Privacy Policy

Introduction

Welcome to Enromatics (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media analytics platform and services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

1.2 Automatically Collected Information

We automatically collect certain information when you use our platform, including:

• IP address and browser type
• Device information
• Pages visited and features used
• Time and date of access
• Session cookies for authentication

2. How We Use Your Information

2.1 Service Delivery

• Provide and maintain our platform services
• Enable WhatsApp messaging functionality
• Display Meta Ads campaign data and insights
• Process and deliver notifications
• Manage your account and subscriptions

2.2 Communication

• Send transactional emails and notifications
• Provide customer support
• Respond to your inquiries
• Send important service updates

2.3 Security and Compliance

• Prevent fraud and unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations
• Protect user rights and safety

3. Data Storage and Security

3.1 Security Measures

• Industry-standard encryption (SSL/TLS)
• Secure authentication with NextAuth.js
• Password hashing using bcrypt
• Multi-tenant data isolation
• Regular security audits and updates

3.2 Data Retention

• Account data retained while your account is active
• WhatsApp message data retained for 90 days (configurable)
• Meta Ads data cached for 30 days
• Deleted account data purged within 30 days

4. Third-Party Services

4.1 Facebook/Meta Integration

We integrate with Facebook/Meta services to provide WhatsApp and Ads management functionality. Your use of these features is subject to:

• Facebook's Data Policy
• WhatsApp Business Policy
• Meta Terms of Service

5. Data Sharing and Disclosure

We May Share Information With:

• Service Providers: Cloud hosting (Vercel, MongoDB), email services, analytics
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you explicitly authorize data sharing

6. Your Rights and Choices

You have the right to:

• Access your personal data
• Update or correct your information
• Delete your account and data
• Export your data (data portability)
• Opt-out of non-essential communications

How to Exercise Your Rights:

• Account Settings: Update information in your dashboard
• Contact Us: Email privacy@enromatics.com
• Delete Account: Use account deletion feature or contact support

7. Multi-Tenant Data Isolation

We operate a multi-tenant platform where:

• Each business account (tenant) has isolated data
• Tenant data is segregated using unique identifiers
• No tenant can access another tenant's data
• Administrative access is strictly controlled

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

10. Legal Compliance

GDPR Compliance (EU Users)

Under GDPR, you have rights to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent.

CCPA Compliance (California Users)

California residents have rights to know what data is collected, opt-out of sale, access data, and request deletion.

India IT Rules Compliance

We comply with Information Technology Act, 2000 and associated rules for Indian users.