Privacy Policy

1. Introduction

SalesByte ("we", "our", "us") is committed to protecting the privacy and security of our customers and their users. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access or use the SalesByte platform and related services.

SalesByte provides software services including WhatsApp Business API integration, messaging automation, chatbot solutions, team inbox, campaign management, analytics, contact management, CRM integrations, and related communication tools.

By using our services, you agree to the practices described in this Privacy Policy.

2. Business Information

3. Information We Collect

We may collect and process the following information:

Account Information

• Name
• Email address
• Mobile number
• Company name
• Billing information

Customer Data

• Contact information uploaded by customers
• WhatsApp conversations
• Message templates
• Media files
• Chatbot configurations
• CRM-related data
• Campaign information

Technical Information

• IP address
• Browser information
• Device information
• Log data
• Usage information

4. Mobile App Permissions

The SalesByte mobile app (Android and iOS) requests the following device permissions. Each is optional and only requested when you use the related feature — the app works without granting any of them, other than losing that specific feature.

• Contacts (read/write):to import your phone's contacts into SalesByte as leads, and to keep a contact's phone-book entry in sync if you choose. Only contact names and phone numbers are read.
• Camera: to scan a business card (the photo is processed to extract name/phone/email/company text, then discarded — we do not keep the image) or to attach a photo to a reply.
• Photo library: to attach an existing photo to a message or note.
• Call log (Android only):if you turn this on in Settings, SalesByte reads your phone's call history to automatically log a call against a matching contact. Off by default. Numbers that do not match a saved contact are never read into or stored by SalesByte. Not available on iOS — Apple does not allow third-party apps to access call history, so call logging there is manual only.
• Notifications: to alert you about new messages, follow-ups, and account activity. We store a device push token, used only to deliver these notifications to your device.

The mobile app stores your login session securely on-device (Android Keystore / iOS Keychain) so you do not have to sign in every time. This never leaves your device except as the normal authentication token sent with your own requests to SalesByte.

5. How We Use Information

We use information to:

• Provide and maintain our services
• Process and deliver messages through WhatsApp Business Platform
• Enable chatbot and automation functionality
• Manage customer accounts
• Process payments
• Improve platform performance
• Provide customer support
• Maintain platform security
• Comply with legal obligations

6. WhatsApp Business Platform

SalesByte integrates with the WhatsApp Business Platform provided by Meta.

By using our services:

• You acknowledge that messages may be processed through Meta's infrastructure.
• You are responsible for obtaining all necessary permissions, consents, and authorizations from your contacts before sending messages.
• You agree to comply with Meta's Business Messaging Policies and applicable laws.

SalesByte does not control WhatsApp's processing of data and is not responsible for Meta's independent privacy practices.

7. Customer Responsibility

Customers are solely responsible for:

• Obtaining lawful consent from their contacts
• Maintaining accurate contact information
• Complying with privacy laws and regulations
• Managing opt-in and opt-out preferences
• Ensuring lawful use of communication channels

8. Data Processor Role

SalesByte acts primarily as a Data Processor for customer data processed through the platform.

Customers remain the Data Controllers and determine:

• What data is collected
• Why data is collected
• How data is used
• Who receives communications

9. Data Storage and Retention

Customer data may be stored using secure cloud infrastructure and service providers.

Unless otherwise required by law:

• Active account data is retained while the account remains active.
• Following account termination, data may be retained for up to 365 days.
• Data may be deleted earlier upon verified customer request where legally permissible.

10. Data Sharing

We do not sell personal information.

We may share information with:

Service Providers

• Meta (WhatsApp Business Platform and Instagram)
• Razorpay
• Infrastructure and hosting providers

Legal Requirements

We may disclose information when required by law, court order, government authority, or to protect our legal rights.

11. Payments

Payments may be processed through third-party payment providers including Razorpay.

SalesByte does not store complete payment card information on its servers.

12. Security

We implement reasonable administrative, technical, and organizational measures to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no system can guarantee absolute security.

13. International Transfers

As our services may be used internationally, information may be transferred, processed, and stored in jurisdictions outside your country of residence.

14. User Rights

Subject to applicable laws, users may request:

• Access to personal information
• Correction of inaccurate information
• Export of available data
• Deletion of personal information

Requests may be submitted to: info@salesbyte.in

15. Account Termination

Customers may discontinue use of the platform at any time.

Data retention and deletion will be handled according to this Privacy Policy and applicable legal requirements.

16. Changes to this Privacy Policy

We may update this Privacy Policy periodically.

Updated versions will be posted on this page with a revised effective date.

17. Google/Gmail Integration

If you connect a Gmail (or other Google) account to SalesByte, we access it through Google APIs to:

• Read messages in your connected inbox to identify and extract leads that match a recognized format (for example, inquiry notifications from lead-generation platforms, or referral emails), so they can be added to your contacts for you to review; and
• Send messages and replies on your behalf, at your direction, through that same connected account.

SalesByte's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not use data obtained through Gmail/Google APIs to serve advertisements.
• We do not use this data to train generalized or non-personalized artificial intelligence or machine learning models.
• We do not sell or transfer this data to third parties, except as necessary to provide or improve the specific feature you have connected it to, to comply with applicable law, or with your explicit consent.
• Only messages matching a recognized lead format are retained; every other message is inspected transiently to check for a match and is not stored.
• Access tokens and any retained message content are encrypted at rest.
• You may disconnect a connected Google account at any time from your SalesByte settings, which revokes our access and stops any further reading or sending through that account.

Your use of a connected Google account also remains subject to Google's own Privacy Policy and Terms of Service.

18. Instagram Integration

If you connect an Instagram professional (Business or Creator) account to SalesByte, you sign in through Instagram's own login page and choose what to allow. We never see your Instagram password. With your permission we access, through Meta's Instagram API:

• Your account's username, name and profile picture, to show which account is connected;
• Direct messages people send to your account, and the replies you send from SalesByte, so your team can answer them from the shared inbox;
• The name, username and profile picture of people who message you, so each enquiry can be added to your contacts; and
• Comments on your own posts and reels, only to send the one automatic private reply you set up for a keyword.

We do not publish posts, read anything outside your own account and the people who contacted it, or message anyone who has not first messaged or commented on your account. Instagram data is used only to provide these features to you, is stored with the rest of your workspace's data, and is never sold or used for advertising.

You can disconnect Instagram at any time from the Channels page, or by removing SalesByte in Instagram's settings, which stops all access. To have the Instagram data we hold about your account deleted, use Instagram's data deletion request or contact us — see our Data Deletion Instructions.

19. Contact Us

For privacy-related questions or requests: