1. Introduction
Supportive operates a business messaging platform that integrates with social media and messaging channels including TikTok, WhatsApp, Instagram, and Facebook Messenger. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
We collect the following categories of information:
- Account Information: Name, email address, company name, and billing information when you register.
- Integration Data: OAuth access tokens for connected social channels (stored encrypted). Message content and conversation threads from connected accounts.
- Usage Data: Log data, feature usage analytics, and performance metrics used to improve the platform.
3. TikTok & Meta OAuth Integrations
When you connect a TikTok or Meta (Facebook/Instagram) account to Supportive:
- You are redirected to TikTok or Meta to authorize the connection using their official OAuth flow.
- We receive an access token that allows us to read and send messages on your behalf.
- This token is encrypted at rest and used exclusively for delivering messaging functionality.
- You can revoke access at any time from within Supportive or from your TikTok/Meta account settings.
4. How We Use Your Information
We use collected information solely to:
- Provide and maintain the Supportive platform
- Display incoming messages from connected channels in your inbox
- Send replies on behalf of authorized account holders
- Improve platform performance and reliability
- Comply with legal obligations
5. Data Security
We implement enterprise-grade security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. All OAuth tokens are stored encrypted and never exposed to frontend clients or third parties.
6. No Data Sale
Supportive does not sell, rent, or trade your personal information or your customers' conversation data to any third party. Data is used exclusively to operate the platform on your behalf.
7. Data Retention
Conversation data is retained for as long as your account is active. Upon account termination, data is deleted within 30 days. You may request earlier deletion by contacting us at privacy@supportive.com.
8. Your Rights
You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@supportive.com. We will respond within 30 days.
9. Contact
For privacy-related questions or requests, contact us at: privacy@supportive.com