Privacy Policy

Spidery Connect (“we”, “us”) is a software service operated by Spidery Web, 303 Quantum Towers, SV Road, Malad West, Mumbai 400064, Maharashtra, India. It lets businesses (“Customers”) manage their WhatsApp Business and Instagram professional account messages, comments, automated replies, chatbots and leads in one dashboard at connect.spideryweb.com. This policy explains what we collect, why, and the choices you have.

1. Who this applies to

• Customers — businesses and their team members who sign up and log in to Spidery Connect.
• End users — people who message, comment on, or are messaged by a Customer’s WhatsApp number or Instagram account. For their data, the Customer decides what is collected and why, and we process it on the Customer’s behalf.

2. Information we collect

From Customers

• Account details: name, business name, email address, phone number, password (stored only as a secure hash).
• Billing details: package, subscription status and invoices. Card / UPI payments are handled by Razorpay; we never see or store full card numbers.
• Settings and content you create: auto-replies, chatbot flows, knowledge-base FAQs, templates, tags and notes.

From Meta (Instagram and WhatsApp), when a Customer connects an account

• Instagram (Instagram API with Instagram Login): the account’s ID, username, name, profile picture and account type; direct messages sent and received; comments on the account’s posts and reels and replies to them; and the posts’ / reels’ IDs, captions, thumbnails and links (so the Customer can choose which posts an automation applies to). Permissions used: instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments.
• WhatsApp (WhatsApp Business Platform / Cloud API): the business phone number and account IDs, messages sent and received, message delivery and read status, and message templates. Permissions used: whatsapp_business_messaging, whatsapp_business_management.
• Access tokens issued by Meta, stored encrypted (AES-256-GCM).

About end users

• Name, profile name, phone number (WhatsApp) or Instagram username and ID, profile picture, messages and comments, and details they choose to share in a chat (for example email, city or course of interest), plus tags, notes and lead status added by the Customer’s team. If a person clicked a Click-to-WhatsApp or Instagram ad, the ad ID and headline that Meta sends with the message.

Automatically

• Log data such as IP address, browser type and the time of requests, used for security and troubleshooting. We use only essential cookies (to keep you logged in). We do not use advertising cookies or sell data.

3. How we use information

• To provide the service: show conversations, send the Customer’s replies, run the Customer’s auto-replies, chatbot flows and comment-to-DM automations, and organise leads.
• To send service emails: login details, password resets, trial and payment notices.
• To bill Customers, prevent abuse, keep the service secure, and comply with law.

We use data received from Meta only to provide these features to the Customer who connected the account, in line with the Meta Platform Terms and Developer Policies. We do not sell it, use it for advertising, or share it with data brokers.

4. Sharing

We share information only with service providers that help us run Spidery Connect, under confidentiality obligations: Meta (to send and receive messages), our hosting provider (Hostinger, servers and database), Razorpay (payments) and our email provider (account emails). We may disclose information if required by law or to protect our rights and users’ safety. Customers can see their own workspace data; their team members see what the Customer’s admin allows.

5. Storage, security and retention

• Data is stored on secured servers. Access tokens and secrets are encrypted; passwords are hashed; connections use HTTPS.
• We keep a Customer’s data while their account is active. When a Customer deletes their workspace, its data is deleted immediately from our live database (backups roll over within 30 days). If a Customer disconnects Instagram or removes our app in Instagram settings, we stop using that account’s token at once.
• Billing records are kept as long as Indian tax law requires.

6. Your rights and choices

• Customers can view, export (lead sheet export) and correct their data in the dashboard, disconnect channels any time, and delete their whole workspace from Settings → Delete workspace.
• End users can ask the business they talked to, or write to us, to access, correct or delete their data. See our Data Deletion page.
• Under India’s Digital Personal Data Protection Act, 2023 you may also withdraw consent and raise a grievance (see below).

7. Children

Spidery Connect is a business tool and is not meant for anyone under 18.

8. Changes

We may update this policy and will change the date above. For significant changes we will notify Customers by email or in the dashboard.

9. Contact and grievance officer