This Privacy Policy describes how SuperCX(“SuperCX”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects information in connection with our website at supercx.co and the SuperCX customer engagement platform available at app.supercx.co(together, the “Service”). SuperCX is an omnichannel customer engagement and business messaging platform that lets businesses manage conversations with their customers across WhatsApp, Facebook Messenger, Instagram, email, voice, and web chat from a single shared inbox.
This policy applies to businesses and their agents who use the Service (“Customers”) and to the end users who message those businesses through the connected channels (“End Users”). By using the Service, you agree to the practices described here.
1. Who we are
SuperCX operates the Service. For the messages and contact data our Customers process through their connected channels, we act as a data processor on their behalf. For the account and billing information of our Customers, we act as a data controller. You can reach us at any time at lohith@supercx.co.
2. Information we collect
- Account information. Name, business name, email address, phone number, password credentials, role, and profile details of Customer users who register for the Service.
- Channel connection data. When a Customer connects a WhatsApp Business account, Facebook Page, or Instagram professional account, we receive access tokens, page and account identifiers, and metadata needed to send and receive messages on their behalf.
- Messages and content. The content of conversations, comments, attachments, media, and related metadata (such as timestamps and delivery status) exchanged between a Customer and their End Users through the connected channels.
- End User contact data. Names, profile identifiers, phone numbers, and public profile information of End Users who contact a Customer, as provided by the messaging platforms.
- Website and usage data. Log data, IP address, browser type, pages visited, and interactions with the Service, used to operate, secure, and improve the platform.
3. Information from Meta Platforms (Facebook & Instagram)
When a Customer connects a Facebook Page or Instagram account, we access information through the Meta Graph API strictly to provide the messaging and engagement features the Customer has requested. Depending on the permissions the Customer grants, this may include:
- Page and Instagram account details, including name, ID, and picture (
pages_show_list,instagram_basic,pages_manage_metadata). - Messages sent to and from the connected Page or Instagram account, so agents can read and reply from the SuperCX inbox (
pages_messaging,instagram_manage_messages). - Comments and content on the connected Page or Instagram account, so agents can view and respond (
pages_read_user_content,pages_read_engagement,instagram_manage_comments).
We use this information solely to deliver the Service to the connecting Customer. We do not sell it, use it for advertising, or share it with data brokers. Our use and transfer of information received from the Meta Graph APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements.
4. How we use information
- To operate the shared inbox and deliver, receive, and route messages.
- To authenticate users and secure accounts and connected channels.
- To provide features such as automation, ticketing, analytics, and team collaboration that our Customers configure.
- To provide customer support and respond to requests.
- To maintain, troubleshoot, and improve the reliability and security of the Service.
- To comply with legal obligations and enforce our terms.
5. How we share information
We do not sell personal information. We share information only in the following limited circumstances:
- With the connecting Customer. Messages and contact data are made available to the business that owns the connected channel and its authorized agents.
- Service providers. Infrastructure, hosting, storage, and communications providers who process data on our behalf under contractual confidentiality and security obligations.
- Messaging platforms. Meta, WhatsApp, and other channel providers, as required to deliver the messages you send through them.
- Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of SuperCX, our Customers, or others.
6. Data retention
We retain personal information for as long as a Customer maintains an active account and as needed to provide the Service, then delete or anonymize it within a reasonable period unless a longer retention is required by law. When a Customer disconnects a channel or closes their account, associated access tokens are revoked and related data is scheduled for deletion.
7. Data deletion and your rights
You may request access to, correction of, or deletion of your personal information at any time. To request deletion of data associated with your Facebook or Instagram account, or any other personal data we hold, email lohith@supercx.co with the subject line “Data Deletion Request” and include the account or page you would like removed. We verify each request and delete the associated data within 30 days.
Customers can also disconnect a Facebook Page or Instagram account at any time from within the SuperCX settings, or remove SuperCX from their Facebook account via Settings & Privacy → Settings → Business Integrations, which revokes our access and triggers deletion of the associated tokens.
8. Data security
We use administrative, technical, and organizational safeguards — including encryption in transit, access controls, and scoped credentials — to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and to notify affected parties of material incidents as required by law.
9. International transfers
We may process and store information in countries other than where you reside. Where required, we implement appropriate safeguards for cross-border transfers of personal information.
10. Children’s privacy
The Service is intended for businesses and is not directed to children under the age of 16. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify Customers through the Service.
12. Contact us
If you have questions about this Privacy Policy or our data practices, contact us at lohith@supercx.co.