Privacy policy for Sofftrix and VUTrak.

Sofftrix ("we", "us") is a software company based in Hyderabad, India. We build and operate VUTrak, a lead CRM that lets businesses capture leads and message them through the official WhatsApp Business Platform, and AI automation that answers conversations on WhatsApp and Instagram for them. This policy covers this website (sofftrix.com) and the our services.

Registered address: Flat No. 285, Jal Vayu Vihar, KPHB, Hyderabad 500072, Telangana, India.

For information about our own customers — the businesses that sign up for VUTrak and their users — and for visitors to this website, Sofftrix decides how the data is used.

For the leads and contacts a business manages in VUTrak, that business is in control of the data and we process it on its behalf, following its instructions. If you are a lead or customer of a business that uses VUTrak, that business's own privacy policy also applies, and you can contact it directly about your data.

• Account information. Name, business name, email address, phone number, and login details of the people who use VUTrak.
• Lead and contact data. Information a business brings into VUTrak, such as a lead's name, phone number, email, and the answers they gave on a form or ad.
• WhatsApp messages. Messages sent and received through a business's connected WhatsApp Business number, with delivery and read status, timestamps, and any media attached.
• Instagram messages and comments. Direct messages, story replies and mentions, and comments on posts of a business's connected Instagram professional account, with the sender's Instagram username and profile ID.
• Data from Meta and other platforms. When a business connects its accounts, we receive data through Meta's APIs (such as the WhatsApp Business Platform, the Instagram API, and Meta lead ads) and other lead sources like Google Ads and website forms. This includes the WhatsApp Business Account ID, phone number ID, Instagram account ID, message templates, and access tokens needed to send and receive messages for that business.
• Demo requests. The details you type into our demo form, which reach us by email.
• Technical data. IP address, browser type, device information, and logs our servers record when you use the service.

• To provide VUTrak: receive leads, send and receive WhatsApp messages on a business's behalf, route conversations, and show reports.
• To generate automated AI replies to WhatsApp and Instagram messages, when a business turns this on, using the instructions and information that business provides.
• To set up and manage a business's WhatsApp Business Account, phone number, and Instagram connection through Meta's onboarding.
• To respond to demo requests and support questions.
• To keep the service secure, prevent abuse, and fix problems.
• To meet legal obligations and Meta's platform requirements.

Data we receive through Meta's APIs is used only to provide VUTrak to the business that connected its account, and only as Meta's Platform Terms and WhatsApp Business policies allow. We do not:

• sell, license, or rent it to anyone;
• use it for advertising, or to build profiles of people for anyone other than the business that owns it;
• share it with data brokers;
• use it to decide anyone's eligibility for housing, employment, credit, insurance, or similar.

A business can disconnect its WhatsApp, Instagram, or Meta accounts at any time. When it does, we stop collecting data through those connections and revoke the access tokens we held.

We do not sell personal data. We share it only with:

• Meta (WhatsApp). Messages a business sends are delivered through the WhatsApp Business Platform, run by Meta.
• Meta (Instagram). Replies to Instagram messages and comments are sent through Instagram's API.
• AI model providers. To write an automated reply, the conversation and the business's instructions are sent to the AI model provider we use. They process it only to return the reply, under terms that do not let them train their models on it.
• Service providers. Hosting, database, and email providers who store or process data for us under contract and only on our instructions.
• The authorities, when the law requires it.

Every business runs in its own isolated workspace. Data is encrypted in transit, access tokens are stored encrypted, and access by our staff is limited to what is needed to run and support the service. No system is perfectly secure, but we work to protect data against loss, misuse, and unauthorised access.

We keep a business's data for as long as its VUTrak account is active. When an account is closed, we delete its data, including leads, messages, and Meta access tokens, within 30 days, except where the law requires us to keep something for longer.

To ask us to delete your data, email [email protected] with:

• the subject line "Data deletion request";
• your name, and the phone number or email address the data is linked to;
• the business name, if you are a VUTrak customer.

We will confirm the request and delete the data within 30 days. If you are a lead of a business that uses VUTrak, we may pass your request to that business, since it controls your data, and act on its instructions.

You can also stop receiving WhatsApp messages from a business at any time by replying STOP or blocking its number in WhatsApp.

Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can ask to see the personal data we hold about you, correct it, delete it, or withdraw consent you gave earlier. Email [email protected] and we will reply within 30 days.

VUTrak is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.

If we change this policy, we will update the date at the top of this page. If the change is significant, we will tell VUTrak customers by email before it takes effect.

Questions or complaints about privacy: [email protected], or call +91 97043 56075. Post: Sofftrix, Flat No. 285, Jal Vayu Vihar, KPHB, Hyderabad 500072, India.