1. Introduction
CSquare360 ("we", "our", "us") protects your privacy. This policy explains how we collect, use, and safeguard information when you use our platform at https://csquare360.space.
2. Information We Collect
- Account: name, email, phone, business details
- CRM data: leads, appointments, billing records
- Messages: WhatsApp and Instagram conversations you process via our CRM
- Integrations: encrypted OAuth tokens for Meta and Google
3. Meta Platform Integration
We integrate with Meta (WhatsApp Cloud API, Instagram, Facebook Pages, Lead Ads) to:
- Connect WhatsApp Business accounts and send/receive customer messages in the Unified Inbox
- Handle Instagram DMs and comment replies from the CRM
- Import Meta Lead Ads into your CRM
- Publish content you approve from Content Studio
We do not sell Meta user data. We comply with Meta Platform Terms and Developer Policies.
4. Google API Services — Limited Use Disclosure
CSquare360's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google user data solely to provide and improve user-facing features inside CSquare360 — not for advertising, not for sale, and not to train AI models.
- calendar.events.owned: create, update, and delete calendar events only on Google Calendars the user owns (CRM bookings, appointments, service reservations). Optional Google Meet links may be attached to those owned events.
- drive.file:store encrypted backup archives and files that CSquare360 creates — we do not access the user's full Drive.
- youtube.upload & youtube.readonly:upload videos the user explicitly chooses to publish from Content Studio, and read the user's own channel id/title after connect so we can show the connected channel name. We do not read all videos, comments, or playlists.
We do NOT:
- Sell Google user data
- Use Google user data for advertising or retargeting
- Transfer Google Calendar, Drive, or YouTube user data to third-party AI/ML providers
- Use Google user data (raw, aggregated, or derived) to create, train, fine-tune, or improve any foundational or generalized AI/ML models
- Allow humans to read Google user data except with user consent, for security/abuse investigation, or to comply with law
AI services used by CSquare360 (Groq GPT-OSS and Google Gemini API) process only WhatsApp/Instagram customer chat messages and CRM-generated assistant text for in-product auto-replies. Those AI pipelines never receive Google Calendar, Drive, or YouTube user data.
CSquare360's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. How We Use Information
- Provide CRM, messaging, booking, billing, and analytics
- Operate optional AI auto-replies for WhatsApp/Instagram customer messages inside your workspace (chat text only — not Google user data; not sold)
- Secure the platform and prevent abuse
6. Security
Data is protected with TLS in transit and AES-256-GCM encryption for sensitive tokens at rest. Multi-tenant controls isolate organization data.
7. Sharing
We do not sell your data. We share only with processors needed to run the service (e.g. hosting, Meta, Google) or when required by law.
8. Your Rights & Deletion
You may access, correct, export, or delete data and disconnect integrations. See Data Deletion Instructions or email csquaredigital2026@gmail.com.