Privacy Policy

This Privacy Policy explains how Neurosattva Technologies Private Limited (“we”, “us”) collects, uses and protects information when you use Vyaparsattva (the “Service”). The Service lets businesses (“Customers”) connect their WhatsApp Business account and communicate with their own leads and customers (“End Users”).

1. Our role

For information about End Users that a Customer uploads or collects through the Service, the Customer is the data controller and we act as a processor on the Customer's instructions. For Customer account and billing information, we are the controller.

2. Information we collect

• Account data: name, work email, role, and a hashed password.
• WhatsApp connection data: WhatsApp Business Account ID, phone number ID, display phone number, verified business name, and an access token issued by Meta, which we store encrypted.
• End User data: name, phone number, and details supplied by the Customer or the End User in conversation, plus message content, timestamps and delivery status.
• Business content: product catalog, FAQs, documents and AI persona settings provided by the Customer.
• Usage and security logs: sign-in events, audit logs of administrative actions, IP address and error logs.

3. How we use information

• To send and receive WhatsApp messages on the Customer's behalf through the WhatsApp Business Platform.
• To generate AI-assisted replies grounded in the Customer's catalog and knowledge base.
• To show conversations and lead pipelines to the Customer's authorised team members.
• To secure the Service, prevent abuse, debug issues and provide support.
• To comply with legal obligations.

We do not sell personal information and do not use End User messages to advertise to them.

4. Meta (WhatsApp) and AI processing

Messages are transmitted through Meta's WhatsApp Business Platform and are subject to WhatsApp Business Terms and Meta's Privacy Policy. To generate AI replies, relevant conversation context and Customer content are sent to Google's Gemini API. Based on Google's terms for its paid API services, this data is not used to train Google's models.

5. Service providers

We use trusted infrastructure providers to operate the Service: Google Cloud (hosting and messaging queues), MongoDB Atlas (database), Google Gemini (AI), and Meta (WhatsApp). They process data only to provide their services to us.

6. Security

Data is encrypted in transit. Meta access tokens are encrypted using an application encryption key. Each Customer's data is logically isolated from others, access is role-based, and administrative access to Customer data by our staff is logged. No system is perfectly secure, and we cannot guarantee absolute security.

7. Retention

We keep Customer account data while the account is active. Conversation and lead data are kept as configured by the Customer and deleted within 30 days after a verified deletion request or account closure, except where law requires us to keep it longer (for example security logs).

8. Your rights and data deletion

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, and to withdraw consent. End Users should first contact the business that messaged them; you can also contact us directly. See our Data Deletion page for how to request deletion. An End User can stop receiving messages at any time by replying “STOP” or blocking the business number.

9. International transfers

Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Children

The Service is intended for businesses and is not directed to children under 18.

11. Changes

We may update this policy and will change the “Last updated” date above when we do.

12. Contact

Neurosattva Technologies Private Limited
184 B, KanyaKubj Nagar, Indore, Madhya Pradesh 452006, India
contact@neurosattva.com