Privacy Policy

Website and waitlist information. If you submit an early-access form, we collect the details you enter, which may include your name, business name, email address, WhatsApp number, business category, and description of your needs, along with technical request information needed to operate and secure the site.

Account and workspace information. When you create an account or use the platform, we process your account email and authentication identifiers, workspace name and settings, business profile details (such as description, address, opening hours, service area, contact details, and website), team membership and invitations, and information you enter into the platform.

Catalog and business content. This can include products or services, descriptions, SKUs, prices, availability, variants, custom fields, FAQs, assistant settings, and product images or documents you upload. The current upload flow accepts private JPEG, PNG, and PDF files up to 5 MB per file.

WhatsApp and customer information. An owner may submit a phone number and notes in an assisted onboarding request. When an owner uses Meta Embedded Signup, we process the business account and phone identifiers, authorization status, phone status and delegated access credentials returned by Meta. Delegated credentials are encrypted on the server and are not displayed to workspace members. For enabled messaging features, we process customer names, phone numbers or WhatsApp IDs, message content, delivery status, conversation records, and service requests to provide the connected inbox and replies. Messaging activation is restricted during validation; Meta catalog publishing is not currently enabled.

We do not ask for Meta passwords. Any Meta authorization must take place through Meta. If a connected feature is enabled, we process only information needed for that feature and permissions granted by the business administrator.

We use information to provide and secure accounts and workspaces; save business and catalog content; manage team access and assisted onboarding; respond to support and privacy requests; operate, maintain, and improve OneThread; prevent misuse; and meet legal obligations.

Information from a connected Meta service is used to maintain the connection and provide the WhatsApp functionality the workspace owner requested. We do not use WhatsApp message contents or delegated Meta credentials for advertising, and we do not sell or share them for unrelated purposes. When you use the AI customization builder or customer test chat, your submitted text, preview conversation, and relevant business profile, FAQ, catalog, and assistant configuration context may be sent to the configured NVIDIA AI service to generate a proposal or test response. Do not enter sensitive personal information into these tools. Uploaded documents are not automatically sent as AI knowledge. Live WhatsApp AI automation is not currently enabled.

We do not sell personal information. We do not use private uploaded documents as public catalog images; catalog publishing is not currently enabled.

OneThread uses Supabase for authentication, database, and private file-storage functions, and Resend to deliver authentication emails such as signup confirmation and password recovery. These email services process the destination address and email content to deliver those messages. Website and application hosting providers process technical information needed to deliver the services. Service providers may process information only to provide services to DG Creations and under their applicable terms.

Meta receives information when a workspace owner chooses to connect a Meta or WhatsApp business asset, as explained in Meta's own terms and privacy information. NVIDIA processes relevant inputs when an AI builder or test-chat feature is configured and used. The public website source does not currently identify advertising or analytics trackers.

Workspace content is organized by workspace, and the application uses membership-based access controls. Private product files require an authorized workspace access path. We use technical and organizational measures intended to protect information, but no internet service can guarantee absolute security.

Our providers may process information in locations outside India. Where required, we use applicable safeguards for cross-border processing.

We keep information while needed to provide the service, operate a workspace, handle requests, maintain security, resolve disputes, or meet legal and accounting obligations. Retention depends on the type of information and the workspace owner's use of the platform. We will delete or de-identify information when it is no longer needed, subject to information we must keep by law or for legitimate security and record-keeping purposes.

You may ask DG Creations to access, correct, or delete information associated with you, or to stop optional communications. The platform does not currently offer self-service account deletion. Email the company and privacy contact shown above; we may verify control of the relevant account or contact details before acting. Workspace owners should also coordinate deletion of shared business information with other workspace members.

Disconnecting a third-party account does not automatically erase information held by that provider. You may need to use the provider's own privacy and deletion controls as well. We will explain any information we cannot delete and the reason for retaining it.

OneThread is for business representatives and is not designed for children. We may revise this policy as the platform changes; the revision date appears above.