Operator, scope and roles

Vayreach is a multi-tenant WhatsApp Automation CRM operated by Vayqube Technologies Private Limited. This policy applies to the Vayreach website, accounts, workspaces, support channels and connected WhatsApp Business Platform functionality. Vayqube Technologies Private Limited acts as controller or Data Fiduciary for website, account, subscription, billing, security, audit and support processing. For contacts, conversations and messaging data processed on a customer’s documented instructions, it acts as a processor or service provider; the customer determines the recipients and purposes.

Google account connections and data access

Google integration is optional. When you connect an account, Google handles sign-in and consent; Vayreach does not receive your Google password. We receive your Google account identifier, email address, granted permissions, access tokens and, when provided, refresh tokens so authorized features can operate without requiring sign-in for every request. You choose whether to authorize Calendar, Sheets or both. The connection is available to authorized members of the Vayreach workspace, subject to their permissions; it is not a private connection visible only to the person who connected it.

Google data storage, retention and your controls

OAuth credentials are stored encrypted on the backend. Connection metadata, selected calendar and spreadsheet references, synchronization state, event mirrors, queued operation data and operational or audit records may be stored as needed to provide the enabled features and recover or investigate operations. We use workspace-scoped access controls and do not expose stored Google tokens in account-management responses. Authorized workspace users should select only data they are entitled to share and process.

You can disconnect an account from Google Account Setup within the Google Integration menu. Local disconnection removes the stored credentials and prevents subsequent use of that connection. You may also choose Google grant revocation where offered, or remove Vayreach's access at https://myaccount.google.com/connections. Revoking a shared Google grant may affect other connections using the same grant. Requests already sent to Google may have completed before disconnection; disconnection does not undo them or delete calendars, events or spreadsheets already held by Google.

Disconnection is not an automatic deletion request for previously stored records. To request deletion of Google-derived data retained by Vayreach, use our User Data Deletion Instructions or contact support@vayreach.com, identifying the relevant workspace and Google connection without sending passwords or tokens. We verify authority and coordinate with the controlling workspace where necessary. Google-derived content is retained only as needed for the enabled service or authorized customer instructions; upon a verified deletion request we delete it unless limited retention is required by law or necessary security obligations. Protected backup copies follow the controlled backup cycle described in this policy. Google-hosted copies remain subject to your controls in Google and Google's policies.

If we introduce a materially different Google-data purpose or additional permissions, we will update the relevant disclosures and obtain consent before using the data for that new purpose.

Instagram account connections and automation

When you choose to connect an Instagram professional account, Instagram handles sign-in and permission consent. Vayreach does not receive your Instagram password. We receive the account identifiers, profile details made available by Instagram, granted permissions and access tokens needed for the features you authorize. Only accounts you explicitly select are attached to the workspace and made available to authorized workspace members.

When you create or schedule content, we process your captions, uploaded or explicitly imported media, destination account identifiers, schedule and publication results to deliver that content to Instagram. Publishing permissions and supported formats depend on the connected account and Instagram requirements. Connecting an account does not automatically publish content.

If you separately authorize comment or message features, assign automation to a workspace and enable account events, we process supported incoming comment, direct-message and Story interaction data to match and run the rules you configure. This may include interaction identifiers, sender identifiers, text and timestamps made available by Instagram. Reply actions follow the platform permissions and applicable response windows. Saving a rule or enabling events does not authorize unrestricted or unsolicited messaging.

Credentials and supported incoming event content are encrypted in storage. Normalized event receipts and reply action records expire after 30 days. A token-free authorization revocation fence is retained for one day to prevent an older pending connection from restoring removed access. Drafts, uploaded media and other workspace records follow their applicable retention and deletion settings described in this policy. Publication also shares the chosen content with Instagram; copies already published there are governed by that platform and are not removed merely by disconnecting Vayreach.

You can disconnect an account in Social account setup or remove the application in Instagram settings. Disconnecting removes locally stored credentials and invalidates access; it is different from a request to erase retained workspace data. Use the User Data Deletion Instructions page or the privacy contact in this policy to submit a deletion request. We verify identity and workspace authority before taking sensitive action and explain applicable lawful retention exceptions.

Find your next practical step.

Talk to Vayreach on WhatsApp.

Find your next practical step.

Talk to Vayreach on WhatsApp.

Privacy Policy

Operator, scope and roles

Google account connections and data access

Google data storage, retention and your controls

Instagram account connections and automation

Facebook Page connections and data access

Threads account connections and data access

Data we process

Why we process data

WhatsApp Cloud API data

International processing

Security safeguards

Retention and deletion

Rights and requests

Children’s data

Changes, grievance and contact

Related policies

Find your next practical step.

Talk to Vayreach on WhatsApp.

Find your next practical step.

Talk to Vayreach on WhatsApp.

Privacy Policy

Operator, scope and roles

Google account connections and data access

Google data use, sharing and Limited Use

Google data storage, retention and your controls

Instagram account connections and automation

Facebook Page connections and data access

Threads account connections and data access

Data we process

Why we process data

WhatsApp Cloud API data

Sharing and service-provider categories

International processing

Security safeguards

Retention and deletion

Rights and requests

Children’s data

Changes, grievance and contact

Related policies