This Privacy Policy explains how Naduvan Technologies Pvt Ltd ("Naduvan", "we", "us") handles personal data. We follow India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them, and the Meta Platform Terms for data we receive from Meta.
1. Who we are
Naduvan Technologies Pvt Ltd, Innov8, RMZ Millenia Business Park, Campus 1A, No.143, Dr. M.G.R. Road, Perungudi, Chennai 600096, Tamil Nadu, India. Email: naduvantechnologies@gmail.com. Phone: +91 44 4551 3535.
2. Scope
This policy covers:
- this website (naduvantech.com);
- our products PosyGen, DocyGen and VishGen, and apps we build for our customers ("Services");
- our WhatsApp Business messaging service, which lets businesses that use our Services connect their own WhatsApp Business account.
A product may have its own privacy notice with more detail. Where it does, that notice applies alongside this one.
Our two roles. For data about our own customers (the businesses that sign up), such as account and billing details, we decide how the data is used. For data our customers put into the Services about their customers or patients, such as bills, prescriptions and WhatsApp conversations, we process it on our customer's behalf and on their instructions. Our customer is responsible for having a lawful basis, such as consent or opt-in, to collect that data and to message those people.
3. Data we collect
| Category | Examples | Source |
|---|---|---|
| Contact & enquiry data | Name, company, email, phone, your message | You, when you contact us or book a demo |
| Account data | Business name, user names, login email or phone, roles, GST number, billing details | Our customers, when they sign up and use the Services |
| Customer content | Products, invoices, stock, patient visits, prescriptions, appointments, files, and anything else our customers enter | Our customers and their staff |
| WhatsApp Business data | See section 4 | Meta, with our customer's permission |
| Payment data | Transaction IDs and status. Card and UPI details are handled by our payment gateway, not stored by us. | Payment providers |
| Technical data | IP address, device and browser type, app version, logs, error reports | Automatically, when the website or Services are used |
This website itself does not use advertising or tracking cookies.
4. WhatsApp Business data
When a business connects its WhatsApp Business account to our Services through Meta's Embedded Signup, it grants our app permissions on the WhatsApp Business Platform. With that permission we receive and process:
- the business's WhatsApp Business Account ID, phone number(s), display name, verification and quality status;
- message templates the business creates, and their approval status;
- messages the business sends and receives through our Services, including text, media and documents, plus delivery and read status;
- the WhatsApp phone numbers and profile names of the people who message the business, or who the business messages.
We use this data only to provide the messaging features the business has chosen: sending and receiving its messages, showing conversations to its staff, managing its templates, and keeping the service running and secure. In particular, we:
- do not sell, rent or license WhatsApp data, or share it with data brokers or advertisers;
- do not use it for advertising, profiling, or to build products for anyone other than the business it belongs to;
- do not combine one business's WhatsApp data with another's;
- do not send messages on our own behalf from a business's number;
- process this data in line with the Meta Platform Terms, the WhatsApp Business Terms of Service and the WhatsApp Business Messaging Policy.
A business can disconnect at any time, from our app or from its Meta Business settings. After that, we stop accessing its WhatsApp account, and we delete its WhatsApp data as described in section 7.
5. How we use data
- To provide, run and support the Services our customers signed up for.
- To create and secure accounts, sign users in, and enforce roles and permissions.
- To answer enquiries and support requests, and to send service messages such as invoices, renewals and security alerts.
- To find and fix errors, prevent fraud and abuse, and keep the Services secure.
- To improve the Services using aggregated or de-identified usage information.
- To meet legal, tax and regulatory obligations.
We do not use customer content, patient data or WhatsApp messages to train AI models for anyone other than the customer it belongs to.
6. Sharing
We share personal data only as follows:
- Service providers that host and run the Services for us under contract, such as Amazon Web Services and Cloudflare for cloud hosting and storage, payment gateways, and email and SMS providers. They may use the data only to provide their service to us.
- Meta Platforms, to deliver WhatsApp messages the business sends through the WhatsApp Business Platform.
- Within a customer's own account, with the staff and users that customer authorises.
- Authorities, when required by law or a valid legal order, or to protect people's safety, our rights or our Services.
- A buyer or successor, if our business is merged or sold, under the same protections.
We do not sell personal data.
7. Retention & deletion
- Account and customer content is kept while the customer's account is active, and deleted or returned within 90 days after the account closes, unless the law requires us to keep it longer (for example, tax records).
- WhatsApp Business data is kept while the business stays connected. It is deleted within 30 days after the business disconnects or asks for deletion, except where the business has chosen to keep message history in its own account, or where the law requires otherwise.
- Enquiries are kept for up to 24 months.
- Logs are kept for up to 180 days.
To request deletion, see our Data Deletion page.
8. Security
We protect data with encryption in transit (HTTPS/TLS) and at rest, access controls based on roles and least privilege, encrypted storage of secrets such as API and access tokens, backups, and monitoring. No system is perfectly secure. If we become aware of a personal data breach that affects you, we will notify you and the authorities as the law requires.
9. Your rights
Under applicable law you may ask to:
- see a summary of the personal data we hold about you and how we use it;
- correct, complete or update it;
- delete it, or withdraw consent you gave;
- nominate someone to exercise these rights for you;
- raise a grievance with us, and then with the Data Protection Board of India.
If your data is in a business's account (for example, you are a shop's customer or a clinic's patient), please contact that business first. We will help them answer your request. You can also write to us and we will pass your request on.
10. Children
Our Services are meant for businesses and are not directed at children. Where a customer, such as a clinic, records data about a child, the customer is responsible for getting verifiable consent from the parent or guardian.
11. Changes to this policy
We may update this policy. We will post the new version here with a new effective date and, for significant changes, notify customers by email or in the app.
12. Contact & grievance officer
For questions, requests or complaints about privacy, contact our Grievance Officer:
Grievance Officer, Naduvan Technologies Pvt Ltd
Innov8, RMZ Millenia Business Park, Campus 1A, No.143, Dr. M.G.R. Road, Perungudi, Chennai 600096
Email: naduvantechnologies@gmail.com (subject: "Privacy request")
Phone: +91 44 4551 3535
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.