Privacy Policy

Who we are

YUSR AI ("YUSR," "we," "our," or "us") is a multi tenant WhatsApp Business CRM platform. Our app lives at app.yusr.co.in and our website at yusr.co.in.

This Privacy Policy explains how we collect, use, store, and protect information when you use our platform.

Information we collect

• Account information: name, email address, and business details you provide during registration (business name, phone number, industry)
• WhatsApp Business data: your WhatsApp Business Account credentials (Phone Number ID, WABA ID, access tokens) in encrypted form, and message history of conversations conducted through your connected number
• Contact data: customer names, phone numbers, labels, and notes you add to manage your customer relationships
• Usage data: logs of actions within the platform, kept for operational and security purposes
• Payment information: processed by Razorpay. We do not store card numbers or banking details, only transaction IDs and subscription status
• Website visit data: when you browse yusr.co.in we collect standard measurement data such as pages viewed, approximate location by country or city, device and browser type, and which links you click. This is collected through Google Analytics 4 and Cloudflare, and is separate from your account data. See Cookies for how to opt out

How we use your information

• To provide, maintain, and improve the YUSR AI platform
• To send messages on your behalf through the WhatsApp Business API
• To send transactional emails (billing receipts, account alerts, password resets)
• To enforce our Terms of Service and prevent abuse
• To comply with legal obligations and respond to lawful requests

We do not sell, rent, or trade your personal information or your customers' data to third parties.

WhatsApp and Meta data

YUSR integrates with the WhatsApp Business Cloud API provided by Meta Platforms, Inc. By connecting your WhatsApp account, you authorize YUSR to access and manage messages, templates, and account settings on your behalf.

Message content and contact data are stored solely to provide the inbox functionality. You retain ownership of your business data at all times. Our use of Meta's APIs is governed by the WhatsApp Business Terms of Service and Meta Platform Terms.

Data storage and security

Your data is stored using Supabase (PostgreSQL) with the following safeguards:

• Row Level Security (RLS) ensuring tenants cannot access each other's data
• Encrypted storage for sensitive credentials such as access tokens
• HTTPS/TLS encryption for all data in transit
• Password hashing using PBKDF2 with SHA-512 (100,000 iterations)
• Server side authentication with secure HTTP only session cookies

Third party services

Data retention

We retain your data for as long as your account is active. If you cancel and do not request deletion, data is retained for 90 days before automated deletion. You may request immediate deletion at any time. See our Data Deletion page.

Your rights

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and data
• Portability: request an export in a machine readable format
• Objection: object to processing for direct marketing

To exercise any right, email contact@yusr.co.in.

Cookies

In the app (app.yusr.co.in). YUSR uses session cookies to maintain authenticated state. These are HTTP only, secure, and set by Supabase Auth. We set no advertising cookies anywhere, and we do not sell your data or use it to build advertising profiles.

On this marketing website (yusr.co.in). We use Google Analytics 4 to understand how visitors find and use the site, for example which pages get read and which buttons get clicked. Google Analytics sets its own cookies, typically named _ga and _ga_<id>, which hold a randomly generated identifier so returning visits can be counted as one visitor. They do not record your name, phone number, or email, and we do not use them for advertising. Data collected this way is processed by Google and may be stored outside India. We also use Cloudflare Web Analytics, which is cookieless and does not follow visitors across other websites.

Your choice comes first. Google Analytics is not loaded at all until you accept it. If you decline, or simply ignore the banner, no Google script is fetched, no analytics cookies are set, and nothing is sent to Google. Declining takes exactly one click, the same as accepting, and it does not limit anything on this site. We also honour the Global Privacy Control signal automatically, so if your browser sends one we treat it as a decline without asking again.

Changing your mind. Use the Cookie settings link in the footer of any page to bring the choice back up. If you switch from accept to decline, any analytics cookies already set are deleted. You can also block or delete cookies in your browser settings, or install the Google Analytics opt out browser add on.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify registered users via email and update the "Last updated" date on this page. Continued use after changes constitutes acceptance.

Contact

For privacy questions, contact us at contact@yusr.co.in or visit yusr.co.in.