Privacy policy
Last updated 21 September 2026. This is a working draft pending legal review.
Who we are
The service is operated by Digital Leap Marketing. For the conversations, contacts and files in your workspace, you are the controller and we are the processor: we handle them only to provide the service to you.
What we hold
- Account data: your name, email, password hash, and the agency you belong to.
- Workspace data: the messages, contacts, media and group information from the WhatsApp numbers you link, and everything your team writes in the product.
- Session keys: the credentials WhatsApp issues when a number is linked. Encrypted at rest, never logged, deleted when the number or the workspace is removed.
- Usage records: an activity log of actions in your workspace, and the risk acknowledgements you and your team accept (with time, IP address and the version of the text shown).
- Technical data: IP address, browser, and error reports needed to keep the service running.
What we do with it
Provide the service; keep it secure; tell you about problems; comply with the law. We do not sell data, and we do not use your conversations to train anything.
Who else touches it
Hosting providers for our servers, a payment processor for billing, a push-notification service for alerts, and Slack if you choose to mirror conversations there. Each is bound to handle data only on our instructions. A current list is available on request.
Where it is
Servers in the European Union. If you need a different region, ask before signing up.
How long
For as long as your workspace exists, or the shorter retention you set. After you leave, everything is deleted within 30 days. Backups roll off within a further 30 days.
Your rights
Access, correction, export and deletion — for your own account data, and, as our customer, for everything in your workspace. Write to hello@digitalleapmarketing.com. Where the GDPR or India’s Digital Personal Data Protection Act applies, you have the rights those laws give you, and we will honour them.
Cookies
One session cookie to keep you logged in. No advertising or tracking cookies.