• Official Meta Cloud API — your WhatsApp runs through Meta's approved infrastructure, and your number, green tick and quality rating stay yours.
• Encryption — your data is encrypted in transit and at rest.
• Two-factor authentication — add an extra layer of login security for your team.
• Role-based access — team members only see what their role allows.
• Secure infrastructure — hosted on reputable infrastructure with regular backups.
• Your data, your control — export everything any time. No lock-in.

Security questions? Email [[email protected]].

LEGAL PAGES

PRIVACY POLICY (/privacy)

Last updated: [date]

1. Who we are. Crimbox is operated by [legal entity name / DIGIBROOD], based in [address], India. For privacy questions, contact [[email protected]].

2. What we collect. Account information you give us (name, email, phone, company, billing details); the data you process through the platform (the messages, contacts and customer records you manage in your account); and usage data about how you use Crimbox (log, device and browser information).

3. How we use it. To provide and improve the service, process payments, provide support, keep the platform secure, and communicate with you about your account.

4. WhatsApp and Meta data. When you connect WhatsApp, message data is processed through Meta's official Cloud API under Meta's terms. For the customer data you manage in Crimbox, you are the data controller and Crimbox acts as your data processor.

5. Who we share data with. Trusted third parties that help us run the service — Meta (WhatsApp), payment providers, your chosen AI provider (including when you use your own key), telephony providers and hosting providers. We do not sell your data.

6. Storage and security. Your data is stored on secure infrastructure and protected by encryption, access controls and regular backups (see our Security page).

7. Your rights. Depending on your location, you may have the right to access, correct, export or delete your personal data. To exercise these rights, contact [[email protected]].

8. Data retention. We keep your data while your account is active and as required by law. You can request deletion when you close your account.

9. Cookies. We use cookies as described in our Cookie Policy.

10. Changes and contact. We'll post changes here with a new "last updated" date. Questions: [[email protected]].

TERMS OF SERVICE (/terms)

Last updated: [date]

1. Acceptance. By using Crimbox, you agree to these terms. 2. The service. Crimbox provides an all-in-one business platform as described on our site. Features may change as we improve the product. 3. Your account. You're responsible for your account, your team's access, and keeping your login secure. 4. Acceptable use. You agree to use Crimbox in line with our Acceptable Use Policy. 5. WhatsApp and Meta compliance. When you use WhatsApp through Crimbox, you must follow Meta's policies, including obtaining proper opt-in from the people you message. 6. Fees, billing, AI credits and your own key. Plans are billed [monthly/annually] in advance. Your plan includes a monthly AI credit allowance; you can buy top-up packs or use your own AI key. Meta's per-conversation WhatsApp charges are billed by Meta directly and are not included. 7. Cancellation and refunds. You can cancel any time; see our Refund & Cancellation Policy. 8. Intellectual property. Crimbox and its software remain ours; your data remains yours. 9. Limitation of liability. [Standard limitation clause — to be drafted by your lawyer.] 10. Termination. We may suspend or end accounts that breach these terms or the Acceptable Use Policy. 11. Governing law. These terms are governed by the laws of [Kolkata / India], and disputes will be handled in [jurisdiction]. 12. Changes and contact. We'll post changes here. Questions: [[email protected]].

REFUND & CANCELLATION POLICY (/refund-policy)

Last updated: [date]

1. Subscriptions. You can cancel any time from your account. Your plan stays active until the end of the current billing period; you won't be billed again after that. 2. Refunds. [State your policy clearly — e.g. "We offer a [X]-day money-back guarantee on new subscriptions. After [X] days, payments are non-refundable."] 3. AI credits and top-ups. AI credit packs are [non-refundable / consumed on use]. Unused monthly credits [do/don't] roll over. 5. Meta / WhatsApp charges. Per-conversation charges are billed by Meta and are not refundable by Crimbox. 6. How to request a refund. Contact [[email protected]] with your account details.

ACCEPTABLE USE POLICY (/acceptable-use)

Last updated: [date]

1. Prohibited use. You may not use Crimbox for spam, harassment, fraud, illegal goods or services, or anything unlawful. 2. WhatsApp and Meta compliance. You must follow Meta's WhatsApp Business Messaging Policy and Commerce Policy, including obtaining valid opt-in before messaging customers. 3. No purchased or scraped lists. Only message people who have opted in. Buying or scraping contact lists is not allowed and puts your number's quality rating at risk. 4. Calling and DLT. If you use calling features in India, you must comply with DLT registration and applicable telecom regulations. 5. Consequences. We may suspend or terminate accounts that breach this policy, to protect our platform and other users. 6. Reporting abuse. Report misuse to [[email protected]].

DATA PROCESSING AGREEMENT (DPA) (/dpa)

Last updated: [date]

1. Roles. For the personal data you process in Crimbox, you are the data controller and Crimbox is the data processor. 2. Scope and purpose. We process this data only to provide the service, on your instructions. 3. Sub-processors. We use sub-processors including Meta (WhatsApp), payment providers, AI providers, telephony providers and hosting providers. A current list is available on request. 4. Security. We apply appropriate technical and organisational measures to protect personal data (see our Security page). 5. Data-subject rights. We'll assist you in responding to requests from individuals to access, correct or delete their data. 6. Breach notification. We'll notify you without undue delay if we become aware of a personal-data breach affecting your data. 7. International transfers. Where data crosses borders, we use appropriate safeguards. 8. Deletion or return. On termination, we'll delete or return your personal data as instructed, subject to legal requirements.

COOKIE POLICY (/cookies)

Last updated: [date]

1. What cookies are. Small files stored on your device that help websites work and remember your preferences. 2. The cookies we use. Essential cookies (to run the site and keep you logged in), analytics cookies (to understand how the site is used), and marketing cookies (to measure and improve our ads). 3. Why we use them. To keep the service working, improve it, and measure our marketing. 4. Managing cookies. You can control cookies through your browser settings and our cookie consent banner. 5. Third-party cookies. Some cookies are set by analytics and advertising partners. 6. Contact. Questions: [[email protected]].