Privacy Policy

Last updated: 2026-09-29

ClickNurture (“we”, “us”), operated by ClickNurture, provides a hosted multi-channel messaging platform that lets businesses (“Customers”) connect their WhatsApp Business Account, Facebook Pages, and Instagram Professional accounts, and send / receive messages with their own contacts (“End Users”). This policy explains what we collect, why, and how End Users and Customers can exercise their rights.

What we collect

• Customer account data: name, email, hashed password, workspace name, workspace members and their roles, and timezone.
• Meta channel connections: for WhatsApp — WABA identifiers, phone number identifiers, and OAuth access tokens returned by Meta’s Embedded Signup. For Facebook Messenger — Facebook Page IDs and Page access tokens. For Instagram — Instagram Professional Account IDs linked to a Facebook Page and their Page access tokens. All tokens are stored encrypted at rest.
• Contact lists: phone numbers, Facebook / Instagram user IDs (PSIDs / IGSIDs), and any attributes Customers upload for the purpose of messaging.
• Messages & comments: message content (text, media, reactions), timestamps, delivery / read statuses, Meta-issued message IDs, and public comments on Facebook Posts or Instagram Media when the Customer has enabled comment automation.
• AI knowledge base: documents and content uploaded by Customers to train their AI bots, and vector embeddings derived from that content.
• Operational logs: webhook payloads received from Meta and error diagnostics, retained for a bounded period for reliability and abuse investigation.

How we use it

• To deliver the messaging platform to Customers — sending and receiving WhatsApp / Messenger / Instagram messages, showing a unified inbox, running broadcasts and AI auto-reply on DMs and comments.
• To operate, secure, monitor, and improve the service.
• To comply with Meta’s WhatsApp Business Platform policy, Messenger Platform policy, Instagram Platform policy, and applicable law.

Sharing

Message and identifier data is transmitted to Meta as required to send / receive messages across WhatsApp, Messenger, and Instagram. AI-generated replies are computed by the AI provider the Customer configures (currently Anthropic or OpenAI); only the relevant conversation excerpt and knowledge-base retrieval snippets are sent to that provider. We do not sell personal data and we do not use End User message content to train our own AI models.

Retention

Customer content is retained for the life of the workspace. Webhook diagnostic events are retained for 30 days. Deleted workspaces and their message history are purged from production within 24 hours and from encrypted backups within 30 days.

Your rights

End Users may opt out of receiving WhatsApp messages by replying STOP to any conversation, or by contacting the Customer directly for Messenger / Instagram. To request access, correction, or deletion of your personal data held by us, see Data deletion.

Contact

General support: [email protected]
Privacy & data requests: [email protected]