Your privacy matters to us

Svation is a WhatsApp and Instagram automation platform operated by Script Valley, based in India. We help creators and business owners automatically respond to DMs and comments using keyword triggers, drip sequences, and AI-powered conversations.

For privacy questions: privacy@Svation.app

Account information

• Your name and email address (via Google OAuth or email signup through Clerk)
• Your profile photo (from Google, if you use Google Sign-In)
• Your Clerk user ID for authentication

Instagram connection data

• Your Instagram username, profile picture, and numeric user ID
• An access token from Meta allowing Svation to send DMs and reply to comments on your behalf
• Token expiry date so we can remind you to reconnect before it expires

WhatsApp connection data

• Your WhatsApp Business phone number ID and display number
• Your WhatsApp Business Account (WABA) ID
• A permanent system user access token issued by Meta

Lead and conversation data

• Sender ID of people who trigger your automations (Instagram user ID or WhatsApp number)
• Messages exchanged in conversations — inbound from leads, outbound from your automation or AI
• Lead status, drip sequence progress, and AI session state

Automation configuration

• Your automation names, keywords, reply messages, drip steps, and AI configuration
• Your business description and FAQs used to train the AI chatbot
• Payment links you choose to share through the AI

Usage and billing data

• Number of automations created and leads captured per billing period
• Razorpay subscription ID and customer ID for billing
• Webhook logs from Meta for debugging and compliance

We use your data exclusively to provide and improve Svation:

• To authenticate you and manage your account
• To connect to your Instagram and WhatsApp accounts via the Meta API
• To detect keyword triggers and fire your automations
• To send automated replies, drip messages, and AI responses on your behalf
• To track leads, conversation history, and automation stats in your dashboard
• To process subscription payments through Razorpay
• To send transactional emails about your account

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 5.

When you enable Smart AI, Svation sends your business description, FAQs, tone, and the lead's conversation history to Google Gemini to generate a reply. Google processes this data under its own privacy policy. We do not use your conversation data to train any AI model. AI sessions expire after 30 days of inactivity.

We share your data only with these providers to operate Svation:

• Clerk — authentication and session management
• Convex — database, backend functions, and file storage
• Vercel — hosting and deployment
• Google Gemini — AI chatbot responses (Smart AI plan only)
• Meta — to send and receive messages via WhatsApp Cloud API and Instagram Graph API
• Razorpay — subscription billing and payment processing

We do not share your data with any other third parties.

By connecting your Instagram or WhatsApp account to Svation, you authorise us to receive webhook events when someone messages or comments, send DMs and replies on your behalf, and read your Instagram posts to select which post to attach an automation to.

You can revoke Svation's access from Instagram Settings → Apps and Websites at any time. For WhatsApp, disconnect from Svation Settings → WhatsApp.

• Account data: retained until you delete your account
• Lead and conversation data: retained for 12 months from the last message, then deleted
• AI conversation sessions: archived after 30 days of inactivity
• Webhook logs: retained for 30 days for debugging, then deleted
• Billing data: retained as required by Indian tax law (7 years)

You have the right to access, correct, delete, or export your data. To exercise any right, email privacy@Svation.app. We respond within 7 business days.

All data is encrypted in transit using TLS. Access tokens are stored in Convex's encrypted database. We do not expose your Meta access tokens in any client-side code or logs. To report a security vulnerability: security@Svation.app

Svation is not intended for anyone under 18. If you believe a minor has created an account, contact privacy@Svation.app and we will delete it promptly.

When we make significant changes, we will notify you by email and display a notice in the Svation dashboard. Continued use after changes constitutes acceptance.

• Email: privacy@Svation.app
• Company: Script Valley
• Country: India