DRAFT — FOR LEGAL REVIEW
Privacy Policy
Draft v0.1 · 30 Aug 2026 · Data fiduciary: [Company legal name]

1. What we collect

  • Mobile number — your account identity, sign-in (one-time code), and WhatsApp alert delivery.
  • Your watchers — the goals you write, their settings, check results, and alert history.
  • Calendar data, only if you connect it — event titles, times, and attendees, used solely to prepare your meeting briefings.
  • Device and usage data — push tokens, app version, and basic analytics to keep the Service working.
  • Email, only if you add it later — for email digests. It is optional and never required at signup.

2. What we don't collect

No email at signup, no contact-list upload, no reading of your WhatsApp or other messages. The WhatsApp bot sees only what you send to it.

3. How we use your data

To run your watchers, deliver alerts and digests, prepare meeting briefings, bill paid plans, prevent abuse, and improve the Service. We process your watcher text and the content of monitored pages with third-party AI model providers acting as our processors; we contract to exclude your data from their model training [verify against each provider's current terms].

4. Who we share it with

Only processors that operate the Service: cloud hosting, AI model providers, messaging APIs (including Meta for WhatsApp delivery), and payment providers — each bound by contract to use your data only for us. We do not sell personal data. We disclose data if the law requires it.

Your watchers are never shared with businesses without your action. If we ever offer a feature connecting you with relevant providers, it will be strictly opt-in per watcher: businesses would see only anonymized interest categories — never your identity or contact details — and who you are is revealed only when you choose to accept or initiate contact.

5. Retention

Account data is kept while your account is active and deleted within [30] days of account deletion, except records we must keep by law (such as billing). Fetched page content is kept only as long as needed to evaluate your watchers [X days]; calendar data is cached transiently for the day's briefings.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 you may access, correct, and delete your personal data, withdraw consent, and nominate someone to exercise your rights. Do this in Settings or write to us. Grievance officer: [name, email]. If unresolved, you may complain to the Data Protection Board of India.

7. Security

Data is encrypted in transit and at rest; access is limited to what operating the Service requires. No system is perfectly secure — we will notify you and the authorities of breaches as the law requires.

8. Children

The Service is for users 18 and older; we do not knowingly process children's data.

9. Changes

We will notify you of material changes to this policy through the app or your alert channels before they take effect.

10. Contact

[support email] · [registered address]

← Scantara home