Privacy Policy

SabNode (“SabNode”, “we”, “us”) provides a suite of business software — WhatsApp Business messaging, CRM, email, workflow automation, calling, SMS and related tools — available at sabnode.com.

This policy explains what personal data we handle, why, and the choices and rights you have. For data you upload and process through the products (your contacts, messages, leads, mailboxes and files), you are the controller and SabNode acts as your processor under the terms of your subscription and our Data Processing Agreement.

• Account data — name, work email, phone, company, role and the credentials you use to sign in.
• Billing data — plan, wallet balance, invoices and payment references (card details are handled by our payment processor, not stored by us).
• Content you process — the contacts, WhatsApp/SMS/email messages, CRM records, templates, files and workflows you create or upload. We process this on your instructions to deliver the service.
• Usage & device data — log data, IP address, browser/device type, pages viewed, feature usage and diagnostics used to run, secure and improve the product.
• Support data — messages, attachments and context you share when you contact us.

We use personal data to:

• Provide, maintain and secure the products and your account;
• Process transactions, meter usage and manage billing and plans;
• Provide support and respond to your requests;
• Detect, prevent and investigate fraud, abuse and security incidents;
• Improve, troubleshoot and develop features (using aggregated or de-identified data where possible);
• Send service, security and (where permitted) product updates; and
• Comply with legal obligations and enforce our terms.

We do notsell your personal data, and we do not use the content you process (your customers’ messages and records) for advertising.

When you connect a WhatsApp Business account or a Meta (Facebook/Instagram) asset, we process messages, templates, phone numbers and delivery events on your behalfto send and receive communications you initiate. Your use of these channels is also governed by Meta’s and WhatsApp’s Business terms and policies.

Access tokens are stored encrypted and used only to operate the integrations you enable. You can disconnect an account at any time from your workspace settings.

• Sub-processors & service providers — vetted vendors who host infrastructure, process payments, deliver messages/email and provide analytics, bound by confidentiality and data-protection obligations.
• Channel & platform partners — e.g. Meta/WhatsApp, telecom and email providers, strictly to deliver the communications you send.
• Legal & safety — where required by law or to protect rights, safety and the integrity of the service.
• Business transfers — in a merger, acquisition or asset sale, subject to this policy.

We use a limited set of sub-processors for cloud hosting and storage, payment processing, message/email delivery and product analytics. A current list, and the way to be notified of changes, is available in our Data Processing Agreement or on request from privacy@sabnode.com.

We retain personal data for as long as your account is active or as needed to provide the service, then delete or de-identify it, subject to legal, accounting and dispute-resolution requirements. You can export or request deletion of workspace content at any time; on account closure we delete or return content per your DPA.

We protect data with encryption in transit and at rest, role-based access controls, least-privilege access, signed audit logs, network isolation and continuous monitoring. See our security overview for details. No method of transmission or storage is 100% secure, but we work hard to protect your information and to notify you of incidents that affect you.

We may process and store data in India and in other countries where we or our sub-processors operate. Where data crosses borders, we apply appropriate safeguards (such as contractual data-protection terms) consistent with the DPDP Act, the GDPR and other applicable laws.

Depending on where you are, you may have the right to:

• Access the personal data we hold about you;
• Correct or update inaccurate data;
• Delete your data or close your account;
• Port your data to another service;
• Object to or restrict certain processing; and
• Withdraw consent where processing relies on it.

To exercise a right, email privacy@sabnode.com. If SabNode processes data on behalf of a business (as a processor), please contact that business, whom we will support in responding.

We use strictly necessary cookies to sign you in and keep the product working, and limited analytics cookies to understand usage and improve the site. You can control cookies in your browser; blocking essential cookies may break parts of the product.

SabNode is a business product not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy to reflect changes to the product, law or our practices. We will post the new version here with an updated date and, for material changes, notify you in the product or by email.

For privacy questions or to reach our Grievance Officer under the DPDP Act, email privacy@sabnode.com. You may also contact us through the website.