Effective Date: March 3, 2026
Vera ("we", "our", "us") is an AI marketing assistant operated by magicpin (Samast Technologies Private Limited) that helps merchants manage their online presence — including Google Business Profile and connected social media accounts such as Instagram and TikTok. This Privacy Policy explains how we collect, use, store, and protect your information when you use Vera through WhatsApp, the magicpin partner portal, web, or any other channel.
Account & Authentication:
Google Business Profile Data:
Connected Social Accounts (Instagram, TikTok):
Usage Data:
We use your information to:
We do not sell or rent your data to any third parties.
magicpin (Samast Technologies Private Limited) is a Meta-authorized WhatsApp Business technology provider. In addition to serving magicpin's own merchants, Vera enables independent client businesses ("Client Businesses") to communicate with their own customers on WhatsApp through their own WhatsApp Business Accounts and phone numbers.
When we provide this service, magicpin acts as a service provider (data processor) that processes end-customer information only on the documented instructions of the Client Business, who remains the controller of that data. In this role we process:
This data is used solely to deliver, route, and generate responses for the Client Business's conversations. We do not sell it, use it for advertising or profiling, share it with other Client Businesses, or use it — whether raw, aggregated, anonymized, or derived — to train any generalized AI or machine-learning model. Each Client Business's data is logically isolated from every other Client Business.
Our processing of WhatsApp data complies with the WhatsApp Business Terms of Service and Meta's Platform Terms. When a Client Business disconnects from Vera, we delete or return the end-customer conversation data we processed on its behalf in accordance with its instructions, except where retention is required by law.
Vera accesses your Google Business Profile through the Google Business Profile API using the business.manage OAuth scope. This access is used exclusively to:
We access your Google Business Profile data only after your explicit consent via Google's OAuth consent screen. All actions on your profile (posting replies, creating posts) require your approval before execution.
When you choose to connect your Google account to import customers, Vera reads (read-only) two categories of data via Google's People API:
contacts.readonly — contacts you have explicitly saved in your Google account (name and phone number only).contacts.other.readonly — contacts auto-saved by Gmail from your email interactions (name and phone number only).After consent, an in-app selection screen lets you pick which contacts are actually your customers. Contacts you do not select are discarded server-side and never persisted. Only the names and phone numbers you select are saved to your private customer list and used solely to send WhatsApp marketing messages to those customers.
We do not write, modify, or delete anything in your Google account. We do not share, sell, or use this contact data for advertising. Imported names and phone numbers are encrypted at rest.
You can revoke Google Contacts access at any time by tapping Disconnect Vera inside the app — which removes all imported contacts on our side — or via your standard Google account permissions page at myaccount.google.com/permissions. Our next sync attempt detects the revocation and stops accessing your Google account.
AI/ML use of Google data. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not retain, use, or transfer Google user data — whether raw, aggregated, anonymized, or derived — to develop, improve, or train any generalized AI or ML models. Vera uses a third-party AI provider (Anthropic Claude) elsewhere in the product, but it never receives any data imported from your Google account.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where you choose to connect a social media account, Vera accesses it only through the platform's official authorization (OAuth) flow, and only for the specific account you connect. All actions are performed on your behalf for that single account, and only after you grant the relevant permissions.
When you connect an Instagram Business or Creator account, Vera uses the Instagram API (with Instagram Login) to, based on the permissions you grant:
When you connect a TikTok account, Vera uses the TikTok API to, based on the scopes you grant:
TikTok does not provide an API to read or reply to comments on organic posts, so Vera does not access TikTok comments.
Availability: The TikTok integration is offered only to merchants in regions where TikTok operates. It is not available to merchants in India, where TikTok is not accessible.
Social media data accessed through these integrations is used solely to provide the features you request and is shown only to you. We do not sell it, use it for advertising or profiling, or use it — whether raw, aggregated, anonymized, or derived — to develop or train any generalized AI or machine-learning models. Access and refresh tokens are encrypted at rest. You can disconnect a social account at any time inside Vera, which revokes Vera's access and removes the stored credentials.
We implement industry-standard security measures to protect your data:
We may share your information only in the following cases:
You have the right to:
Vera is designed for business owners and is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Vera after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, contact us at: