Privacy Policy

Effective date: 2026-10-28. Last updated: 2026-10-28.

Who we are

This WhatsApp assistant is operated by Surya Verma under the name Climbrk. Address: Lucknow, Uttar Pradesh, India. For privacy questions or complaints, email surya@climbrk.app.

What information we use

• Business owners: your name, email, securely stored password, business details, owner contact numbers and settings. Only the main-use signup survey question is required.
• Team members and invitations: names, email addresses, roles, account status, invitation records, optional verified WhatsApp numbers, last sign-in times and activity records showing who replied or changed settings. Owners and authorised Managers can manage access within their permissions.
• Payments, when enabled: plan, payment references and status, renewal period, AutoPay consent and reply usage. Razorpay processes payment details and mandates; we do not store card details, UPI PINs or banking credentials.
• Demo requests: your business name, optional website, name, role and reply email. Used to arrange a demo.
• Customers: WhatsApp numbers, names, messages, media receipt details and permitted media-derived text. Business app connections also import contacts and chat history shared through Meta.
• Service records: enquiries, automated replies, activity records and usage information. Chat insights summarise enquiries, item interest and signed sharing-link sources for the business; no browsing tracking or purchase inference. We also use technical information such as IP addresses and timestamps for security.
• Setup photos: we read uploaded photos to suggest business details. We save approved details, not photos.
• Website import: public page text goes to Google to suggest details. We save review drafts, reviewed source references and approved business facts. Saved Climbrk answers take priority.
• Menu history: saved menus, Owner-approved references, revisions and confirmed changes record the member, time and outcome for review and undo. Uploaded photos are not retained.

We use this information for subscriptions, reply allowances, conversations, support, security and legal obligations. Businesses decide how their customers' information is used; we process it on their behalf. If you messaged a business, that business is your first point of contact.

Automated replies and service providers

The assistant uses business information and messages to generate automated replies. Relevant text and setup photos are sent to Google for this purpose. Google processes this data as our service provider under Google Cloud's terms. Replies can be wrong; the business can review conversations and take over.

Meta delivers WhatsApp messages. Google Cloud hosts the Service and provides AI processing. Cloudflare delivers and protects the website. Mailjet, when email delivery is enabled, receives names, email addresses and email content to send verification codes, password resets, account notices and team invitations. Hosting is in the United States; processing may occur elsewhere.

We do not sell personal data or use customer messages for advertising. We do not train our own models on customer content. We may share information when required by law or if the Service changes ownership, with notice where appropriate.

How long we keep information

• Account information, chats and messages: while the account is active, and deleted within 30 days of closure or a verified deletion request.
• Setup photos: not saved.
• Server logs: up to 90 days.
• Backups: account deletion does not automatically remove separate backup copies. We cannot currently guarantee a fixed deletion date for all backup copies.
• Records required by law: for the period the law requires.

Security and cookies

We use HTTPS, password hashing, account access controls and protection against forged form submissions. No system is completely secure. We will notify affected businesses of a personal-data breach without undue delay and meet applicable notification requirements.

We use essential cookies for login and form security.

Your choices and contact

You can ask to access, correct or delete your information, withdraw consent, or raise a complaint by emailing surya@climbrk.app. We acknowledge requests within 7 days and aim to resolve them within 30 days. We may verify your identity and involve the business you messaged. Your rights under applicable data-protection law remain available as those provisions come into force.

To stop automated messages, send stop in the WhatsApp chat. See Data deletion for deletion steps.

The Service is for businesses and is not aimed at children under 18. Businesses must not use it to target children or collect passwords, OTPs, card numbers, government ID numbers or health records.

We will update this page when our practices change and notify businesses of material changes by email or in the dashboard.