Trust & Compliance

How we handle WhatsApp, data, and security. Convoup is built on Meta's WhatsApp Business Platform APIs. We meet Meta's Tech Provider requirements for data handling, security, and compliance.

Data controller

You (the customer)

Active

Data processor

Convoup (Upgreatworld Pvt Ltd)

Active

Hosting region

United States (Vercel, Supabase)

Active

Encryption

AES-256-GCM at rest, TLS 1.2+ in transit

Active

AI provider

Groq Cloud

Active

Meta Tech Provider

In progress

Application status: In progress

Trust Center & Security Policies

Detailed documentation detailing our platform security posture, subprocessor architecture, and regulatory compliance standards.

Security Practices

Data protection, encryption, access controls, penetration testing, vulnerability disclosure, and SOC 2 roadmap.

Data Handling & Subprocessors

What data we process, how we protect it, and the third-party services involved.

Subprocessors

Full list of third-party services that process data on our behalf, with locations and certifications.

WhatsApp Policy & Opt-in

How we handle WhatsApp opt-in requirements, template compliance, and conversation windows.

Privacy Policy

How we collect, use, and protect your information.

Data Deletion

How to request deletion of your data through Meta or directly.