Privacy Policy

Echo is a business communication platform. We collect the following categories of information: Account information: name, business email address, company name, and password hash when you register for an Echo account. Message and conversation data: the content of messages sent and received through Echo's unified inbox (WhatsApp, email, and web chat channels) as necessary to provide the service. This includes messages from your customers that flow through the platform. Usage and analytics data: features used, login times, session duration, and interaction logs — used to improve the platform and diagnose issues. Integration credentials: API keys or OAuth tokens for third-party services you connect to Echo (e.g. WhatsApp Business API, email providers, CRM). These are stored encrypted and used only to operate your connected integrations. Device and technical data: browser type, operating system, IP address, and app version — collected automatically when you access Echo.

We use collected information to: - Provide, operate, and maintain the Echo platform and your connected integrations - Deliver AI-generated reply suggestions based on conversation context - Route and manage messages across your connected channels - Send service notifications (e.g. account alerts, integration errors) - Analyse platform usage to improve features and performance - Respond to support requests and troubleshoot issues We do not use your message content to train AI models without your explicit consent.

As a business user of Echo, you are the data controller for the customer messages that flow through the platform. Xigmapro acts as a data processor for this content. We process customer message data only to operate the service and do not access or use it for any other purpose. You are responsible for ensuring you have the appropriate legal basis to use your customers' data in connection with Echo, including any required consents under applicable data protection laws.

Echo integrates with third-party services that have their own privacy policies: - Meta WhatsApp Business API: message routing and delivery for WhatsApp channels - Email providers (SMTP/IMAP): for email channel integration - OpenAI / Anthropic: for AI reply generation — only the conversation context needed for a specific reply is sent; we do not send full message histories - CRM integrations: data exchange is limited to the fields you configure Each integration provider's privacy policy governs their handling of data.

We retain your account information and message data for as long as your Echo account is active. After account deletion, message data is permanently deleted within 30 days. Aggregated, anonymised usage analytics may be retained longer for product improvement.

Echo uses industry-standard security measures including: - Encryption in transit (HTTPS/TLS) for all data - Encryption at rest for stored credentials and sensitive fields - Access controls limiting who within Xigmapro can access customer data - Regular security reviews We do not sell your data to third parties.

Depending on your location, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise these rights, contact us using the details below. We will respond within 30 days.

We may update this privacy policy as Echo evolves. We will notify registered users of material changes by email or in-app notice before they take effect.

For questions about this privacy policy, data requests, or data protection matters: - Email: sales@xigmapro.com - Postal: Xigmapro Technologies, Kolkata, West Bengal, India — 700001