Privacy Policy

1. Overview & Commitment

BizUpward ("we", "our", or "us") provides a cloud-based multi-tenant SaaS management platform for salons, spas, and service businesses. This Privacy Policy outlines how we collect, use, process, and protect your information when you access our platform, website, and integrated services, including the Meta WhatsApp Business Cloud API.

2. Information We Collect

We collect and process the following categories of information solely to provide business operations and automated notifications:

• Business & Account Information: Business name, owner email, phone number, address, and login credentials.
• Customer Appointment & CRM Data: Customer name, phone number, email, appointment times, stylist assignments, and service history.
• WhatsApp Cloud API Data: WhatsApp Phone Number ID, WhatsApp Business Account ID (WABA ID), and message transmission status for transactional notifications (appointment confirmations, reminders, and digital POS receipts).
• Transaction & Billing Records: Itemized sales invoices, discounts, payment modes, and stylist commission metrics.

3. How We Use WhatsApp & Meta Data

Our integration with the Meta WhatsApp Cloud API is used strictly for transactional, customer-requested notifications. We do NOT use customer WhatsApp phone numbers for unsolicited marketing, third-party advertising, or spam.

4. Data Sharing & Third-Party Disclosure

We never sell, rent, or trade your personal or customer information. Data is only shared with trusted service infrastructure providers necessary to operate our SaaS platform:

• Meta Platforms, Inc.: To deliver WhatsApp Business messages per Meta's WhatsApp Business Terms.
• Secure Cloud Infrastructure: PostgreSQL database servers and hosting providers operating under strict confidentiality and encryption standards.

5. Security & Data Isolation

BizUpward implements strict multi-tenant data isolation. Each business's data is logically segregated with database-level tenant filtering, HTTPS encryption in transit, and salted cryptographic password hashing.

6. Data Retention & Deletion Rights

Customers and business owners have the right to request access to, correction of, or permanent deletion of their data at any time. To request data deletion, contact our privacy officer at [email protected].