Privacy Policy

Accelr ("we", "our", "us") is a product of Accelr Technologies. This Privacy Policy explains how we collect, use, store, and protect information when you use our CRM and business communication platform at accelr.app (the "Service").

By using Accelr, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account we collect: your name, email address, password (hashed, never stored in plain text), and profile picture (if signing in via Google or Meta).

1.2 Business Data You Add

As part of using the Service, you input and manage:

• Lead information (names, phone numbers, emails, companies, deal values)
• WhatsApp conversations and messages
• Call logs and recordings (from connected telephony providers)
• Pipeline stages and notes
• Booking and calendar events

This data belongs to you. We process it only to deliver the Service.

1.3 Integration Data

When you connect third-party platforms (Meta, Google Ads, LinkedIn, WhatsApp Business, Twilio, JustCall, etc.), we receive and store OAuth tokens and the data you authorize us to access — such as ad spend, lead forms, and call records.

1.4 Usage Data

We automatically collect: IP address, browser type, pages visited, features used, and timestamps. This is used for security, debugging, and improving the product.

1.5 Payment Information

Payments are processed by Stripe. We do not store credit card numbers. We receive and store billing confirmation, transaction IDs, and subscription status.

2. How We Use Your Information

• To provide, operate, and improve the Accelr platform
• To process payments and manage your subscription
• To send transactional emails (account verification, invoices, alerts)
• To sync leads and data from connected ad platforms
• To deliver WhatsApp messages through the Meta Cloud API on your behalf
• To generate AI-driven pipeline health summaries and report insights
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your data to third parties. We do not use your business data to train AI models without your explicit consent.

3. WhatsApp and Meta Data

Accelr integrates with the Meta WhatsApp Cloud API. When you connect a WhatsApp Business Account:

• We store access tokens to send and receive messages on your behalf
• Incoming and outgoing messages are stored in our database linked to your workspace
• We register a webhook with Meta to receive real-time message events
• We do not share your WhatsApp message content with any third party

Your use of WhatsApp through Accelr is also subject to WhatsApp's Business Policy and Meta's Privacy Policy.

4. Data Storage and Security

Your data is stored on:

• Supabase / PostgreSQL — primary database (hosted on AWS)
• Vercel — application hosting (edge functions, serverless)
• Upstash Redis — background job queue and caching

We implement industry-standard security practices including:

• Passwords hashed with bcrypt
• HTTPS enforced on all endpoints
• Webhook payloads verified using HMAC signatures
• Access tokens encrypted at rest
• Role-based access control per workspace (Admin, Sales Manager, Sales Rep)

5. Data Sharing

We share data only with:

• Stripe — for payment processing
• Meta / WhatsApp — to send messages via the Cloud API
• Google, LinkedIn — to sync ad data you authorize
• Resend — to deliver transactional emails
• Telephony providers (Twilio, JustCall, Exotel, etc.) — only for call logging via webhooks you configure
• Google Gemini API & OpenAI API — to process operational metadata for AI insights and reports

All third-party providers are bound by their own privacy policies and data processing agreements. We do not sell, rent, or trade your data.

6. Google API Services Limited Use Disclosure

Accelr Leadflow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Ads API: We connect to your Google Ads account to pull campaign performance data, ad spend, and lead conversion metrics to display in your analytics dashboard.
• Gmail API: We integrate with Gmail to allow you to send follow-up emails and read replies from leads directly within the CRM. We only access emails sent to or from the leads stored in your workspace.
• Google Calendar API: We sync with your calendar to automatically schedule meetings with leads and check your availability.

We strictly do not use Google user data to develop, improve, or train generalized AI and/or ML models.

7. Data Retention

• Your account data is retained as long as your account is active
• On account deletion, we delete your data within 30 days
• WhatsApp messages and call logs are retained for 1 year by default (configurable on Scale plan)
• Payment records are retained for 7 years as required by law

8. Your Rights

You have the right to:

• Access — request a copy of your data
• Correct — update inaccurate information
• Delete — request deletion of your account and data
• Export — download your leads and data in CSV format
• Revoke — disconnect any third-party integration at any time

To exercise these rights, email us at developer@megamind.studio.

9. Cookies

We use essential cookies for authentication (session tokens) and functionality. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this will affect your ability to log in.

10. Children's Privacy

Accelr is a B2B platform intended for business users aged 18 and above. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email and an in-app banner at least 7 days before significant changes take effect. Continued use of the Service after that date constitutes acceptance.

12. Contact Us