Google API Services User Data Policy: OptimReach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising or to train generalized AI/ML models.

1. About OptimReach

OptimReach is a WhatsApp Business Automation Platform operated by MetaGrad Labs Private Limited, a company incorporated in India.

Field	Details
Product	OptimReach
Operated by	MetaGrad Labs Private Limited
Website	https://optimreach.in
Contact email	hello@optimreach.in
Phone	+91 81027 75670
Country	India

This Privacy Policy applies to all users of the OptimReach platform, including the web application at cloud.optimreach.in, the marketing website at optimreach.in, and all associated APIs and integrations.

2. Information We Collect

2.1 Account information

When you register for OptimReach, we collect your name, email address, phone number, business name, and password. This information is used to create and manage your workspace.

2.2 Business and workspace data

We collect information you add to your OptimReach workspace, including customer contact details, conversation records, product catalogues, order data, workflow configurations, and automation rules.

2.3 Usage data

We automatically collect information about how you use the platform, including pages visited, features used, session durations, browser type, operating system, IP address, and device identifiers. This data is used to improve the platform and ensure its security.

2.4 Payment information

If you subscribe to a paid plan, payment is processed by a third-party payment processor. OptimReach does not store your full payment card details.

3. Google Account & API Data

When you connect your Google Account to OptimReach, OptimReach may access information and data from Google services that you explicitly authorize through Google's OAuth consent screen. We only request access to Google data that is necessary for the specific features you choose to enable.

Google Service	Data Accessed	When Accessed
Google Account	Email address, basic profile information (name, profile picture)	When you sign in or connect your Google Account
Google Sheets	Spreadsheet content from sheets you explicitly authorize OptimReach to access	When you use the Google Sheets integration to import or sync data
Google Calendar	Calendar events and availability from calendars you authorize	When you enable appointment scheduling or calendar-related features
Google Contacts	Contact names, phone numbers, and email addresses from contacts you authorize	When you enable contact synchronization
Gmail	Email content from your Gmail account (only if Gmail integration is enabled)	Only when you explicitly enable Gmail integration; not requested by default

You are in control. We only access Google services you explicitly authorize. You can revoke access at any time from your Google Account settings at myaccount.google.com/permissions or from within your OptimReach workspace settings.

4. How We Use Google Data

We use Google data solely to provide the specific product features you have enabled. The following describes exactly how each type of Google data is used:

4.1 Google Account (email and profile)

Used to authenticate your identity, associate your OptimReach workspace with your Google Account, and display your name and profile picture within the platform.

4.2 Google Sheets

OptimReach uses authorized Google Sheets data to allow you to import and synchronize business or customer information — such as contact lists, product data, or order records — into your OptimReach workspace. Sheets data is read or written only in response to actions you initiate or automations you configure.

4.3 Google Calendar

OptimReach uses authorized calendar data to provide appointment scheduling and calendar-related functionality, such as checking availability, creating bookings, or sending calendar invites to customers through WhatsApp workflows.

4.4 Google Contacts

OptimReach uses authorized contact data to allow you to synchronize your contacts into your OptimReach workspace so you can engage with them through WhatsApp conversations and automation workflows.

4.5 Gmail

If you enable the Gmail integration, OptimReach accesses Gmail data solely to support email-triggered workflows or email-to-WhatsApp bridging features that you explicitly configure. Gmail data is not read for any other purpose.

We do not use Google data for advertising. Google user data is never used to display advertisements, sold to advertisers, or shared with data brokers.

5. Google API Limited Use

OptimReach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, OptimReach:

Only uses Google user data to provide or improve user-facing features that are visible and prominent in the OptimReach interface.
Does not transfer Google user data to third parties except as necessary to provide or improve user-facing features, subject to user consent, or as required by law.
Does not use Google user data for serving advertisements.
Does not allow humans to read Google user data unless the user has explicitly given permission, it is necessary for security or legal compliance, or it is aggregated and anonymized.
Does not use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

AI/ML statement: OptimReach does not use Google Workspace API data to train or improve generalized artificial intelligence or machine learning models. AI features within OptimReach are personalized to your workspace and are not trained on other users' Google data.

6. WhatsApp & Messaging Data

OptimReach is a WhatsApp Business Platform solution. When you use OptimReach to send and receive WhatsApp messages:

Message content, timestamps, delivery status, and sender/recipient information are stored in your OptimReach workspace.
Media files shared via WhatsApp (images, documents, audio) may be stored on OptimReach infrastructure to enable features such as conversation history and automation triggers.
WhatsApp message templates used in your campaigns must be approved by Meta (WhatsApp's parent company) before use. OptimReach facilitates this approval process on your behalf.
Customer phone numbers and conversation data are associated with your business workspace and are governed by this policy and the WhatsApp Business Terms of Service.

You, as the business operator, are responsible for obtaining appropriate consent from your customers before messaging them via WhatsApp, in compliance with applicable laws and WhatsApp's Business Policy.

OptimReach does not sell your personal data or Google user data. We do not share your data with advertisers or data brokers.

We may share data in the following limited circumstances:

7.1 Service providers (subprocessors)

Google user data and other personal data may be processed by service providers that are necessary to operate OptimReach, such as cloud infrastructure, database hosting, security monitoring, and analytics providers. These subprocessors are bound by contractual obligations to protect your data and may only use it to provide services to OptimReach. A current list of subprocessors is available at optimreach.in/sub-processors.

7.2 Legal requirements

We may disclose data if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of OptimReach, our users, or the public.

7.3 Business transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

7.4 With your consent

We may share data with third parties when you have given explicit consent for us to do so.

8. Data Storage & Security

OptimReach stores data on secure cloud infrastructure. We implement the following security measures to protect your data:

Encryption in transit: All data transmitted between your browser or app and OptimReach servers is encrypted using HTTPS/TLS.
Encryption at rest: Sensitive data, including OAuth tokens and credentials, is encrypted at rest.
OAuth token handling: Google OAuth refresh tokens are stored in encrypted form. Access tokens are short-lived and are used only to make authorized API requests on your behalf.
Access controls: Access to production systems and customer data is restricted to authorized personnel and is subject to authentication and authorization controls.
Workspace isolation: Each business workspace is logically isolated. Data from one workspace is not accessible to users of another workspace.
Security monitoring: We monitor our systems for unauthorized access, anomalies, and potential security incidents.

While we implement industry-standard security practices, no system is completely secure. We encourage you to use strong passwords and to report any suspected security issues to hello@optimreach.in. Our full security practices are described at optimreach.in/security.

9. Data Retention

We retain data for as long as necessary to provide the OptimReach service and as required by applicable law.

Data Type	Retention Period
Account and workspace data	Retained for the duration of your subscription plus 30 days after account closure
Conversation and message history	Retained for the duration of your subscription, subject to your workspace data retention settings
Google OAuth refresh tokens	Retained while the Google connection is active; deleted within 30 days of disconnection
Google Sheets / Calendar / Contacts data	Synchronized data retained while the connection is active; deleted upon disconnection or account closure
Audit logs and security logs	Retained for up to 12 months for security and compliance purposes
Billing records	Retained for 7 years as required by applicable financial regulations
Backups	System backups are retained for up to 30 days, after which they are permanently deleted

Our full data retention schedule is available at optimreach.in/data-retention.

10. Data Deletion

You have the right to request deletion of your personal data and workspace data.

10.1 Deleting your account

You may delete your OptimReach account at any time from your workspace settings. Upon deletion, your account data and workspace data will be permanently deleted within 30 days, subject to the exceptions described below.

10.2 Requesting data deletion

To request deletion of specific data or to submit a data erasure request, contact us at hello@optimreach.in with the subject line "Data Deletion Request." We will respond within 30 days.

10.3 Exceptions to deletion

We may retain certain data after deletion where required by law, for legitimate security or fraud-prevention purposes, or to resolve outstanding disputes. Billing records may be retained for up to 7 years as required by financial regulations. Anonymized and aggregated data from which you cannot be identified may be retained indefinitely.

10.4 Backup deletion

System backup copies of deleted data will be permanently purged within 30 days of your deletion request.

11. Disconnecting Google

You can disconnect your Google Account from OptimReach at any time in two ways:

From your OptimReach workspace: go to Settings → Integrations → Google and click "Disconnect."
From your Google Account: visit myaccount.google.com/permissions, find OptimReach, and revoke access.

When you disconnect your Google Account:

OptimReach will immediately stop making API requests using your Google authorization.
Your stored Google OAuth credentials (refresh tokens) will be deleted from OptimReach systems within 30 days.
Data that was previously synchronized from Google services (contacts, calendar events, spreadsheet data) that has been imported into your OptimReach workspace will remain in your workspace unless you explicitly delete it, as it forms part of your business records within OptimReach.
You will lose access to Google-connected features until you reconnect your Google Account.

12. AI & Automation

OptimReach uses artificial intelligence and automation features to help businesses manage WhatsApp conversations, qualify leads, suggest responses, and automate workflows.

Personalized AI: AI features in OptimReach are trained and personalized on your specific workspace data (your conversations, your customers, your products) to improve relevance for your business. This is distinct from training generalized AI models.
No Google data for AI training: OptimReach does not use Google Workspace API data (from Google Sheets, Calendar, Contacts, or Gmail) to train, develop, or improve any AI or machine learning models — whether personalized or generalized.
Human oversight: OptimReach's AI provides suggestions and drafts. Your team members remain in control and can review, edit, or override any AI-generated content before it is sent to customers.
Bot calling: Where OptimReach's bot calling feature is used, calls are made on behalf of your business. Call data is processed and stored within your workspace in accordance with this policy.

13. Third-Party Services

OptimReach integrates with third-party services to provide its features. These include:

Meta (WhatsApp Business Platform): Message delivery and WhatsApp API services. Subject to Meta's Privacy Policy.
Google: Google Sheets, Calendar, Contacts, Gmail, and Google RCS integrations. Subject to Google's Privacy Policy.
Payment processors: For subscription billing. These processors handle payment data directly and are PCI-DSS compliant.
Cloud infrastructure providers: For hosting, storage, and computing.

A current list of subprocessors and third-party service providers is available at optimreach.in/sub-processors.

OptimReach is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you connect to OptimReach.

14. Cookies

OptimReach uses cookies and similar technologies to operate the platform, remember your preferences, analyze usage, and improve the service. Types of cookies we use:

Essential cookies: Required for the platform to function, such as maintaining your login session.
Analytics cookies: Used to understand how users navigate the platform so we can improve it. Analytics data is aggregated and anonymized where possible.
Preference cookies: Used to remember your settings and preferences within the platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the platform. Our full Cookie Policy is available at optimreach.in/cookie-policy.

15. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access: Request a copy of the personal data we hold about you.
Right to correction: Request correction of inaccurate or incomplete personal data.
Right to erasure: Request deletion of your personal data (see Section 10).
Right to portability: Request an export of your data in a machine-readable format.
Right to object: Object to certain types of processing of your personal data.
Right to withdraw consent: Withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, contact us at hello@optimreach.in. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Update the "Last updated" date at the top of this page.
Notify registered users by email at least 14 days before the changes take effect (for material changes).
Display a notice within the OptimReach platform.

Your continued use of OptimReach after the effective date of an updated policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

17. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way OptimReach handles your data, please contact us:

Contact Type	Details
Company	MetaGrad Labs Private Limited
Product	OptimReach
Privacy email	hello@optimreach.in
Phone	+91 81027 75670
Website	https://optimreach.in
WhatsApp	Chat with us

We aim to respond to all privacy-related enquiries within 30 business days. For urgent data security concerns, please mark your email subject as "URGENT — Data Security."