Privacy policy

Darwin is a lead management and sales app made by 360 Folds (Private) Limited, a company registered in Pakistan ("360 Folds", "we", "us"). This policy explains what information Darwin handles, why, where it is stored, who helps us run the service, how long we keep it and how to ask us to delete it.

Who this policy covers

• Our customers: businesses that use Darwin, and the owners and staff who sign in to it.
• Their leads and customers: people who fill in a business's Facebook or Instagram lead form, or send that business a WhatsApp message, when the business uses Darwin.
• Visitors to darwinby360folds.com.

Our role

Each business that uses Darwin owns its leads and customer conversations and decides why it collects them. For that information, 360 Folds acts only as a service provider (processor) for the business: we store it, show it to the business's team, route it and report on it, only to run Darwin for that business. For account, billing and website information, 360 Folds is responsible for it directly.

Information we handle

• Account information: names, work email addresses, phone numbers, roles and login records of the people who use Darwin.
• Lead information: what a person submitted in a business's lead form (for example name, phone number, email, city and answers to the form's questions), and which ad, form and page it came from.
• WhatsApp conversations: when a business connects its WhatsApp Business number, the messages, voice notes and files exchanged between that business and its customers, and the delivery status of each message.
• Sales activity: calls and WhatsApp attempts logged by the business's team, outcomes, notes, follow-ups and deal values.
• Billing records: invoices, payments and payment proofs uploaded by the business.
• Technical information: device type, app version, notification settings and error reports, used to keep the app working.

How we use it

• To run Darwin for the business: deliver leads and messages, assign them to staff, send reminders and alerts, and show reports.
• To bill our customers and provide support.
• To keep Darwin secure, find and fix errors, and stop misuse.

We never sell personal information. We never use one business's information for another business. We do not use our customers' leads or conversations to train artificial intelligence models, and we never contact a business's leads for our own purposes.

Information from Meta (Facebook, Instagram and WhatsApp)

When a business connects its Facebook Page or WhatsApp Business number to Darwin, we receive lead form submissions and WhatsApp messages through Meta's official platforms, with the business's permission. We use this information only to provide Darwin to that business, in line with Meta's Platform Terms and WhatsApp Business policies. Access tokens are stored encrypted. When a business disconnects, we stop receiving new information from Meta for it.

Where information is stored

Darwin's database and app run in Singapore. Some service providers we use process limited information in other countries, as listed below.

Service providers we use

• Vercel: hosting the app (Singapore).
• Neon: database (Singapore).
• Cloudflare: network security, file storage and scheduling.
• Inngest: background jobs (job identifiers only).
• Pusher: live updates on screen (identifiers only).
• Google Firebase: phone notifications (short notification text).
• Resend: sending emails such as invites, invoices and summaries (receives the email content).
• Sentry: error tracking (personal details removed).
• Meta: lead forms and the WhatsApp Business Platform.
• Google Play: distributing the Android app.

We add a provider to this list before it receives any information.

How long we keep information

• Leads, conversations, notes and files: while the business uses Darwin, then deleted 30 days after the business cancels.
• Activity and security logs: 2 years.
• Billing records: kept permanently for tax purposes, with the business name only.
• Exports: deleted after 7 days. Raw data received from Meta: details removed after 90 days.
• Backups: deleted information disappears from our backups within 30 days.

Security

Information is encrypted in transit and at rest. Each business's information is kept separate from every other business's at the database level. Our staff can see a business's leads only with that business's permission, for a limited time, and every access is recorded and visible to the business.

Your choices and rights

• If you are a lead or customer of a business that uses Darwin: contact that business to see, correct or delete your information. You can also email us and we will pass your request to the business or act on it ourselves where we can.
• If you use Darwin at a business: ask your account owner or admins, or email us.
• How to ask for deletion is explained on our data deletion page.

Children

Darwin is a business tool and is not meant for anyone under 18.

Security incidents

If customer information may have been exposed, we tell the affected businesses within 72 hours of confirming it.

Changes to this policy

We will post any change here with a new date. For important changes we give our customers 30 days' notice in the app and by email.

Contact

Questions about privacy: privacy@darwinby360folds.com