Privacy Policy

Last updated: June 10, 2025

1. Who We Are

SWCRM is a WhatsApp & email marketing platform operated by SoftWeirdo. Our platform lets businesses send bulk WhatsApp messages via the Meta WhatsApp Cloud API, run email campaigns via AWS SES, manage contacts, and access a full CRM dashboard.

Registered address: SoftWeirdo, India. For privacy matters contact us at support@softweirdo.com.

2. What Data We Collect

Account data — name, email address, and phone number you provide when creating or logging into your SWCRM account.

Contact / CRM data — the names, phone numbers, email addresses, and custom fields you import or create inside the platform for your own contacts and leads.

Campaign & message data — message content, template names, delivery status, and engagement events (delivered, read, replied) for WhatsApp and email campaigns you send.

Usage & log data — browser type, IP address, pages visited, API calls made, and timestamps. Collected automatically for security and diagnostics.

Payment data — we do not store card numbers or payment credentials directly; those are handled by our payment processor.

3. How We Use Your Data

  • To provide, maintain, and improve the SWCRM platform.
  • To authenticate you and keep your account secure.
  • To send WhatsApp messages and emails on your behalf through Meta's WhatsApp Cloud API and AWS SES.
  • To process webhook events from Meta and update message delivery statuses.
  • To generate analytics dashboards (open rates, delivery rates, campaign performance) visible only to you.
  • To send you transactional notifications (OTP login codes, service alerts) — never unsolicited marketing.
  • To comply with legal obligations and enforce our terms of service.

4. WhatsApp & Meta Platform Data

When you connect your WhatsApp Business account via Meta's Embedded Signup, we store the resulting access token and phone number ID on your behalf to make API calls. Message content you send is transmitted to Meta's servers under Meta's Privacy Policy. We do not sell, share, or use your WhatsApp messaging data for our own advertising.

Inbound messages and status webhooks from Meta are processed solely to update conversation threads visible in your SWCRM dashboard.

5. Email & AWS SES

Outbound emails are sent via Amazon Web Services Simple Email Service (AWS SES). AWS processes email content as your data processor under AWS's Privacy Policy. Bounce and complaint webhooks from AWS SNS are processed to maintain list hygiene and protect your sender reputation.

6. Data Sharing & Third Parties

We share your data only in the following circumstances:

  • Service providers — MongoDB Atlas (database), Cloudflare R2 (file storage), AWS SES (email), Meta WhatsApp Cloud API (messaging), and Redis (queue processing). Each is bound by their own data processing agreements.
  • Legal requirements — if required by law, court order, or to protect our rights.
  • Business transfers — in the event of a merger, acquisition, or asset sale, with prior notice.

We never sell your personal data or your contacts' data to third parties.

7. Cookies & Local Storage

We use cookies and browser local storage for session authentication (JWT tokens) and UI preferences. No third-party advertising cookies are used. You can clear cookies in your browser settings at any time; this will log you out of SWCRM.

8. Data Retention

Account and contact data is retained for the lifetime of your account plus 90 days after deletion. Message logs and campaign analytics are retained for up to 12 months unless you request earlier deletion. You may request full account deletion by emailing support@softweirdo.com.

9. Data Security

We protect your data with HTTPS/TLS in transit, encrypted credentials storage, access controls, and regular security reviews. However, no system is 100% secure — please use a strong, unique password and keep your API keys confidential.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, or to restrict or object to certain processing. To exercise any of these rights, email us at support@softweirdo.com. We respond within 30 days.

11. Children's Privacy

SWCRM is not directed at children under 16. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of SWCRM after an update constitutes acceptance of the revised policy.

13. Contact Us

Questions or concerns about this policy? Reach us at support@softweirdo.com or via the support chat inside your SWCRM dashboard.