Privacy
Policy

• To create and manage your account and company workspace
• To deliver the modules and features you subscribe to
• To process billing, subscriptions, and trial management
• To send transactional emails — order confirmations, invoices, OTPs
• To provide customer support and respond to queries
• To detect fraud, security threats, and policy violations
• To generate platform analytics and improve our services
• To comply with applicable Indian laws and regulatory requirements
• To communicate product updates, feature releases, and service notices

We do not sell your personal data to third parties. We may share limited data with:

• Supabase Inc. — our cloud database and authentication provider
• Razorpay — for processing subscription payments (subject to Razorpay's Privacy Policy)
• Meta Platforms Inc. — for WhatsApp Business API message delivery (WhatsApp module only)
• Email service providers — for sending transactional and marketing emails
• Legal authorities — when required by law, court order, or to protect rights
• Service acquirers — in the event of a merger or acquisition (users will be notified)

All third-party providers are bound by data processing agreements consistent with applicable privacy laws.

We use cookies and similar technologies for:

• Session management — keeping you logged in securely
• Preferences — remembering your theme, language, and layout settings
• Analytics — understanding how the platform is used (Google Analytics 4 / GTM, if configured by your admin)
• Security — CSRF protection and bot detection

You can disable cookies in your browser settings, but this may affect platform functionality. We do not use third-party advertising cookies.

Your data is stored on Supabase infrastructure, which uses PostgreSQL with row-level security (RLS) policies ensuring strict tenant isolation — your company's data is never accessible to other tenants.

Security measures include:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level security policies enforced at the database layer
• Multi-factor authentication (TOTP) available for all accounts
• Session timeouts and token rotation
• Access logs and audit trails
• Role-based access controls limiting data access to authorized personnel

We retain your data for as long as your account is active or as needed to provide services.

• Account data — retained for the lifetime of your account
• Business records (orders, invoices, HR) — retained for 7 years for compliance with Indian tax law
• WhatsApp message logs — stored temporarily; purged after 90 days
• Usage/access logs — retained for 12 months
• Billing records — retained for 7 years as required by financial regulations

Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

Under applicable Indian and international privacy laws, you have the right to:

• Access — request a copy of your personal data we hold
• Correction — update inaccurate or incomplete information
• Erasure — request deletion of your personal data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data in certain circumstances
• Objection — opt out of non-essential communications
• Withdraw consent — for any processing based on consent

To exercise these rights, email support@smartseyali.comwith subject line "Privacy Request". We respond within 30 days.

The platform integrates with third-party services. Their use of your data is governed by their own privacy policies:

• Supabase — Database & Authentication: supabase.com/privacy
• Razorpay — Payment Processing: razorpay.com/privacy
• Meta / WhatsApp Business API — Messaging: facebook.com/privacy
• Google Analytics / GTM — Analytics (if enabled by admin)
• Microsoft Clarity — Session Recording (if enabled by admin)

We are not responsible for the privacy practices of third-party services. We recommend reviewing their policies.

SmartSeyali Tech's platform is a business-to-business (B2B) service intended exclusively for organisations and individuals aged 18 and above. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us immediately at support@smartseyali.com and we will delete the account promptly.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• The 'Effective Date' at the top of this page will be updated
• We will send an email notice to the primary account holder
• A banner notification will appear within the platform

Continued use of the platform after the effective date constitutes acceptance of the updated policy.

For privacy-related questions, data requests, or concerns, contact our privacy team: