This policy explains how VARK Technologies MMC handles personal data in UNFYCHAT. For the messages and contacts in a workspace, the Customer company decides why and how they are processed; we process them on its behalf. For account and billing data of workspace users, we are responsible.
What we process
- Workspace users: name, e-mail, hashed password, role, sign-in times and IP addresses (for security and audit logs).
- End customers of our Customers: messages, attachments and profile data (name, username, platform ID, phone number for WhatsApp) received through connected channels.
- Billing: plan, payment amounts and status, and the payment provider's card reference with the last four digits. We never receive or store full card numbers or CVV codes — these are handled by our payment provider.
- Channel credentials: access tokens issued by the platforms, encrypted at rest and never shown in browsers.
Why
To provide the service, keep it secure, prevent abuse, process payments, meet legal obligations, and contact account owners about their subscription.
Who else processes data
- Hosting and database: Vercel and Supabase (data centres in the EU region configured for the service).
- Payments: Token Azərbaycan / Odero.
- Messaging platforms you connect (Meta: Instagram, Messenger, WhatsApp).
- Transactional e-mail provider (when enabled).
[Counsel to confirm cross-border transfer requirements.]
Access by our staff
Our platform operators manage workspaces, plans and payments without access to message content. Any access to a Customer's content for support happens only on the Customer's request, is limited to what is needed, and is logged.
Retention
Workspace owners can set a retention period after which message bodies and attachments are removed automatically. When a workspace stops paying, its data is kept read-only for a period to be defined [e.g. 90 days] and then deleted unless the Customer asks otherwise. Unconfirmed sign-ups are removed after 7 days.
Security
Encryption in transit and of platform tokens at rest, strict separation between workspaces, role-based access, rate limiting and audit logs.
Your rights
You can ask for access, correction, export or deletion of personal data by writing to support@varktechnologies.com. End customers of a business should contact that business first; we will assist it.