Data Protection Standards

SideEye Media / Mod Creation Group is committed to protecting the personal and business data of our clients, website visitors, and WhatsApp messaging recipients. This document outlines our data protection standards and security practices.

1. Data Classification

We classify data into the following categories:

• Contact & lead data: Names, emails, phone numbers, and inquiry details submitted via our website
• Messaging data: WhatsApp opt-in records, conversation logs, and campaign analytics
• Client business data: Campaign configurations, audience segments, and performance reports

2. Storage & Encryption

• Contact form leads are stored in MongoDB Atlas with encryption at rest (AES-256)
• All data in transit is protected via TLS 1.2+ encryption
• WhatsApp messaging flows through Meta's encrypted Cloud API endpoints
• Database access credentials are stored as environment variables, never in source code

3. Access Controls

Access to client and user data is restricted to authorized SideEye personnel on a need-to-know basis. We implement role-based access controls and audit logging for database operations.

4. Data Retention & Deletion

• Contact form submissions: retained up to 24 months, then securely deleted
• WhatsApp opt-in records: retained for the duration of the messaging relationship
• Deletion requests are processed within 30 days of verified identity confirmation

5. Third-Party Processors

We use the following third-party services to process data:

• MongoDB Atlas: Database hosting for contact form leads
• Meta WhatsApp Cloud API: Official messaging infrastructure
• Vercel: Website hosting and deployment

We do not sell personal data to third parties. Data shared with processors is limited to what is necessary for service delivery.

6. Incident Response

In the event of a data breach, SideEye will notify affected clients and relevant authorities within 72 hours of discovery, in accordance with applicable data protection regulations.

7. User Rights

Individuals may request access, correction, or deletion of their personal data by contacting support@sideeye.in. We will respond to verified requests within 30 days.

8. Compliance Framework

Our data protection practices align with Meta's Business Messaging Policies, the Information Technology Act, 2000 (India), and applicable data protection guidelines. We review and update these standards annually.