Privacy Policy

Effective date: January 1, 2026

This privacy policy describes how App-ening (“we”, “us”, “our”) collects, uses, and protects your personal information when you use our WhatsApp Business platform. We are committed to compliance with Ghana Data Protection Act, 2012 (Act 843).

1. Information We Collect

1.1 Account Information

When you sign up, we collect your name, email address, phone number, business name, and password. If you sign up via Google, we receive your Google profile name and email.

1.2 Contact Data

You import or create contacts in the platform. This may include names, phone numbers, email addresses, tags, and custom fields you define. Phone numbers are encrypted with AES-256 using per-tenant keys.

1.3 Conversation Data

Messages sent and received through the WhatsApp Business API are stored to power your inbox, analytics, and automation features. Message content is encrypted at rest.

1.4 Calendar & Appointment Data

If you connect Google Calendar, we access calendar events to check availability and sync appointments. We only read and write events related to App-ening bookings.

1.5 Payment Information

Payment processing is handled by third-party gateways (e.g., Razorpay, Stripe). We store transaction IDs and payment status but never store card numbers or bank details.

1.6 Usage Data

We collect anonymised usage analytics (pages visited, features used, session duration) to improve our platform. This data is processed via Google Analytics and PostHog.

2. How We Use Your Information

• Platform Functionality: Sending messages, managing contacts, running campaigns, processing appointments, and powering automation workflows.
• Service Improvement: Analysing usage patterns to improve features, fix bugs, and optimise performance.
• Communication: Sending account notifications, billing alerts, and product updates. You can opt out of marketing emails at any time.
• Security: Detecting fraud, preventing abuse, and monitoring for unauthorised access.

3. Data Sharing and Disclosure

We do not sell your personal data. We share data only with:

• WhatsApp / Meta: Message content is transmitted through the WhatsApp Business API as required for delivery.
• Cloud Infrastructure (AWS): Data is stored on Amazon Web Services servers in the US (us-east-1).
• Payment Processors: Transaction data is shared with your connected payment gateway for processing.
• Analytics Providers: Anonymised usage data with Google Analytics and PostHog.
• Error Monitoring: Application errors (no PII) are reported to Sentry for rapid bug fixes.
• Legal Requirements: We may disclose data if required by law, court order, or government request.

4. Data Storage and Security

• All data encrypted in transit (TLS 1.3) and at rest (AES-256).
• PII fields (phone numbers, personal data) encrypted with per-tenant keys.
• Regular security audits and penetration testing.
• Role-based access controls and two-factor authentication.
• Data stored on AWS infrastructure in the United States.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove personal data within 30 days. Conversation logs and analytics may be retained in anonymised form for up to 12 months. Backups are purged within 90 days of deletion.

6. Your Rights

Depending on your location and Ghana Data Protection Act, 2012 (Act 843), you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Portability: Export your contacts and conversation data in standard formats (CSV).
• Objection: Object to processing of your data for marketing purposes.
• Restriction: Request restricted processing while a complaint is resolved.

To exercise these rights, email privacy@app-ening.com.

7. Google API Services

App-ening’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request necessary scopes (Calendar read/write, Contacts read, profile email). Google data is never used for advertising or shared with third parties beyond what is necessary to provide our service. You can revoke access at any time in your Google Account settings.

8. International Data Transfers

Your data may be transferred to and processed in the United States where our servers are located. We use Standard Contractual Clauses and appropriate safeguards for cross-border transfers in compliance with Ghana Data Protection Act, 2012 (Act 843).

9. Children’s Privacy

App-ening is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect. Continued use of the platform after changes constitutes acceptance.

11. Contact Us

For privacy questions or data requests:
Email: privacy@app-ening.com
General support: hello@app-ening.com
App-ening (app-ening.com), registered at A3/245, Manna Farm, Padappai, Tamil Nadu, India 601301.