Privacy Policy
Effective date: 6 April 2026 | Last updated: 6 April 2026
Weyuu ("we," "us," or "our") operates the Weyuu platform — a business management and customer relationship management (CRM) application designed for small and medium-sized businesses such as salons, spas, clinics, and service-based businesses. Our platform is accessible at weyuu-connect.web.app.
This Privacy Policy describes how we collect, use, store, share, and protect information when you use our platform and related services, including our integration with Meta (Facebook) products. By accessing or using Weyuu, you agree to the terms outlined in this policy.
Weyuu is owned and operated in India. If you have questions about this policy, you can reach us at privacy@weyuu.in.
1. Information We Collect
1.1 Information you provide directly
When you create an account or use our platform, you may provide us with:
- Your name, phone number, and email address (for account registration and authentication)
- Business details — business name, address, category, tax identifiers, and logo
- Team member information — names and roles of people you add to your Weyuu account
- Client records — names, contact details, and other information about your customers that you enter into the CRM
- Service and product offerings that you configure within your account
- Credential vault entries — platform logins and credentials you choose to store (these are encrypted at rest)
1.2 Information collected through Meta (Facebook) integration
If you connect your Facebook account to Weyuu, we collect the following data through the Meta Platform, based on the permissions you grant during the OAuth authorization process:
| Permission | Data collected | Purpose |
|---|---|---|
| pages_show_list | List of Facebook Pages you manage | Display your Pages in the Weyuu dashboard so you can choose which ones to connect |
| pages_read_engagement | Page engagement metrics, follower counts | Show your Page performance within the CRM dashboard |
| pages_manage_metadata | Page subscription settings | Subscribe your Pages to lead-form webhook notifications |
| pages_manage_ads | Ad account associations for your Pages | Display and manage ad-related information connected to your Pages |
| ads_read | Ad account details, campaign metrics | Show advertising performance data within the Weyuu dashboard |
| ads_management | Ad campaign configuration | Enable ad management capabilities within Weyuu |
| leads_retrieval | Lead form submissions (name, email, phone, and any custom form fields) | Automatically import leads from your Facebook Lead Ads into your CRM so you can follow up promptly |
| business_management | Business account details and associated assets | Identify and verify the Facebook Business account linked to your Weyuu account |
We also receive your Facebook user ID and display name when you authorize the connection, which is used to identify your integration within the Weyuu dashboard.
1.3 Information collected automatically
When you use the platform, we may automatically collect:
- Device information — browser type, operating system, screen resolution
- Usage data — pages visited within the app, features used, and timestamps
- Error and diagnostic data — to identify and fix issues with the platform
2. How We Use Your Information
We process the information we collect for the following purposes:
- Providing and operating the platform — to deliver the CRM, business management, and lead management features you signed up for
- Meta integration features — to import leads from your Facebook Lead Ads, display your Page information, and manage ad-related settings on your behalf
- Authentication and security — to verify your identity, protect your account, and detect unauthorized access
- Communication — to send transactional notifications related to your account, such as lead alerts or system updates
- Improvement and troubleshooting — to diagnose technical issues, analyze usage patterns, and improve the platform experience
- Compliance — to meet our legal and regulatory obligations
We do not use your data for profiling, automated decision-making, advertising purposes, or to build user profiles beyond what is necessary for the functioning of the Weyuu platform. We do not sell, rent, or trade your personal data to third parties.
3. How We Share Your Information
We share your information only in the limited circumstances described below:
3.1 Service providers
We use the following third-party service providers to operate the platform. Each provider processes data solely on our behalf and at our direction, in accordance with contractual obligations:
| Service provider | Purpose | Data location |
|---|---|---|
| Railway (railway.com) | Cloud hosting — runs our application servers and database | United States |
| Google Firebase | User authentication (Firebase Auth), file storage (Cloud Storage), and frontend hosting | United States |
| Meta Platforms, Inc. | Facebook/Instagram API integration for lead retrieval and Page management | United States |
3.2 Legal requirements
We may disclose your data if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Weyuu, our users, or the public.
3.3 Business transfers
If Weyuu is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.
3.4 With your direction
We may share data with third parties when you explicitly direct us to do so — for example, if a future integration requires it and you provide express consent.
4. Data Security
We take the security of your data seriously and implement administrative, technical, and physical safeguards designed to protect it:
- All data is transmitted over HTTPS (TLS encryption in transit)
- Facebook access tokens are encrypted at rest using AES-256 encryption before being stored in our database
- Credential vault entries are encrypted using AES-256-GCM with a dedicated encryption key — sensitive fields are stored as a single encrypted blob and are only decrypted on demand by the account owner
- Authentication is handled through Firebase Auth with phone-based OTP verification
- Access to integration features (such as revealing stored credentials) is restricted by role — only account owners can access sensitive data
- Our production environment runs on managed infrastructure with automatic security patching
While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to promptly addressing any security incident in accordance with applicable laws.
5. Data Retention
We retain your data for as long as your account is active and as needed to provide you with our services. Specifically:
- Account data — retained for the lifetime of your active account
- Meta platform data (Facebook integration data) — retained while your Meta integration is connected. When you disconnect your Facebook account from Weyuu, we delete the stored access token and associated metadata. Lead records that were already imported into your CRM remain as part of your business records unless you manually delete them or request deletion.
- CRM records (clients, leads, engagements) — retained within your account until you delete them or close your account
- Diagnostic and error logs — retained for up to 90 days for troubleshooting purposes, then automatically purged
When you close your account or request data deletion, we will delete or anonymize your data within 30 days, except where we are required to retain it by law.
6. Your Rights and Choices
You have the following rights regarding your data:
- Access — you can view the personal data we hold about you within your Weyuu account at any time
- Correction — you can update or correct your information through the platform's profile and settings pages
- Deletion — you can request deletion of your account and all associated data by contacting us at privacy@weyuu.in, or by using the data deletion process described on our Data Deletion page
- Disconnect Meta integration — you can disconnect your Facebook account from Weyuu at any time through the Integrations section of your dashboard. This revokes our access to your Facebook data and deletes the stored access token.
- Revoke Facebook permissions — you can also revoke Weyuu's access directly from your Facebook account under Settings > Security > Apps and Websites
- Data portability — you can request a copy of your data in a standard, machine-readable format by emailing us
We will respond to all data-related requests within 30 days. Deleting your account is irreversible — all associated data including CRM records, leads, and settings will be permanently removed.
7. Cookies and Tracking
Weyuu uses minimal browser storage (such as localStorage and sessionStorage) for authentication tokens and user preferences. We do not use third-party advertising cookies or tracking pixels on our platform. Firebase may set cookies for authentication purposes as part of the sign-in process.
8. Children's Privacy
Weyuu is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a person under 18, we will delete that information promptly.
9. International Data Transfers
Weyuu is operated from India. Our service providers may process data in the United States and other jurisdictions. By using the platform, you acknowledge that your data may be transferred to and processed in countries outside your country of residence. We ensure that any such transfers are carried out with appropriate safeguards in place and in compliance with applicable data protection regulations.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our platform, or applicable laws. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify you through the platform or by other appropriate means. Your continued use of Weyuu after any changes indicates your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, you can reach us at:
Weyuu
Email: privacy@weyuu.in
Location: India
For any concerns specific to how we handle data received through Meta products, please refer to Meta's Platform Terms in addition to this policy.