Privacy Policy

1. Introduction

This Privacy Policy explains how SupaMsg ("we", "us", "our") collects, uses, and protects information when you use the SupaMsg application ("Service"). We are committed to protecting your privacy and being transparent about our data practices.

By using SupaMsg, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use the Service.

2. Who We Are

SupaMsg is operated by an individual developer based in India. We build and maintain SupaMsg as a desktop and mobile application for managing multiple WhatsApp accounts.

• Website: supamsg.com
• Contact: [email protected]

3. What SupaMsg Does

SupaMsg is a desktop and mobile application that enables users to manage multiple WhatsApp accounts from a single window. The app loads WhatsApp Web within embedded browser views on your device. Your WhatsApp data remains within these browser sessions and is never transmitted to our servers.

4. Data We Collect

We collect minimal data required solely to operate the Service:

• Email Address: Collected during license purchase and activation to manage your license key and provide support.
• Payment Information: Payments are processed entirely by our payment partner, Lemon Squeezy. We do not store, process, or have access to your credit card numbers, bank account details, or other financial information.
• App Settings & Preferences: Your in-app configuration (e.g., theme, notification preferences, account layout) is stored locally on your device.
• License Key Data: Your license key and activation status are stored to validate your subscription.

5. Data We Do NOT Collect

We want to be absolutely clear about what we do not collect:

• WhatsApp Messages: Your messages stay in the browser/device. They are never sent to, read by, or stored on any SupaMsg server.
• Contacts: We have no access to your WhatsApp contact lists.
• Media Files: Photos, videos, documents, and voice notes shared through WhatsApp are not collected or transmitted to us.
• Call Data: We do not intercept or record any voice or video calls.
• Browsing Activity: We do not track which conversations you open or how you use WhatsApp.

6. Data Storage & Security

All user data is stored locally on your device. We follow a privacy-first architecture:

• WhatsApp session data is stored in local browser partitions on your device.
• App settings and preferences are stored in local configuration files.
• Data is encrypted where possible using industry-standard encryption methods.
• No user data is replicated, synced, or backed up to external servers by SupaMsg.

Because your data remains on your device, the security of your data is also dependent on the security of your device. We recommend keeping your operating system up to date and using device-level encryption.

7. Third-Party Services

SupaMsg integrates with the following third-party services:

• Lemon Squeezy (payments): Processes all payments and subscription management. Subject to Lemon Squeezy's Privacy Policy.
• Anthropic Claude API (AI features): When you explicitly trigger AI-powered features (e.g., message suggestions, smart replies), relevant message content is sent to Anthropic's Claude API for processing. This only happens when you choose to use AI features — never automatically. Subject to Anthropic's Privacy Policy.
• WhatsApp Web (core functionality): Loaded within the app's embedded browser views. Subject to WhatsApp's Privacy Policy.

8. Cookies & Local Storage

SupaMsg uses minimal cookies and local storage, exclusively for:

• WhatsApp Web Sessions: Cookies and local storage used by WhatsApp Web to maintain your logged-in sessions. These are stored locally in isolated browser partitions on your device.
• App Preferences: Local storage for your application settings.

We do not use tracking cookies, analytics cookies, or advertising cookies. No cookie data is transmitted to external servers by SupaMsg.

9. Your Rights

Because virtually all data is stored locally on your device, you have direct and complete control over your data:

• Right to Access: All your data is on your device. You can view your app data folder at any time.
• Right to Delete: You can delete all SupaMsg data by clearing the app's data folder or uninstalling the application.
• Right to Export: Your data is stored in standard formats on your device and can be copied or backed up as needed.
• Right to Restrict Processing: You can disable AI features to prevent any data from being sent to third-party APIs.

For any data held by our payment processor (email, purchase records), contact us at [email protected] and we will assist you in exercising your rights.

10. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• Legal Basis for Processing: We process your email address based on contractual necessity (to provide your license). AI feature usage is based on your explicit consent (you choose to trigger it).
• No EU Data Transfers: Since your data is stored locally on your device, there are no cross-border data transfers by SupaMsg. Payment processing is handled by Lemon Squeezy, which maintains its own GDPR compliance.
• Right to Erasure: You may request deletion of any personal data we hold (license/email records) by contacting us.
• Right to Access: You may request a copy of any personal data we hold about you.
• Right to Portability: Your local data is already in your possession. For purchase records, contact us.
• Right to Object: You may object to processing at any time by contacting us.
• Data Protection Officer: For GDPR inquiries, contact [email protected].

11. DPDP Act Compliance (India)

In accordance with India's Digital Personal Data Protection Act, 2023:

• We process personal data only for lawful purposes with your consent.
• You have the right to access, correct, and erase your personal data.
• You may nominate another person to exercise your data rights in the event of your death or incapacity.
• You may withdraw consent at any time by discontinuing use of the Service and deleting local app data.
• Grievances may be directed to [email protected], and we will respond within 30 days.

12. CCPA Compliance (US/California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we collect. See Section 4 for a complete list.
• Right to Delete: You may request deletion of personal information we hold about you.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

13. Children's Privacy

SupaMsg is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will take steps to remove such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify users via an in-app notification in the next app update.
• For material changes, provide prominent notice before the changes take effect.

Your continued use of SupaMsg after changes are posted constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: supamsg.com

We will respond to all inquiries within 30 days.