Privacy Policy

Last updated: November 3, 2026

The privacy of your data is a big deal to us. At IQTHINK LLC ("Company", "we", "us"), we apply the same principles to your data that we'd want applied to ours. This policy applies to all products built and operated by IQTHINK LLC, including Can Do, Birthday Hello, Ello, custom applications we build and operate for client businesses, and any future services (collectively, the "Services"), as well as our websites.

What we collect and why

We only collect what we need to provide our Services and improve your experience. The personal information you are asked to provide — and the reasons why — will be made clear at the point we ask for it.

Account information: When you sign up for a Service, we collect your name, email address, and any other information needed to create your account. For services that integrate with third-party platforms (like Basecamp), we use secure OAuth authentication and do not store your third-party credentials.

Billing information: If you pay for a Service, we collect payment details through our payment processor. We do not directly store your full credit card number.

Usage information: We collect general analytics data — such as pages visited and features used — to help us understand how our Services are used and how to improve them. We use privacy-focused analytics tools and do not track you across the web.

Communications: If you contact us directly, we may receive additional information such as your name, email address, and the contents of your message.

Messaging services (WhatsApp, SMS, and other channels)

Some of our Services, including custom apps we build for client businesses, send and receive messages through WhatsApp and other channels. We provide these features through the WhatsApp Business Platform, operated by Meta Platforms, Inc., and through Twilio Inc., our messaging provider.

When a business connects its WhatsApp account to us (for example through Meta's Embedded Signup), we receive and process:

• Business account information: business name, WhatsApp Business Account ID, phone number(s), display name, and profile details.
• Message data: the content of messages sent and received, the phone numbers and WhatsApp profile names of the people the business communicates with, and message metadata such as timestamps and delivery status.
• Message templates the business creates and their approval status.

We use this information only to deliver messages, manage the business's WhatsApp account and templates, provide support, and keep the service secure and working. We do not use message data for advertising, and we do not sell it.

When we act on behalf of client businesses

When we build or operate a messaging service for a client business, that business decides why and how its customers' messages are sent. For that data we act as a service provider (processor) to the business, and we process it only on the business's instructions and under our agreement with them. If you have received a message from a business that uses our Services and want to access or delete your information, please contact that business directly. We will help them respond to your request.

Service providers we use for messaging

We share messaging data only with providers who need it to run the service:

• Twilio Inc.: message delivery, WhatsApp sender management, and template management (United States).
• Meta Platforms, Inc. (WhatsApp): delivering messages over WhatsApp, under WhatsApp's own terms and privacy policy.
• Cloud hosting providers located in the United States: hosting and storage for our applications. Our public website is hosted on Cloudflare Pages.

These providers are bound by their own privacy and data protection terms and may use the data only to provide their services to us.

Data retention

We keep messaging data and connected-account information while the client business's account with us is active. We delete it within 30 days after the account ends or after we receive a valid deletion request, unless the law requires us to keep it longer. Our providers (such as Twilio and Meta) may keep copies under their own retention policies.

Requesting deletion of your data

You can ask us to delete your personal data, including data we received from Meta or WhatsApp, by emailing [email protected] with the subject "Data Deletion Request." We will confirm your request and complete the deletion within 30 days. Full instructions are on our Data Deletion Instructions page.

Requests from public authorities

If a government or other public authority asks us for users' personal data, we review each request to confirm it is lawful and valid, and we challenge requests we believe are unlawful. We disclose only the minimum information legally required, and we keep a record of each request, our response, and the legal basis.

What we don't do with your data

We'll never sell your personal information to third parties. We won't use your name or company in marketing statements without your permission. We don't mine your data for advertising purposes. We don't share, disclose, sell, or rent your information to other companies for the marketing of their products or services.

Your content in our Services

We treat your content as private and confidential. We do not access, view, or share your content except as necessary to provide the Services, comply with the law, or protect our rights. For details on what happens to your content when you cancel, see our Terms of Service.

Third-party services

We use a limited number of third-party services to operate our products — things like payment processing, email delivery, and analytics. These services only receive the minimum information necessary to perform their function and are bound by their own privacy policies. We do not sell or provide your data to third parties for their own purposes. For messaging, see "Service providers we use for messaging" above.

Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (HTTPS). While no system is perfectly secure, we work hard to keep your data safe.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify active users. The updated policy will be posted on this page with a revised "Last updated" date.

Questions about this policy? Contact us at [email protected].