Privacy Policy

1. Information We Collect

• Account information — name, email address, and (if you sign in with Google) your Google profile picture.
• Billing information — billing contact details; payment details are processed by our payment processors, and we do not store your full card number.
• Professional network credentials— only if you choose to connect a professional networking account to use our automation features, you provide us with that account's login credentials. These credentials are transmitted securely and encrypted. They are used solely to connect your account to our platform and are never stored in plain text or shared with any party other than our encrypted automation infrastructure.
• Commercial data — lead profiles, messages, campaign settings, reply history, and outcomes you create or that our system generates on your behalf.
• Usage data — pages visited, features used, and technical logs (IP address, browser type, timestamps) used to operate and secure the service.

2. How We Use Your Information

• To create, maintain, and secure your account.
• To run and automate your campaigns and commercial workflows.
• To generate, store, and send messages and follow-ups on your behalf.
• To process transactions and manage billing.
• To improve the product, diagnose errors, and prevent abuse.
• To communicate with you about your account, billing, and product updates.
• To comply with legal obligations and respond to lawful requests.

3. Third Parties Who Process Your Data

We do not sell your personal data. We share data only with trusted infrastructure partners that are contractually required to keep it secure and may use it only to provide services on our behalf. As of the date of this policy, these include:

• Infrastructure & hosting — our application server and cloud database provider (data centres that host your account and outreach data).
• Database & analytics — our PostgreSQL database and ClickHouse analytics store, which power your dashboard and reporting.
• AI providers — large-language-model providers used to generate your campaigns, messages, and segmentation. Where enabled, we configure these to not retain your prompts as training data.
• Payments — payment processors (e.g. Razorpay/Stripe) that handle billing. We do not store your full card number.
• Integrations — the professional networking platforms, Google Calendar, and Zoom (for the accounts you choose to connect), and our secure account-connection infrastructure provider. These receive only the data needed to provide the integration you request.
• Communications — email/notification providers used to send account and product emails.

We may disclose information where required by law or to protect the rights and safety of our users and the public. When you sign in with Google, we receive your name, email address, and profile picture, used solely to create and maintain your Mercon AI account.

4. Data Security

Data is encrypted in transit (HTTPS) and at rest. Passwords are stored as bcrypt hashes. Connected-account credentials and API keys are encrypted before storage. Access to production systems is restricted to authorised personnel. You are responsible for safeguarding your own login credentials.

5. Data Retention

We retain your account and commercial data for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account or request deletion, we remove or anonymise your data from active stores within 30 days, subject to legal, billing, and backup retention requirements.

6. Your Rights

• Access — request a copy of the data we hold about you.
• Rectification — correct or update inaccurate information.
• Erasure — request deletion of your account and associated data at any time from Settings, or by emailing microsaassolutions@gmail.com.
• Restriction of processing — request that we limit how we use your data.
• Data portability — request a machine-readable copy of data you provided to us.
• Objection — object to processing based on legitimate interest or to non-essential communications.

To exercise any of these rights, email microsaassolutions@gmail.com. We may verify your identity before fulfilling requests and respond to verifiable requests within 30 days.

7. Contact

For privacy questions or to exercise your rights, email microsaassolutions@gmail.com. We typically respond within 5 business days.