Privacy Policy

Official Website: https://www.wesupercharged.com/
Effective Date: August 11, 2026

Welcome to Supercharged ("Supercharged," "we," "us," or "our"), an AI-powered sales development and lead-qualification platform provided by Supercharged Technologies ("Company"), a company incorporated under the laws of India.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in connection with:

  • the Supercharged platform and dashboard used by our business clients ("Client(s)," "you," when you are a Client or an authorised user of a Client); and
  • the WhatsApp-based conversational interactions we facilitate between our Clients and their prospective customers or leads ("Leads," "you," when you are a Lead engaging with Supercharged on behalf of a Client).

Please read this Policy carefully. By accessing or using Supercharged, you acknowledge the practices described in this Policy. If you do not agree with these practices, please do not use our services.

  1. Scope and Roles: Data Fiduciary and Data Processor

    Supercharged operates primarily in a business-to-business (B2B) context. Depending on the relationship and the data being processed, Supercharged may act as a Data Fiduciary or a Data Processor.

    1.1 Supercharged and its Clients — Data Fiduciary Relationship

    When a business signs up to use Supercharged ("Client"), we collect and process personal data relating to the Client’s authorised users, such as founders, sales representatives, administrators, and other authorised personnel.

    We process this information for purposes including providing, maintaining, securing, billing, and supporting the Supercharged platform.

    In this relationship, the Company acts as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent applicable.

    1.2 Supercharged and Leads — Data Processor Relationship

    When a Client uses Supercharged to communicate with its prospective customers or leads through WhatsApp, the Client generally determines the purposes for which Lead personal data is processed.

    In this relationship:

    • The Client is generally the Data Fiduciary of the Lead’s personal data.
    • Supercharged acts as a Data Processor on behalf of the Client and processes Lead data in accordance with the Client’s documented instructions and the applicable Data Processing Agreement ("DPA").
    • The Client is responsible for ensuring that its collection and use of Lead data, including its WhatsApp communications, notices, opt-ins, and marketing practices, comply with applicable law.

    If you are a Lead and have questions about how your personal data is used by a Client, you should generally contact the business you were communicating with first. You may also contact us using the details in Section 13, and we will assist or route your request to the appropriate party where applicable.

  2. Personal Data We Collect

    2.1 Data Collected from Clients

    Depending on how the platform is used, we may collect:

    • Account data: name, business email, phone number, company name, job title, login credentials, and password information maintained in protected or hashed form.
    • Billing data: billing address, GSTIN or tax identification information, subscription information, and payment-related information. Payments may be processed by third-party payment processors, and we do not intentionally store full payment card numbers.
    • Configuration data: tone-of-voice settings, business information, knowledge-base information, WhatsApp Business API credentials or tokens, Calendly/Google Calendar/Outlook Calendar integration tokens, Slack workspace tokens, CRM connection details, and other configuration information provided by the Client.
    • Usage data: login timestamps, feature usage, support interactions, device and browser information, IP address, diagnostic information, and technical logs.
    • Communication data: information provided when a Client contacts our support or communicates with us.

    2.2 Data Collected from Leads

    When Supercharged processes Lead information on behalf of a Client, the data may include:

    • Contact information: name, phone number, WhatsApp identifier, email address, and other contact information provided by the Lead or Client.
    • Conversational data: messages and other content exchanged through the WhatsApp-based conversational experience, including timestamps and relevant delivery or read information made available through the applicable platform.
    • Business and qualification information: company name, role, budget, timeline, requirements, use-case information, preferences, and other information voluntarily provided during a conversation.
    • Scheduling data: calendar availability and meeting bookings made through supported integrations, including meeting time, attendee information, and booking status.
    • Derived information: lead qualification scores, intent signals, conversation summaries, tags, and other structured information generated from Lead interactions and made available to the Client through the Supercharged platform.

    2.3 Data We Do Not Intentionally Request

    Supercharged does not intentionally request or target the collection of sensitive or highly personal information through Lead conversations.

    Because conversations may contain free-form messages, individuals may voluntarily provide information of this nature. Where such information is received, it will be handled in accordance with the applicable Client’s instructions, the purposes of the service, and applicable law.

    Clients are responsible for ensuring that their use of Supercharged does not require the systematic collection of sensitive or highly personal information without appropriate legal basis, notices, safeguards, or other requirements under applicable law.

    2.4 Children’s Data

    Supercharged is a B2B product and is not directed at, marketed to, or knowingly intended for individuals under 18 years of age.

    We do not knowingly request or intentionally collect personal data from children through the Supercharged platform. Clients are responsible for ensuring that their use of the platform complies with applicable requirements concerning children’s personal data.

  3. How We Use Personal Data
    PurposeClient DataLead Data
    Providing and operating the platform
    AI-driven conversation, qualification, and routing
    Sending WhatsApp messages and notifications
    Scheduling demos and meetings
    Slack/WhatsApp notifications to Client sales teams(authorised content)
    Billing and invoicing
    Customer support(when required)
    Security, fraud prevention, debugging, and system monitoring
    Product analytics and improvement(aggregated/anonymised)
    Legal and regulatory compliance
    Protecting our rights, users, systems, and property
    Marketing communications

    We may use aggregated, anonymised, or de-identified information for analytics, security, debugging, performance measurement, and product improvement.

    We do not use identifiable Lead conversational content to train general-purpose or foundational third-party AI models unless the relevant Client or Lead has been separately informed and, where required, the appropriate legal basis or consent has been obtained.

    Where third-party AI or large language model providers are used to provide functionality, those providers process relevant information as service providers or sub-processors subject to applicable contractual and data protection obligations.

  4. Legal Basis for Processing

    To the extent the DPDP Act applies to our processing, we process personal data only for lawful purposes and on an applicable legal basis, which may include:

    • Consent, where consent is required and has been obtained;
    • Legitimate uses or other permitted grounds under applicable Indian data protection law;
    • Performance of services requested by or on behalf of a Client;
    • Compliance with legal obligations;
    • Security, fraud prevention, and protection of our systems and rights; and
    • Other grounds permitted under applicable law.

    Where consent is relied upon, individuals may withdraw consent in accordance with applicable law and the relevant service process. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

    For Lead data processed as a Data Processor, the relevant Client is generally responsible for determining the applicable legal basis and providing required notices or obtaining required consents.

  5. WhatsApp-Specific Disclosures

    Supercharged uses the WhatsApp Business Platform and related Meta infrastructure to send and receive messages with Leads.

    By interacting with a Client’s Supercharged-powered WhatsApp number, Leads acknowledge that:

    • Message content may be transmitted through Meta’s infrastructure and is subject to the applicable WhatsApp and Meta terms and privacy practices, in addition to this Policy and the Client’s own privacy policy.
    • Leads may request that further WhatsApp communications stop by replying with "STOP," "UNSUBSCRIBE," or another clear opt-out instruction, or by blocking the relevant number.
    • We will process such opt-out requests in accordance with the Client’s instructions and applicable platform requirements.

    Clients are responsible for obtaining any required WhatsApp opt-ins and ensuring that their communications comply with applicable law and WhatsApp/Meta policies.

    Supercharged may use automated systems, including AI, to generate or assist with responses, qualification, routing, and conversation summaries.

  6. Calendar Integration Disclosures

    When a Client connects Google Calendar, Microsoft Outlook, Calendly, or another supported scheduling service to Supercharged:

    • We access only the information reasonably necessary to provide the requested scheduling functionality.
    • Depending on the integration, this may include free/busy availability, event creation or modification information, attendee information, meeting times, and booking status.
    • We do not intentionally access unrelated calendar content beyond what is reasonably required.
    • Access is generally granted through OAuth or similar authorisation mechanisms and may be revoked by the Client through the relevant provider or Supercharged, where supported.

    Lead information provided for scheduling may be used to create, manage, and communicate information relating to the requested meeting.

  7. Sharing and Disclosure of Personal Data

    We do not sell personal data.

    We may disclose or provide access to personal data to the following categories of recipients:

    7.1 Service Providers and Sub-processors

    We may use third-party service providers and sub-processors to provide, operate, secure, and improve Supercharged, including providers in categories such as:

    • Hosting and infrastructure: Neon, Amazon Web Services (AWS), Google Cloud Platform (GCP), Railway, and similar infrastructure providers.
    • WhatsApp and communications: Meta and applicable WhatsApp Business Solution Providers (BSPs).
    • Scheduling: Calendly, Google Calendar, Microsoft Outlook Calendar, and related providers.
    • AI/LLM services: providers such as Anthropic and OpenAI, where used for Supercharged functionality.
    • Internal notifications and collaboration: Slack and similar services.
    • Payments: Razorpay, Stripe, and applicable payment providers.
    • Analytics, monitoring, and error tracking: applicable analytics, logging, security, and monitoring providers.

    We require relevant service providers and sub-processors to maintain appropriate confidentiality, security, and data protection obligations. A current list of material sub-processors may be made available upon request.

    7.2 Clients

    Lead data processed through Supercharged is made available to the relevant Client because providing such information to the Client is a core function of the service. We do not share one Client’s Lead data with another Client.

    7.3 Legal and Regulatory Authorities

    We may disclose personal data where reasonably necessary to:

    • comply with applicable law, regulation, legal process, or government request;
    • respond to lawful requests from courts, regulators, or authorities;
    • investigate fraud, security incidents, or suspected unlawful activity;
    • protect the rights, safety, property, or security of Supercharged, our Clients, Leads, or others; or
    • enforce our agreements and policies.

    7.4 Business Transfers

    Personal data may be transferred or disclosed as part of a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to applicable law and reasonable measures to maintain appropriate protection of personal data.

  8. Data Storage and Cross-Border Processing

    Supercharged uses third-party infrastructure and service providers that may store or process personal data in India or other jurisdictions, depending on the provider, service, and applicable configuration.

    Personal data may therefore be transferred to or processed outside India.

    Where personal data is processed outside India, we take reasonable contractual, technical, and organisational measures appropriate to the circumstances and in accordance with applicable law.

    Different service providers may maintain data in different countries or regions. Clients may contact us for information about the relevant infrastructure and material sub-processors used for their account.

  9. Data Retention and Deletion

    We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, unless a longer period is required or permitted by applicable law.

    Client Data

    Client account data is generally retained for the duration of the Client relationship and for a reasonable period after termination for purposes such as account recovery, dispute resolution, fraud prevention, legal compliance, and enforcement of agreements.

    Lead Data

    Lead conversational and profile data is retained in accordance with the Client’s instructions and configuration. Where no specific Client retention period has been configured, Supercharged may retain Lead data for a commercially reasonable period necessary to provide the service, maintain records, ensure security, and comply with applicable law.

    Billing and Financial Records

    Billing, tax, and financial records may be retained for the period required under applicable tax, accounting, financial, or other legal requirements.

    Backups

    Deleted information may remain temporarily in encrypted backups or disaster-recovery systems until those backups are overwritten or securely deleted in accordance with our backup retention procedures.

  10. Your Rights

    Subject to applicable law and applicable exceptions, Data Principals may have rights including:

    • requesting information or a summary regarding personal data processed about them;
    • requesting correction, completion, updating, or erasure of personal data;
    • withdrawing consent where processing is based on consent;
    • exercising applicable rights through an authorised person or nominee where permitted by law;
    • registering a grievance concerning the processing of personal data; and
    • approaching the Data Protection Board of India or another applicable authority where permitted by law and after following the applicable grievance process.

    Leads should generally contact the Client business first because the Client generally determines the purposes of processing Lead data.

    Clients and Leads may also contact Supercharged using the details in Section 13. We will handle requests in accordance with applicable law and our role in relation to the relevant data.

  11. Data Security

    We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

    These measures may include:

    • encryption of data in transit and, where appropriate, at rest;
    • access controls and role-based permissions;
    • secure management and storage of API tokens, credentials, and integration keys;
    • authentication and authorisation controls;
    • logging and monitoring of relevant systems;
    • backup and disaster-recovery measures;
    • security reviews of relevant service providers; and
    • incident response procedures.

    If we become aware of a personal data breach, we will take appropriate steps to investigate, contain, mitigate, and remediate the incident and provide notifications where required by applicable law and/or the applicable DPA.

  12. Automated Processing and AI Disclosures

    Supercharged uses AI and automated systems to provide certain product functionality, including:

    • generating conversational responses based on Client-configured information and Lead interactions;
    • identifying intent and qualification signals;
    • scoring or categorising Leads;
    • generating conversation summaries; and
    • routing or prioritising Leads for Client sales teams.

    AI-generated outputs may contain errors, inaccuracies, or omissions and are intended to assist Client sales teams rather than replace their judgement.

    Supercharged does not use AI to make final decisions regarding a Lead’s credit eligibility, employment, purchasing eligibility, or other similarly consequential matters.

    Clients are responsible for reviewing AI-generated outputs before relying on them for consequential business decisions.

  13. Grievance Redressal and Contact

    In accordance with applicable law, Supercharged has designated a contact for privacy and grievance-related concerns.

    We will acknowledge and address grievances and privacy requests within the timeframes required by applicable law.

    If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India or another applicable authority in accordance with applicable law.

  14. Cookies and Similar Technologies

    Supercharged and its service providers may use cookies, local storage, pixels, logs, and similar technologies to:

    • authenticate users and maintain secure sessions;
    • remember preferences and settings;
    • analyze platform performance and usage trends; and
    • improve platform security and functionality.

    Users may control or disable cookie settings through their browser settings, though doing so may impact certain features or functionality of the platform.