Privacy Policy
Effective Date: 19 June 2026 · Last Updated: 19 June 2026
1. Who We Are
Magnate ("we", "us", "our") is a product of MAGNATE AI SOFTWARES PRIVATE LIMITED, a company incorporated under the laws of India.
- Registered Office: 01, Umang Complex, Gajarawadi, Pratapnagar, Vadodara - 390004, Gujarat, India
- Contact Email: [email protected]
- Website: growthmagnate.com
- Data Protection Officer: [email protected]
This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website at growthmagnate.com, our application at app.growthmagnate.com, and all related services (collectively, the "Service").
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, company name, and billing details when you create an account or subscribe to a plan.
- Company Brain Data:Business knowledge documents, product information, pricing sheets, FAQs, and sales playbooks you upload to train Magnate's AI.
- Communication Preferences: Your notification settings, channel preferences, and support correspondence.
2.2 Information Collected via Third-Party Integrations
When you connect third-party platforms to Magnate, we receive data as authorised by you. This includes:
- Meta (Facebook & Instagram) Data: When you connect your Facebook Page via Meta Login, we receive your page listing, page access tokens, and lead form submissions (name, email, phone number, and any custom fields defined in your lead forms) through the Meta Lead Ads API. We use these permissions:
pages_show_list,pages_read_engagement,leads_retrieval,business_management. - WhatsApp Business Data: When you connect your WhatsApp Business Account via Embedded Signup, we receive your WhatsApp Business Account ID, phone number registration details, message templates, and inbound/outbound message content (including text, media, and delivery statuses). We use these permissions:
whatsapp_business_management,whatsapp_business_messaging. - Calendar Data: When you connect Google Calendar or Microsoft Outlook, we access your availability to book appointments on your behalf.
2.3 Information Collected Automatically
- Usage Data: Pages viewed, features used, click patterns, session duration, and referring URLs.
- Device & Browser Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
- Cookies & Similar Technologies: We use cookies and local storage to maintain sessions, remember preferences, and collect analytics. See Section 10 for details.
2.4 Lead and Conversation Data
When your leads interact with Magnate through WhatsApp, SMS, email, or web chat, we process the content of those conversations to provide the Service. This includes messages, timestamps, contact details, and AI-generated responses.
3. How We Use Your Information
We process your data for the following purposes:
- Service Delivery: To operate the Magnate platform, including AI-driven lead engagement, lead qualification, appointment booking, and conversation management.
- Integration Operations: To receive leads from Meta Lead Ad forms, send and receive WhatsApp messages, sync calendar availability, and manage your connected accounts.
- AI Training (Your Data Only): To train your personalised Company Brain using the documents and information you upload. We do not use your data to train AI models for other customers.
- Analytics & Improvement: To generate reports, dashboards, and insights about your lead pipeline and conversation performance.
- Communication: To send account notifications, billing alerts, product updates, and support responses.
- Security & Fraud Prevention: To detect unauthorised access, protect against abuse, and maintain platform integrity.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. Legal Basis for Processing
We process your personal data on the following grounds:
- Contract Performance: Processing necessary to deliver the Service you subscribed to.
- Consent: Where you have granted explicit consent, such as connecting third-party integrations (Meta, WhatsApp, calendars) or enabling specific features.
- Legitimate Interest: For analytics, security, and service improvement, where our interests do not override your rights.
- Legal Obligation: Where required by applicable laws (e.g., tax, accounting, regulatory requirements).
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only in these circumstances:
- Service Providers: With trusted third-party vendors who help us operate the Service (cloud hosting, payment processing, email delivery). These providers are contractually bound to process data only as instructed by us.
- Platform Integrations: When you connect Meta, WhatsApp, or other platforms, data flows between Magnate and those platforms as required by the integration. We process this data in compliance with Meta Platform Terms.
- Your End Users (Leads): Messages you send through Magnate are delivered to your leads via the selected channel (WhatsApp, SMS, email). Magnate acts as a processor on your behalf.
- Legal Requirements: If required by law, court order, or government authority, or to protect our rights, property, or safety.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction, subject to the same privacy protections.
6. Data Retention
We retain your data as follows:
- Account Data: For as long as your account is active. Upon workspace deletion, account data is permanently removed from active systems within 30 days.
- Conversation & Lead Data: For as long as your account is active. Deleted from active systems within 30 days of account termination and purged from backups within 90 days.
- Billing Records: Retained for up to 7 years as required by applicable tax and accounting laws.
- Platform Data from Meta: Deleted promptly upon your request, upon disconnection of the integration, or when your account is terminated, in compliance with Meta Platform Terms.
- Usage & Analytics Data: Aggregated and anonymised data may be retained indefinitely for service improvement.
7. Your Rights & How to Exercise Them
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data (see Section 8 for detailed instructions).
- Data Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw previously given consent at any time. This will not affect the lawfulness of prior processing.
- Object to Processing: Object to processing based on legitimate interests.
- Restrict Processing: Request restriction of processing in certain circumstances.
- Lodge a Complaint: File a complaint with a supervisory authority in your jurisdiction.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data Deletion - How to Request Deletion of Your Data
You have the right to request deletion of your personal data at any time. We honour deletion requests regardless of your jurisdiction. Here is how you can submit a request:
8.1 Via Email
Send an email to [email protected] with the subject line "Data Deletion Request". Include your registered email address and company name. We will process your request within 30 days and send you a confirmation.
8.2 Via Your Magnate Account
You can manage and delete your data directly from your Magnate dashboard at app.growthmagnate.com. Navigate to Settings → Danger Zone → Delete Workspace to permanently delete your workspace and all associated data, or Settings → Integrations to disconnect specific services and remove associated data. Data is permanently deleted from active systems within 30 days and purged from backups within 90 days.
8.3 Facebook & Meta Platform Data
If you connected your Facebook or Instagram account to Magnate, you can also request deletion of your data through Facebook:
- Go to your Facebook Settings → Apps and Websites.
- Find "Magnate" and click "Remove".
- Check the box "Delete all posts, photos and videos on Facebook that Magnate may have received" and click "Remove".
When you do this, Facebook sends us an automated data deletion request. We will delete all Meta Platform Data associated with your account and provide a confirmation code and status URL so you can track the deletion.
8.4 WhatsApp Business Data
If you connected your WhatsApp Business Account, you can disconnect it at any time through your Magnate dashboard (Settings → Integrations → WhatsApp → Disconnect). Upon disconnection, we will revoke access tokens and stop all message processing. Existing conversation history and templates are retained in your workspace until you delete the workspace or submit a data deletion request via email.
9. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS 1.2+) and at rest (AES-256).
- Access controls with role-based permissions and multi-factor authentication.
- Regular security assessments and vulnerability testing.
- Secure webhook signature verification for all third-party integrations (Meta, WhatsApp).
- Data isolation between tenants, no customer can access another customer's data.
While no system is 100% secure, we take reasonable precautions to protect your data. If you suspect a security breach, contact us immediately at [email protected].
10. Cookies & Tracking Technologies
We use the following types of cookies:
- Essential Cookies: Required for the Service to function (authentication, session management). Cannot be disabled.
- Analytics Cookies: Help us understand how visitors use our website (page views, traffic sources). We use these to improve the Service.
- Preference Cookies: Remember your settings and personalisation choices.
You can control cookies through your browser settings. Disabling essential cookies may impair the functionality of the Service.
11. Children's Privacy
Magnate is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, contact us at [email protected].
12. International Data Transfers
Your data may be processed and stored in countries other than your own, including India, the United States, and other jurisdictions where our service providers operate. We ensure that any international transfer of personal data is protected by appropriate safeguards, including standard contractual clauses or equivalent mechanisms recognised under applicable law.
13. Third-Party Links
Our Service may contain links to third-party websites or services (e.g., Meta, WhatsApp, Google). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any data.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the Service. The "Last Updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy, your data, or how to exercise your rights, contact us:
- Email: [email protected]
- Website: growthmagnate.com
- Registered Entity: MAGNATE AI SOFTWARES PRIVATE LIMITED
- Address: 01, Umang Complex, Gajarawadi, Pratapnagar, Vadodara - 390004, Gujarat, India