Privacy Policy

1. Information We Collect

We collect the following categories of information when you register and use Unify:

• Account information: your name, email address, and password (stored in hashed form).
• Business profile: your business name and any optional details you provide during onboarding.
• Facebook & Instagram access tokens: OAuth access tokens granted by you when you connect a Facebook Page or Instagram Business account. These tokens allow Unify to read and send messages on your behalf via the Meta Messaging APIs.
• Instagram account information: Instagram username, page ID, and profile metadata returned by the Meta Graph API.
• WhatsApp phone numbers: the WhatsApp Business phone number(s) you connect through the WhatsApp Business Platform (Cloud API).
• Conversation messages: the content of inbound and outbound messages exchanged through your connected channels (WhatsApp, Facebook Messenger, Instagram DMs). This includes text, media file metadata, and timestamps.
• Usage data: standard server logs, IP addresses, browser type, and actions taken within the application, used to operate and improve the service.

2. How We Use Your Information

• AI-assisted inbox: conversation messages are sent to OpenAI's API to generate suggested replies and automate responses in your unified inbox.
• Message routing: access tokens and channel identifiers are used to deliver outbound messages to the correct Meta channel on your behalf.
• Account management: your email and profile data are used to authenticate you, send transactional emails (e.g., plan confirmations), and provide customer support.
• Billing: payment details are processed by Razorpay; we store only the Razorpay subscription/order IDs and plan status — we never store raw card numbers.
• Service improvement: aggregated, anonymised usage statistics help us debug issues and improve features.

3. Third-Party Services

Unify integrates with the following third-party services. Each has its own privacy policy that governs the data you share with them:

4. Data Retention

• Account data is retained for as long as your account is active.
• Conversation messages are stored for up to 12 months from the date of the conversation, after which they are automatically purged.
• Access tokens are retained only while your channel connection is active. When you disconnect a channel, the stored token is immediately deleted from our database.
• Billing records (Razorpay IDs, plan history) are retained for 7 years to comply with applicable tax and financial regulations.
• When you delete your account, all personal data, business profile, channel connections, and conversation history are deleted within 30 days, except where retention is required by law.

5. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage at rest via Supabase, and row-level security policies ensuring users can only access their own data. Access tokens are stored in encrypted columns and never exposed in API responses.

6. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data, and to withdraw consent at any time. To exercise any of these rights, or to request deletion of your data, please contact us at hello@unqode.com. We will respond within 30 days.

You can also visit our Data Deletion page for step-by-step instructions.

7. Children's Privacy

Unify is intended for business use only and is not directed to anyone under the age of 18. We do not knowingly collect personal data from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app notice. Continued use of Unify after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact: