Privacy Policy

Metrico is a product of Metrico Technologies Private Limited (“Metrico”, “Company”, “we”, “our”, “us”).

1. Scope & Acceptance

This Privacy Policy applies to all visitors, customers, and users of the Metrico platform, including our website, web application, and mobile applications (collectively, the “Platform”).

By accessing or using Metrico, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree to this Privacy Policy in full, you must discontinue your use of the Platform.

We may update this Privacy Policy from time to time to maintain compliance with changing digital data protection laws in India. Material changes will be notified through prominent notices within the Platform interface. Continued use after updates constitutes explicit acceptance of the revised policies.

2. Definitions

• Client – An organization or business entity that subscribes to Metrico services.
• User – An authorized employee, manager, or representative of a Client executing work on the Platform.
• Visitor – A person accessing public-facing areas of the Platform.
• Personal Data – Any information relating to an identifiable individual (Data Principal).
• Client Data – Operational records, configurations, leads, or communication summaries uploaded, stored, or processed by Clients or Users.
• Public Area – Platform sections accessible without user authentication controls.
• Restricted Area – Platform sections requiring explicit credential authorization to access.

3. Our Role: Data Processor

Metrico acts primarily as a Data Processor with respect to Client Data managed within our multi-tenant structures.

All business profiles, customer leads, and records uploaded to the Platform remain the exclusive property of the Client (the Data Fiduciary). Clients are entirely responsible for ensuring that all underlying personal information has been lawfully collected and that required corporate permissions or user consents have been obtained prior to ingestion.

4. Information We Collect

4.1 Account & Subscription Information

When you create an account, we collect registration markers including:

• Full Name and communication coordinates.
• Corporate Email address and verified phone number.
• Registered Company Name and operational country.
• Secure login credentials (salted and encrypted).
• Optional user profile details (such as avatars, interface language choices, and localized time zone preferences) may also be provided voluntarily.

4.2 Contact, Lead & CRM Data

Clients may upload, map, or synchronize lead metrics, deal evaluations, contact records, and document parameters into the secure databases of the Platform. This operational data is visible exclusively to authorized users within the Client’s dedicated sub-tenant environment.

Metrico does not independently source, scrape, or verify client lead data.

4.3 Communication & Support Interactions

We may record or analyze metadata and message bodies from direct interactions with our technical sales, implementation teams, or customer support channels for internal training, quality assurance safeguards, and platform service optimization.

4.4 Third-Party Integrations & Webhooks (Meta, WhatsApp, Email)

If you explicitly authorize third-party integrations, Metrico accesses and processes incoming data streams solely to enable active CRM features, automated lead routing, quotation assignments, and messaging pipelines. Specifically:

• Facebook Lead Ads (Meta API): When you connect Facebook Lead Ads, we collect lead form responses (such as full name, email, phone number, and custom form inputs) submitted by prospects on your Meta ad campaigns, mapping them directly to your CRM pipeline.
• WhatsApp Business API (Meta Cloud API): When you connect your WhatsApp Business Account (WABA) via Embedded Signup or API credentials, we access your WABA ID, phone number ID, WhatsApp profile details, message metadata, and message content solely to allow you to send, receive, and manage customer communications within the Metrico platform.
• Email & Calendar Integrations: Inbound/outbound communication logs synchronized via authorized mail servers or OAuth flows.

All third-party data processing is strictly permission-based, governed by Meta Platform Terms and API credentials, and processed in accordance with the user's explicit authorization.

5. How We Use Information

We process collected information to fulfill explicit business services, including to:

• Provide, secure, and operate the multi-tenant software architecture.
• Manage active business subscriptions, payment cycles, and corporate billing profiles.
• Deliver contextual customer support and technical troubleshooting logs.
• Generate high-density analytical graphs, pipeline metrics, and system-wide performance reports.
• Improve user experience, iron out interface bugs, and optimize viewport scaling.
• Communicate operational system alerts, updates, and maintenance announcements.
• Prevent system fraud, platform misuse, or cross-tenant security anomalies.

6. Cookies & Tracking Technologies

We utilize essential cookies and temporary session token identifiers to ensure robust platform performance:

• Authenticate active user sessions.
• Maintain secure cross-site request protection (CSRF tokens).
• Remember interface state variations (such as collapsed grids or active pipeline view choices).
• Analyze broad performance metrics via lightweight telemetry.

Users may restrict cookie processing via individual browser settings; however, disabling functional cookies will cause authenticated restricted environments to stop functioning properly.

7. Information Sharing

Metrico does not sell, trade, or rent personal data to third-party data brokers or marketing aggregators.

Information is shared only under strict operational guardrails with:

• Authorized internal users within your specific Client workspace according to administrator roles.
• Contracted infrastructure providers (such as cloud hosting servers and transactional mail systems) bound by strict confidentiality requirements.
• Law enforcement, judiciary bodies, or government regulators when compelled by applicable statutes within the Republic of India.

Meta API Data Protection Guarantee: Notwithstanding anything else in this Privacy Policy, data obtained through Meta APIs (including Facebook Lead Ads data and WhatsApp Business messaging data) will never be sold, rented, transferred, or shared with third-party data brokers, ad networks, or marketing aggregators. Such data is processed exclusively within your dedicated multi-tenant workspace to deliver CRM functionality.

8. Data Security

We deploy standard administrative, logical, and technical infrastructure safeguards designed to protect personal data from unauthorized access, accidental alteration, disclosure, or loss. This includes implementing data-at-rest encryption, transport layer protection (HTTPS), and strict tenant-isolation code policies.

While we execute rigorous engineering controls, no web application framework can guarantee absolute security against targeted bad actors.

9. Data Retention

Client operational data is securely preserved for the duration of an active paid or trial subscription. Upon expiration or explicit contract termination, client data will be marked for permanent deletion from our active production databases after a standard safety data preservation window, unless holding metrics is mandated by statutory Indian tax or corporate compliance laws.

10. Legal Disclosure Obligations

We reserve the right to disclose personal data or platform metadata when we reasonably believe such action is necessary to comply with legal obligations, respond to valid court orders, execute search warrants, protect the structural safety of the platform infrastructure, or defend the legal rights and property of Metrico and its corporate clients.

11.1 Meta & Third-Party Integration Data Deletion Instructions

Clients and users who connect their Meta accounts (Facebook Lead Ads or WhatsApp Business API) can revoke access and delete associated data at any time through the following mechanisms:

• In-App Disconnection: Navigate to Settings > Integrations > WhatsApp / Facebook Ads inside Metrico CRM and click Disconnect. This immediately revokes API access tokens, unsubscribes webhooks, and purges stored active access credentials from our servers.
• Meta Business Settings Revocation: You can directly revoke Metrico CRM's access by going to your Facebook Business Manager Settings > Integrations > Connected Apps, or via your Facebook Personal Account under Settings & Privacy > Settings > Business Integrations and removing the Metrico CRM application.
• Data Erasure Requests: To request complete deletion of historical lead data or WhatsApp communication logs synced via Meta APIs, email our data desk at privacy@metricotech.com with your Client Workspace ID. We will process and confirm permanent database deletion within 30 days.

12. Governing Law & Grievance Redressal

This Privacy Policy is governed entirely by the laws of India. Any unresolved disputes or compliance claims originating from the use of the platform shall fall under the exclusive jurisdiction of the courts located in Delhi, India.

In accordance with the Information Technology Act and the Digital Personal Data Protection (DPDP) framework of India, any privacy grievances, data access requests, or protection concerns regarding your information may be directed to our Data Grievance Desk at: privacy@metricotech.com.

We aim to acknowledge all security or privacy-related tickets within 48 hours and resolve verified grievances within 30 business days of receipt.