Privacy Policy

AquaSync (“AquaSync”, “we”, “our”, or “us”) provides a unified SaaS platform for Swimming Pool Management, Hostel ERP, and Business Suite operations. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform.

1. Information We Collect

Account Information

When you register for AquaSync, we collect your name, email address, phone number, and role. For organization administrators, we collect the name and details of the associated pool, hostel, or business.

Operational Data

As part of delivering our services, we store member or customer records that you enter into the platform — such as names, phone numbers, membership details, payment history, and room or slot assignments. This data belongs to you and is processed on your behalf.

Technical Information

We collect standard server-side logs, including IP addresses, request timestamps, and error reports, for security, debugging, and operational monitoring purposes.

Cookies

We use strictly necessary session cookies to keep you authenticated. We may also use functional cookies to remember your preferences. We do not use advertising or cross-site tracking cookies.

2. How We Use Your Information

We use the information collected to:

• Provide, operate, and maintain the AquaSync platform
• Authenticate and authorize access to your account and organization
• Send automated notifications, renewal reminders, and operational alerts
• Process subscription payments and billing
• Monitor and improve platform security and performance
• Respond to support requests and inquiries
• Comply with legal obligations

We do not sell, rent, or trade your personal data to third parties.

3. Third-Party Service Providers

We rely on trusted third-party providers to deliver specific platform functionality. These providers process data only as necessary to provide their services:

• MongoDB Atlas / Cloud Database: Encrypted cloud database hosting for all platform data.
• Cloudinary: Used for secure image and file storage (e.g., member profile photos).
• Razorpay: Payment gateway for processing subscription and other payments. Subject to Razorpay’s Privacy Policy.
• Sentry: Error monitoring and crash reporting. Error logs may include technical metadata but are not used for advertising.
• Vercel: Cloud platform and hosting infrastructure.

4. WhatsApp / Meta Integration

AquaSync offers an optional integration with the Meta WhatsApp Cloud API. This allows platform administrators and AquaSync’s own notification system to send operational messages via WhatsApp.

• Customer administrators may connect their own Meta WhatsApp credentials to send notifications to their members. These credentials are stored encrypted on our servers using AES-256-GCM encryption and are never exposed in plaintext.
• AquaSync may use its own global WhatsApp number to send platform-level subscription and billing notifications to registered administrators.
• WhatsApp is a service of Meta Platforms, Inc. Use of the WhatsApp integration is subject to WhatsApp’s Privacy Policy and Meta’s Terms of Service.
• AquaSync is not affiliated with or endorsed by Meta Platforms, Inc.

5. Data Security

We implement industry-standard security measures including:

• HTTPS / TLS encryption for all data in transit
• AES-256-GCM encryption for sensitive stored credentials
• Role-based access control and tenant data isolation
• Server-side authorization on all API endpoints
• Secure secret management via environment configuration

No electronic storage system is completely secure. We take reasonable steps to protect your information but cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Certain records may be retained longer where required by law, for dispute resolution, or for legitimate operational purposes. See our Data Retention Policy for details.

7. Your Rights — Data Deletion

You may request deletion of your account and associated personal data at any time. To submit a deletion request, see our Data Deletion page.

8. Children’s Privacy

AquaSync is a business-to-business SaaS platform intended for use by adults managing organizations. We do not knowingly collect personal information from individuals under the age of 18 directly. Member data entered by administrators may include individuals of any age in accordance with the administrator’s own obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

10. Contact Information

For privacy-related questions or concerns, please contact us at:

• Email: manthanjaiswal902@gmail.com
• Phone: +91 8125629601
• Location: Hyderabad, Telangana, India