Privacy Policy

We collect information in several ways to provide, improve, and secure our services.

1.1 Information You Provide Directly

When you create an account or interact with Appsha, you may provide:

• Personal details – such as your name, email address, phone number, or other contact information.
• Payment details – if you subscribe to a paid plan, we process payments through Stripe Connect. We do not store your credit card details; Stripe securely handles them.
• Content – any text, images, links, or files you upload while using Appsha.

1.2 Information We Collect Automatically

When you use Appsha, we automatically collect certain data to improve our services, including:

• Device Information – Your IP address, browser type, and operating system.
• Usage Data – How you interact with Appsha (e.g., features you use, time spent, and navigation patterns).
• Cookies & Tracking Technologies – We use cookies to remember your preferences and enhance your experience.

1.3 Information from Third Parties

If you connect Appsha to other services (e.g., social media, analytics, or communication tools), we may receive limited data from those platforms, subject to their permissions and your settings.

1.4 Information from Google Integration (Gmail, Google Business Profile & Google Calendar)

If you choose to connect your Gmail, Google Business Profile (GBP), or Google Calendar, Appsha may collect:

• Reviews and responses from your GBP account, including review content, timestamps, ratings, and replies you post.
• Contact details from Gmail (if you enable contact sync), including names, email addresses, phone numbers, and metadata required for CRM management.
• Email metadata (when sending email via Gmail), such as recipient addresses, subject lines, and timestamps - only for delivering and tracking the email's status.
• Google Calendar data (if you enable calendar sync), including:
  • Event titles, dates, times, descriptions, and attendee information for events you create or manage through Appsha.
  • Calendar availability to help schedule appointments, bookings, or reminders within the platform.
  • We access calendars and events only with your explicit authorization.

We do not collect your Gmail password or the full contents of your emails. We request only the minimum permissions necessary to perform these functions via Google's secure OAuth 2.0 process.

1.5 Information from Stripe Connect (Payment Processing)

Appsha uses Stripe Connect to securely process subscription fees. In connection with this integration, we may collect or receive:

• Subscription billing information – such as your billing name, email address, and billing address, as required to process your subscription.
• Transaction metadata – including subscription plan details, payment status, and transaction timestamps.
• Stripe account details (for service providers using Appsha) – if you connect a Stripe account to receive payments, Stripe may share limited account identifiers with us for reconciliation purposes.

Important: Appsha does not charge commission on transactions. You keep 100% of your revenue, minus only Stripe's standard processing fees. Appsha's only charge is your subscription fee.

We do not store full credit or debit card numbers. All payment data is handled directly by Stripe in accordance with PCI-DSS standards. For more information on how Stripe handles your data, please review Stripe's Privacy Policy at stripe.com/privacy.

1.6 Information from Meta Integrations (Facebook & Instagram)

If you choose to connect your Facebook Page or Instagram Business Account to Appsha, we may collect and process certain information from Meta platforms in accordance with the permissions you authorize.

This may include:

• Account information, – such as your Facebook Page name, Instagram Business Account username, profile picture, account ID, and associated business details.
• Content information, – including posts, captions, comments, replies, media metadata, and publishing details required for social media management.
• Messaging data, – including messages, message timestamps, sender information, and conversation metadata, when you use Appsha's inbox and customer communication features.
• Engagement information, – including comments, replies, reactions, and interaction metadata associated with your connected accounts.
• Analytics and insights data, – including reach, impressions, engagement metrics, audience statistics, and other performance information provided by Meta.

We use this information solely to provide features such as:

• Social media publishing and scheduling
• Unified inbox and message management
• Comment and reply management
• Customer relationship management (CRM) features
• Social media publishing and scheduling
• Performance monitoring and content optimization

Appsha accesses Facebook and Instagram data only after you explicitly authorize the connection through Meta's secure OAuth authentication process.

We do not collect your Facebook or Instagram passwords. Access is limited to the permissions you grant and may be revoked at any time through your Meta account settings or within Appsha.

We do not sell Facebook or Instagram data to third parties and use such information only to provide and improve the requested services.

We use your data for the following purposes:

2.1 To Provide and Improve Appsha

• Create and manage your account.
• Offer features that help you organize and optimize your digital presence.
• Analyze usage to improve performance, design, and usability.
• Enable integrated tools, including CRM, reviews, email communication, and calendar management.

2.2 To Communicate with You

• Send account-related updates (e.g., password resets, billing notices).
• Respond to support or feature requests.
• Send optional marketing or announcement emails (you can unsubscribe at any time).

2.3 To Support Integrations

• Sync your Gmail contacts into your Appsha CRM.
• Allow you to send emails directly from your Gmail account through Appsha.
• Collect and manage Google Business Profile reviews so you can respond to or track them within the platform.
• Sync and display your Google Calendar events to enable scheduling, bookings, and availability management within Appsha.
• Process subscription payments and manage billing through Stripe Connect.
• Generate analytics, reports, and insights related to your review performance or engagement activity.
• Connect Facebook Pages and Instagram Business Accounts to enable social media publishing and scheduling.
• Display and manage comments, replies, messages, and customer interactions from connected Facebook and Instagram accounts within Appsha's unified inbox.
• Generate social media analytics, engagement reports, and performance insights for connected social media accounts.
• Support customer relationship management (CRM) activities by associating social interactions with contacts and communication history.

2.4 To Ensure Security & Compliance

• Detect and prevent fraud, abuse, or unauthorized access.
• Comply with legal obligations and protect user rights.

We never sell your data. However, we may share information in certain situations:

3.1 With Service Providers

We work with trusted third-party providers for things like:

• Payment Processing (Stripe Connect) – We use Stripe Connect to securely process subscription payments and manage billing. We do not store credit card details. Stripe processes payment information in accordance with its own privacy and security policies.
• Google Services – If you connect Google services, we process data through Google's APIs to provide features such as contact synchronization, email communication, review management, and calendar scheduling. Access is authorized through Google's OAuth 2.0 framework.
• Meta Services (Facebook & Instagram) – If you connect Facebook Pages or Instagram Business Accounts, Appsha processes account information, content, comments, messages, engagement data, and analytics through Meta's APIs to provide social media management, publishing, inbox, CRM, and reporting features.
• Analytics Providers – We may use analytics services (such as Google Analytics) to understand usage patterns, improve functionality, and enhance the user experience.
• Hosting and Infrastructure Providers – We use trusted cloud hosting, storage, and infrastructure providers to securely operate and maintain the Appsha platform.

We share only the information necessary for these providers to perform their services on our behalf and require them to handle data in accordance with applicable privacy and security requirements.

3.2 When Required by Law

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we reasonably believe that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal obligations.
• Respond to lawful requests from public authorities.
• Protect the rights, property, safety, or security of Appsha, our users, or others.
• Detect, investigate, prevent, or address fraud, security incidents, abuse, or other illegal activities.
• Enforce our Terms of Service and other agreements.

3.3 In Case of Business Changes

If Appsha is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that process. We'll notify you in advance if this happens.

You have control over your data. Here's how:

4.1 Access & Update Your Information

You can review and update your account details at any time in the settings.

If you need help, contact privacy@appsha.com.

4.2 Data Deletion

• You can request the deletion of your account and personal data at any time.
• Some information may be retained for legal or security reasons.

4.3 Google Integrations (Gmail, GBP & Google Calendar)

• Disconnect your Gmail, Google Business Profile, or Google Calendar connection from your account settings at any time.
• Delete synced contacts, reviews, calendar events, or email logs if you no longer wish to store them.
• Revoke permissions directly from your Google Account (myaccount.google.com) to stop data sharing immediately.
• When disconnected, Appsha stops syncing new data but may retain previously synced data until you delete it.

4.4 Meta Integrations (Facebook & Instagram)

You can disconnect your Facebook Page or Instagram Business Account from Appsha at any time through your Profile Settings > Integrations.

You may also:

• Revoke Appsha’s access directly from your Facebook or Instagram settings under Meta’s account security and app permissions.
• Request deletion of synced data, such as posts, comments, messages, and insights stored within Appsha.
• Once disconnected, Appsha will immediately stop accessing or syncing any new Meta Platform data.

4.5 Stripe Connect & Billing

• You can update or remove your billing information at any time from your account settings.
• To manage your Stripe-connected account or dispute a charge, contact us at privacy@appsha.com or visit Stripe's support at support.stripe.com.
• Subscription cancellations can be made from your account settings at any time.

4.6 Cookie Preferences

You can manage cookies in your browser settings. Disabling cookies may affect some features of Appsha.

4.7 Opt-Out of Marketing Emails

Click the "unsubscribe" link in any marketing email to stop receiving those messages.

We take security seriously. Here's what we do:

• Use encryption (TLS/SSL) to protect sensitive data in transit.
• Apply strict access controls to limit who can view your information internally.
• Monitor for unauthorized access and potential threats.
• Work with PCI-DSS compliant partners (Stripe) for all payment processing.

However, no online service is 100% secure. If you suspect any security issues, contact us immediately at privacy@appsha.com.

We keep your data as long as you have an active account with us. If you delete your account, we will remove most of your data, except when retention is necessary for:

• Legal compliance
• Fraud prevention
• Security reasons
• Financial record-keeping obligations (e.g., transaction records required by applicable law)

Appsha is not intended for children under 18. If we discover that a child has provided personal information, we will delete it promptly. If you believe we have collected data from a minor, please contact us at privacy@appsha.com.

Appsha may contain links to or integrations with third-party websites and services (such as Google, Meta, or Stripe). We're not responsible for their privacy practices. Please review their respective privacy policies before sharing any information:

• Google Privacy Policy: https://policies.google.com/privacy
• Stripe Privacy Policy: https://www.stripe.com/privacy
• Meta Privacy Policy: https://www.meta.com/legal/privacy-policy

Appsha operates globally, so your data may be stored and processed in different countries. We take steps to ensure international data transfers comply with applicable privacy laws, including GDPR where relevant.

We may update this policy from time to time. If we make significant changes:

• We’ll notify you via email or in-app notifications.
• The "Effective Date" at the top of this page will be updated accordingly.

Got questions? We're here to help!

Thank you for choosing Appsha.