Privacy Policy

1. Introduction

This Privacy Policy explains how Magic Square Technologies Inc. ("Magic Square", "we", "us" or "our") collects, uses, discloses and protects information when you use our website, dashboard, APIs and related services (the "Service"), including when you use the Service to send messages via the WhatsApp Business API.

2. Information We Collect

We collect the following categories of information:

• Account information: name, work email, phone number, company name, and billing details you provide when you register or upgrade your plan.
• WhatsApp messaging data: the phone numbers of your contacts, message content and templates you send, and delivery, read and engagement metadata (e.g. sent, delivered, read, replied) needed to operate the Service.
• Usage & log data: pages visited, features used, device and browser type, IP address, and timestamps, collected automatically as you use the Service.
• Cookies & similar technologies: as described in Section 8 below.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate and maintain the Service, including sending messages on your behalf via the WhatsApp Business API;
• Process payments and manage your subscription;
• Provide customer support and respond to your requests;
• Monitor and improve the performance, security and reliability of the Service;
• Communicate with you about updates, security alerts, and administrative messages;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information or your contacts' phone numbers to third parties.

4. How We Share Your Information

We share information only as necessary to provide the Service:

• Meta / WhatsApp: to deliver messages, we transmit message content and recipient phone numbers to Meta's WhatsApp Business Platform, which processes this data under its own privacy policy and business terms.
• Payment processors: billing details are shared with our payment processing partners to process subscription payments securely; we do not store full card numbers on our own servers.
• Service providers: we use third-party infrastructure and analytics providers (e.g. cloud hosting, email delivery) who process data on our behalf, under contractual confidentiality and data-protection obligations.
• Legal & safety: we may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property or safety of Magic Square, our users, or the public.
• Business transfers: if Magic Square is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

5. Data Retention

We retain account information for as long as your account is active and as needed to provide the Service. Message content and delivery metadata are retained for as long as reasonably necessary to provide the Service and for the periods required for billing, support and legal compliance, after which they are deleted or anonymized. You may request earlier deletion as described in Section 7.

6. Data Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and regular security reviews — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update most account information directly from your dashboard, or contact us to exercise these rights. We will respond to verified requests within the timeframe required by applicable law.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used, so we can improve it. You can control cookies through your browser settings; disabling cookies may limit some functionality of the Service.

9. Children's Privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from individuals under the age of 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Data Transfers

Your information may be processed and stored in countries other than your own, including where our servers or service providers are located. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect information transferred internationally.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us or email us at hello@magicsquare.example.