Privacy Policy

1. Introduction

Superstar Retailer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer engagement platform, including our WhatsApp Business services powered by Meta platforms.

By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account or subscribe to our services
• Contact us through WhatsApp or other communication channels
• Make a purchase or engage with promotional offers
• Participate in surveys, contests, or promotions
• Request customer support

This information may include your name, email address, phone number, WhatsApp number, billing address, payment information, and any other information you choose to provide.

2.2 Information Collected via WhatsApp

When you interact with businesses through our WhatsApp Business platform, we may collect:

• Your WhatsApp phone number and profile information
• Message content and conversation history
• Timestamps and delivery/read receipts
• Media files you share (images, documents, etc.)
• Opt-in/opt-out preferences for marketing communications

2.3 Automatically Collected Information

We automatically collect certain information when you visit, use, or navigate our platform, including:

• Device information (type, operating system, unique device identifiers)
• IP address and approximate location
• Browser type and version
• Usage data and interaction patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Service Delivery: To provide, operate, and maintain our platform and services
• Customer Communication: To send transactional messages, order updates, and respond to inquiries via WhatsApp and other channels
• Marketing: To send promotional communications (with your consent) about products, services, and offers
• Personalization: To personalize your experience and deliver tailored content and recommendations
• Analytics: To analyze usage patterns, improve our services, and develop new features
• Security: To detect, prevent, and address technical issues, fraud, and security breaches
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. WhatsApp Business Platform

Our platform integrates with Meta's WhatsApp Business API to enable businesses to communicate with their customers. When using this service:

• Messages are transmitted through Meta's infrastructure and are subject to WhatsApp's terms of service and privacy policy
• End-to-end encryption is applied to messages in transit
• We store conversation data to provide continuity and enable customer service features
• Businesses using our platform can access and export their conversation history
• You can opt out of marketing messages at any time by replying "STOP" or using the unsubscribe mechanism provided

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• With Businesses: We share relevant customer data with the businesses you interact with on our platform to enable them to provide services to you
• Service Providers: We engage third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Meta Platforms: As required to use WhatsApp Business API services
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or sale of assets
• With Your Consent: For any other purpose with your explicit consent

We do not sell your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine retention periods include:

• The length of time we have an ongoing relationship with you
• Whether there is a legal obligation to which we are subject
• Whether retention is advisable considering our legal position (statute of limitations, litigation, or regulatory investigations)

WhatsApp conversation data is typically retained for 2 years from the last interaction, unless you request earlier deletion or local laws require different retention periods.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Opt-out: Opt out of marketing communications and certain data processing activities
• Restriction: Request restriction of processing under certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise these rights, please contact us using the information provided in Section 12 below.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by applicable regulatory bodies
• Binding corporate rules where applicable

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For WhatsApp-specific inquiries or to exercise your data rights related to WhatsApp communications, you may also reach us directly via WhatsApp at +1 (555) 123-4567.

13. Additional Information for Specific Jurisdictions

European Economic Area (EEA) Residents

If you are located in the EEA, we process your personal data under the General Data Protection Regulation (GDPR). Our legal bases for processing include consent, contract performance, legitimate interests, and legal obligations. You have the right to lodge a complaint with your local supervisory authority.

California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell your personal information as defined under CCPA.

Brazil Residents

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, delete, and port your personal data, as well as the right to information about third parties with whom we share your data.