Privacy Policy

1. Who we are

Campaign Rail (the "Service") is operated by Techora Solution ("we", "us", "our"), with its office in Gujarat, India. If you are a customer, you (the account owner) are the "data controller" of your end-users' data and we act as your "data processor" under applicable data-protection laws.

2. Data we collect

We collect only what we need to run the Service and improve it.

• Account data — your name, work email, phone number, company name, role, billing address.
• Contact data (your customers) — phone numbers, names, tags, message history you upload or sync from your CRM.
• Message content — WhatsApp messages you send and receive through the Service, retained per your retention setting.
• Product usage — pages visited, features used, campaign performance — used to improve the product and troubleshoot.
• Device & log data — IP address, browser, OS, request timestamps — used for security and abuse prevention.

3. How we use your data

• To provide and operate the Service (send messages, run campaigns, keep the inbox working).
• To bill you and manage your subscription.
• To provide human customer support when you contact us.
• To improve the product — aggregated, non-identifying analytics.
• To keep the platform secure and prevent abuse.
• To send you occasional product updates via email (you can unsubscribe any time).

4. Sharing & sub-processors

We share the minimum necessary data with a small set of vetted sub-processors. All of them are bound by Data Processing Agreements.

We never sell your data. We only share it with law enforcement when legally compelled and we'll notify you where lawfully allowed.

5. Data retention

You control how long we keep your data:

• Messages & conversations — default 12 months, configurable from 30 days to indefinite.
• Contacts — retained until you delete them.
• Account data — retained while your account is active; deleted within 30 days of account closure.
• Billing records — retained for 7 years as required by Indian tax law.
• Logs — 90 days for security investigations.

6. Your rights

Regardless of where you live, you can:

• Access — download a copy of your data at any time from your account.
• Correct — update account and contact details in the dashboard.
• Delete — delete individual contacts, messages or your entire account.
• Object / restrict — email us to restrict certain processing.
• Portability — export contacts, message history and analytics as CSV or JSON.
• Withdraw consent — for marketing emails, click the unsubscribe link in any email.

To exercise any of these rights, email techorasolution@gmail.com. We reply within one business day.

7. Cookies & tracking

We use a small number of cookies:

• Essential — session, authentication, security. Cannot be disabled.
• Preferences — remembers your dashboard settings (dark mode, region).
• Analytics — first-party PostHog to understand feature usage. Opt-out available in settings.

We do not run third-party advertising cookies. We do not track you across other websites.

8. Security

See our full Security page for details. In short: AES-256 at rest, TLS 1.3 in transit, per-customer data isolation, role-based access, full audit trails, 99.9% uptime SLA.

9. Children's data

Campaign Rail is a B2B product. We don't knowingly collect data from anyone under 18. If you believe a child's data has been collected, contact us and we'll delete it.

10. Changes to this policy

When we make material changes, we'll email account owners at least 30 days before the change takes effect. The current version and change history are always available on this page.

11. Contact us

Questions or concerns about this policy? Email techorasolution@gmail.com or write to: