsApp messages on a Tenant's behalf, managing leads, flows, broadcasts, and analytics.
• To authenticate accounts, enforce workspace permissions, and prevent fraud or abuse.
• To process subscription payments and manage billing, invoices, and message-usage pricing.
• To power optional AI features (e.g. AI-assisted replies) using content a Tenant has provided or authorized.
• To send account, billing, and service-related notifications.
• To respond to support requests and demo/contact form submissions.
• To monitor, secure, and improve the Service, including debugging and analytics.
• To comply with legal obligations and enforce our Terms & Conditions.

5. Legal basis for processing

Where applicable data protection law requires a legal basis, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (securing and improving the Service, preventing fraud), consent (e.g. cookies, marketing communications, or Contact opt-ins collected by Tenants), and compliance with legal obligations (e.g. tax and accounting records).

6. Sharing & sub-processors

We do not sell personal data. We share data only as needed to run the Service:

These providers may only use data as necessary to perform their services for us and are bound by confidentiality and data-protection obligations. We may also disclose data if required by law, to protect the rights and safety of EngagePro, our users, or the public, or in connection with a merger, acquisition, or sale of assets.

7. Data retention

We retain account and billing data for as long as a workspace is active and as needed to meet legal, tax, and accounting requirements after closure. Contact and conversation data uploaded by a Tenant is retained for as long as that Tenant's workspace holds it, or until the Tenant deletes it or closes their account, after which it is deleted or anonymized within a reasonable period, subject to backup retention and legal retention requirements.

8. Security

We use industry-standard safeguards — including encryption in transit, access controls, hashed passwords, and tenant-level data isolation — to protect data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. Tenants can manage most Contact data directly within the dashboard. To exercise these rights for account-level data, contact us using the details in Section 14. If you are a Contact messaged by a Tenant using EngagePro and wish to exercise your rights, please contact that business directly, as they control the data; we will assist them as needed.

10. Cookies

We use essential cookies to keep you signed in and remember basic preferences, and limited analytics cookies to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling essential cookies may affect the Service's functionality.

11. GDPR & international transfers

Where the GDPR or similar regional laws apply, we process personal data in accordance with those requirements and, where data is transferred internationally, rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our infrastructure and processing partners.

12. Children's privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the dashboard or by email, and the "Last updated" date above will reflect the latest revision. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact us

Questions about this Privacy Policy or how we handle data can be sent to:

• Email: support@brightnous.com
• Phone: 8886902098
• Address: H.No 5-10/36/A/1, Suraksha Habitate, Ameenpur, Hyderabad, Telangana, 502032, India