Privacy notice

We collect only what we need to run group pages and to understand how the site is used. We do not sell data and we do not use advertising cookies. We use Google Analytics to see how people find and use the site (see “Google Analytics” below). We never read your WhatsApp group. If a group admin chooses to import a chat export, we use it only to suggest content for that group's page and delete it within 7 days (see “Chat imports” below).

• Email addresses of admins and members, used for sign-in and for messages about your account.
• Notifications: reminders for events you said you will attend (and for admins, their own events), notices when photos are added to those events, and weekly tips for admins. A summary of new posts is sent only if you ask for one. Each group's notifications can be turned off at /notifications, and every notification email has a one-click unsubscribe link.
• Page content that admins and members add: text, events, listings, documents, photos and links.
• WhatsApp contact numbers that people choose to show on a page, for example on a listing. These are encrypted at rest.
• Visitor counts. To count visits without tracking anyone, we store a hash: a one-way code made from your IP address, your browser's user agent and a secret salt. The salt changes every day at 00:00 UTC, so the same visitor cannot be linked from one day to the next. We do not store the IP address itself.
• Google Analytics. Which pages are viewed and for how long, how you arrived (the previous site and any campaign tags in the link), your device, browser and language, the approximate location Google works out from your IP address, and actions such as joining a group, signing in, creating a page or sharing. If you are signed in, we add a one-way code made from your account number so your visits on different devices can be counted together; it does not contain your email address or name. We never send email addresses, passcodes, contact details or anything you write.
• Members-area unlocks. When someone enters a passcode, we keep a hash of the IP address, plus the browser's user agent, for 30 days. This helps us stop passcode guessing.
• Billing details when an admin buys Pro: billing address and country, and a GSTIN if one is given, so we can issue a correct invoice. Card, UPI and bank details go straight to Razorpay. We do not see or store them.

• Raw visit and click events: 90 days.
• Google Analytics events: 14 months.
• Daily totals made from those events (no personal data): kept indefinitely.
• Content you delete: removed for good 30 days after deletion.
• Unlock records: deleted 30 days after the unlock expires.
• Account and page data: kept while the account or page exists.
• Invoices: kept for as long as Indian tax law requires.

Strictly necessary cookies and settings:

• a sign-in session cookie, so you stay signed in;
• a members-area cookie, so you do not have to re-enter a passcode on every visit;
• a theme setting, so the site remembers light or dark mode;
• your language and region choices, and your answer to the analytics question below.

Analytics cookies: Google Analytics sets _ga and _ga_<id>, which last up to two years and tell Google that two visits came from the same browser. In the European Economic Area, the United Kingdom and Switzerland (and anywhere your device uses a European time zone) these cookies are only set if you accept them; until then Google receives only cookieless signals. We do not use advertising or social media cookies.

You can change your choice at any time:

We use a small number of service providers. Each one handles data only to provide its service to us.

• Supabase: database, sign-in and file storage. Data is stored in Supabase's Singapore region.
• GoDaddy: website hosting.
• Razorpay: payments for Pro plans.
• Google (Google Analytics): measuring how the site is used, as described above. Google may process this data outside your country.
• Resend: sending email, such as sign-in codes and notifications.
• Sentry: error reports when something breaks: the error, the page type and a reference, never your messages, contact details or cookies.
• Anthropic: AI analysis of a chat export a group admin chooses to import, with names replaced by labels and phone numbers and emails replaced by placeholders before it is sent.

• Admins can export their page data and delete their pages at any time.
• Members can delete their own posts and delete their account.
• When an account is deleted, content that person wrote stays on the page but is no longer linked to them. It shows as written by “Former member”.
• You can turn analytics cookies off with “Cookie settings” above, or block Google Analytics in any browser with Google's opt-out add-on or a content blocker.
• You can ask us for a copy of your data, or ask us to correct or delete it, using the contact details below.

group121.com is not affiliated with WhatsApp or Meta. We only link to WhatsApp using its official links. We do not connect to your WhatsApp account or automate WhatsApp. The only WhatsApp messages we ever process are in a chat export that a group admin uploads, as described next.

The owner or an admin of a group page can upload an export of their group's WhatsApp chat so that the page can suggest the places, services, links and events the group talked about. The admin confirms that the group's members know this.

• The export is read in the admin's browser first. Photos, videos and system messages are left out, people's names are replaced by labels such as P1 and P2, phone numbers and emails are replaced by placeholders, and passwords, one-time codes, card and ID numbers are removed. Only this redacted text is uploaded.
• We store the redacted text encrypted and send it to our AI provider (listed above) to find suggestions. We keep records of how much was processed, never the text itself.
• Nothing is published automatically. The admin reviews each suggestion and chooses what to add to the page; a phone number is only added when the admin chooses to add it.
• The chat text, the names and numbers, and the suggestions the admin did not add are deleted when the admin finishes the import, and at the latest 7 days after it was uploaded.
• If you are a member of a group and do not want your messages imported, tell your group's admin, or contact us using the details below.

• Tracked links. When you open a group page through a tracked link, the link's code and campaign tags are kept in your browser tab (not in a cookie) and counted with the page's anonymous visit statistics.
• Invite links. A member's personal invite link counts how many people it brought. Admins see the counts, never who clicked.
• Testimonials. A member can write a short testimonial. It is shown only if the admins approve it, with the member's first name. Members can change it, and admins can delete it, at any time.
• AI drafts. Post drafts are written from the page's public content and totals only, never from chat imports or members' details, by the AI provider listed above.
• Connected accounts. An admin can connect a Facebook Page, an Instagram professional account, a LinkedIn profile or an X account so that posts they schedule are published there. We store the access the network grants, encrypted, and use it only to publish the admin's posts. The admin can disconnect at any time. Meta, LinkedIn and X then process the post under their own terms.
• Group directory. A group appears at group121.com/discover only if its admins ask and we approve it; it shows the same information as the group's public page.

Each group page is run by its admins, who decide what to publish. Please do not post other people's personal details without their consent. See our acceptable use policy.

If we change this notice, we will update the date at the top. For significant changes we will tell admins by email.