Privacy Policy

This Privacy Policy explains how Vajraa, a sole proprietorship concern registered in Maharashtra, India (GSTIN 27DWRPB9680M3ZI; Labour Commissionerate, Government of Maharashtra Registration No. 2631000321225847), collects, uses, discloses, and protects personal data through the Vajraa platform, website, applications, and related services (collectively, the "Platform"). It is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made thereunder. By accessing or using the Platform, you consent to the practices described in this Policy.

1. Scope and Our Role

This Policy applies to:

• Clients — Business users (SMEs and their authorised personnel) who register for and use Vajraa ("Clients"). For Client data, Vajraa acts as a Data Fiduciary under the DPDP Act.
• End Customers — Individuals whose data is captured, stored, or processed on the Platform on behalf of Clients — for example, leads, prospects, and customers of a Client ("End Customers"). For End Customer data, Vajraa acts as a Data Processor processing data on the instructions of the Client, who is the Data Fiduciary.
• Visitors — Visitors to vajraa.io and related web properties.

If you are an End Customer, please direct requests regarding your personal data to the business (our Client) you interacted with. We will assist that business in fulfilling its obligations.

2. Personal Data We Collect

• Account and Business Data — Name, email address, phone number, business name, business category, GST or other business identifiers, billing address, and login credentials.
• Lead and CRM Data — Names, phone numbers, email addresses, messages, enquiry details, and interaction history of leads and customers captured through forms, advertisements, WhatsApp, and other connected channels, processed on behalf of Clients.
• Communication Data — Messages exchanged between Clients (including AI-assisted responses) and End Customers via WhatsApp Business and other integrated channels.
• Payment Data — Payment method details are collected and processed directly by our RBI-authorised payment gateway partners. We do not store card numbers, CVV, or banking passwords on our systems. We retain transaction references, amounts, and status.
• Shipping Data — Delivery names, addresses, and contact numbers, shared with logistics partners to fulfil shipments initiated through the Platform.
• Advertising Data — Ad account identifiers, campaign data, audience data, and performance metrics from Meta platforms, accessed with the Client's authorisation.
• Technical Data — Device information, IP address, browser type, log data, cookies, and usage analytics.

3. Purposes of Processing

We process personal data only for the following purposes:

• Creating and managing accounts, authenticating users, and providing Platform features.
• Capturing leads, operating CRM workflows, and enabling AI-assisted communication with End Customers on the Client's behalf.
• Creating, publishing, and managing content and advertising campaigns on Meta platforms as instructed by the Client.
• Processing payments, generating invoices, and managing subscriptions.
• Arranging shipping and order tracking through logistics partners.
• Providing customer support and service communications.
• Securing the Platform, preventing fraud and abuse, and complying with legal obligations.
• Improving the Platform through aggregated, de-identified analytics.

We do not sell personal data. We do not use End Customer data to train AI models for purposes unrelated to serving the respective Client.

4. Consent and Legal Basis

We process personal data on the basis of consent obtained at or before collection, for legitimate uses permitted under Section 7 of the DPDP Act (including voluntary provision of data for a specified purpose), and to comply with law. Consent requests are presented in clear and plain language. You may withdraw consent at any time by contacting us as set out in Section 11; withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may limit or end your ability to use the Platform.

Clients are solely responsible for obtaining valid consent from their End Customers for the collection and processing of End Customer data through the Platform, including for marketing and retargeting communications.

5. Disclosure of Personal Data

We share personal data only with:

• Service Providers and Processors — Meta Platforms (advertising and WhatsApp Business services), payment gateways, logistics and shipping providers, cloud hosting providers, and communication infrastructure providers — strictly to deliver Platform functionality.
• Legal Requirements — Courts, regulators, and government authorities where required by applicable law or valid legal process.
• Business Transfers — A successor entity (including any company into which the business of Vajraa may be transferred or incorporated) in connection with a transfer, merger, acquisition, or restructuring, subject to this Policy.

Each processor engaged by us is bound by contractual obligations of confidentiality, security, and purpose limitation. Use of Meta services through the Platform is additionally governed by Meta's own terms and data policies.

6. Data Storage and Cross-Border Transfer

Personal data is stored on secure cloud infrastructure. Certain service providers (including Meta and cloud hosts) may process data outside India. Such transfers are made only to jurisdictions not restricted by the Central Government under the DPDP Act, and with contractual safeguards requiring protection consistent with this Policy.

7. Data Retention

We retain personal data only as long as necessary for the purposes stated in this Policy or as required by law (including tax and accounting laws). Client and End Customer data is deleted or anonymised within 90 days of account termination, unless a longer period is required by law or the Client exports or instructs otherwise. Withdrawal of consent triggers deletion within a reasonable period, subject to legal retention requirements.

8. Security

We implement reasonable security safeguards as required under the DPDP Act, including encryption in transit, access controls, segregated credential management, logging, and periodic review of security practices. No system is fully secure; in the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by law.

9. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of your personal data and the processing activities relating to it.
• Correction, completion, and updating of your personal data.
• Erasure of personal data no longer necessary for the specified purpose.
• Grievance redressal through the contact in Section 11.
• Nominate another individual to exercise your rights in the event of death or incapacity.

Requests will be verified and responded to within the timelines prescribed under applicable law. If unsatisfied with our response, you may escalate to the Data Protection Board of India.

10. Cookies and Children

We use cookies and similar technologies for authentication, preferences, and analytics. You can manage cookies through browser settings; disabling them may limit Platform functionality.

The Platform is intended for business use by persons aged 18 years or above. We do not knowingly process personal data of children as defined under the DPDP Act. If such data is identified, it will be deleted.

11. Grievance Officer and Contact

For questions, consent withdrawal, rights requests, or grievances, contact:

• Grievance Officer: Mr. Ajay Bhosale
• Email: ceo@vajraa.io
• Address: Vajraa, Office No. 204, Sumangal Heights, opposite Patel Tiles, near Chhatrapati Metro Station, Shivajinagar, Pune, Maharashtra 411005, India

Grievances will be acknowledged and resolved within the timelines prescribed under applicable law.

12. Changes to This Policy and Governing Law

We may update this Policy from time to time. Material changes will be notified through the Platform or by email, and the "Last Updated" date will be revised. Continued use of the Platform after such notice constitutes acceptance of the updated Policy.

This Policy is governed by the laws of India. Subject to applicable law, courts at Pune, Maharashtra shall have exclusive jurisdiction.

Terms of Service

These Terms of Service ("Terms") govern access to and use of the Vajraa platform, website, applications, APIs, and related services (collectively, the "Platform"). By registering for, accessing, or using the Platform, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not use the Platform. If you use the Platform on behalf of a business, you represent that you are authorised to bind that business, and "you" and "Client" refer to that business.

1. Eligibility and Account

• The Platform is intended for business use by persons aged 18 years or above who are competent to contract under the Indian Contract Act, 1872.
• You must provide accurate, complete, and current registration information, and keep it updated.
• You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us immediately of any unauthorised use.
• We may refuse, suspend, or terminate accounts that violate these Terms or applicable law.

2. The Services

Subject to these Terms and payment of applicable fees, Vajraa grants you a limited, non-exclusive, non-transferable, revocable licence to use the Platform for your internal business purposes. The Platform enables Clients to, among other things: establish a digital presence; create and publish content; run advertising campaigns on Meta platforms; capture leads into CRM and WhatsApp; use AI-assisted communication with leads and customers; collect payments through integrated payment gateways; and manage shipping and order tracking through logistics partners.

We may modify, add, or discontinue features at any time. Material reductions in core functionality for paid Clients will be notified in advance where reasonably practicable.

3. Third-Party Platforms and Dependencies

• Third-Party Terms — Certain features depend on third-party services, including Meta platforms (advertising, WhatsApp Business), payment gateways, and logistics providers. Your use of those features is additionally subject to the respective third party's terms and policies, which you agree to comply with.
• No Control — We do not control third-party platforms. Suspension, restriction, policy change, pricing change, or outage of a third-party service (including restriction of a Client's ad account or WhatsApp number by Meta) is outside our control and does not constitute a breach of these Terms by Vajraa.
• Authorisation — You authorise us to connect to and act on your third-party accounts (such as Meta ad accounts and WhatsApp Business numbers) solely to provide the Platform's functionality on your instructions.

4. AI-Generated Content and Communications

• The Platform uses artificial intelligence to generate content, respond to leads, and automate communications on your behalf. AI output may contain errors, inaccuracies, or statements that do not reflect your intent.
• You are responsible for reviewing and supervising AI-generated content and communications sent in your business's name, and for ensuring they comply with applicable law, including consumer protection, advertising standards, and telecom/messaging regulations.
• AI output is provided as a tool, not as professional, legal, financial, or medical advice.

5. Client Responsibilities and Acceptable Use

You agree that you will not, and will not permit others to:

• Use the Platform for any unlawful, fraudulent, deceptive, or harmful purpose, or to advertise prohibited or restricted goods and services.
• Send spam or unsolicited communications, or contact individuals without valid consent where consent is required.
• Upload content that is defamatory, obscene, infringing, hateful, or that violates any third-party right.
• Reverse engineer, copy, resell, sublicense, or create derivative works of the Platform, or access it to build a competing product.
• Circumvent usage limits, security measures, or access controls, or introduce malware or harmful code.

You are solely responsible for: (a) the legality and accuracy of your content, offers, products, and advertisements; (b) obtaining all consents required from your leads and customers for collection, processing, and marketing communications under the Digital Personal Data Protection Act, 2023 and other applicable law; and (c) fulfilment of orders, quality of goods and services sold, refunds to your customers, and compliance with tax obligations. Vajraa is a technology provider and is not a party to transactions between you and your customers.

6. Fees, Billing, and Taxes

• Fees for the Platform are as published at vajraa.io or as agreed in writing, and are exclusive of GST and other applicable taxes, which will be charged additionally.
• Subscriptions are billed in advance for the chosen billing cycle. Advertising spend charged by Meta, payment gateway charges, and shipping charges are separate from and in addition to Platform fees.
• Except where required by law, fees are non-refundable, including for partial billing periods, unused features, or suspension/termination for breach.
• We may revise pricing with prior notice; revised pricing applies from your next billing cycle.
• Non-payment may result in suspension of the Platform after notice, and termination if payment remains outstanding.

7. Intellectual Property

• Our IP — The Platform, including its software, design, trademarks (including "Vajraa"), and all related IP, is owned by Vajraa or its licensors. No rights are granted except the limited licence in Section 2.
• Your Content — You retain ownership of the content and data you upload. You grant us a non-exclusive, worldwide, royalty-free licence to host, process, transmit, and display such content solely to provide and improve the Platform.
• Generated Content — You may use content generated for you through the Platform in your business, subject to third-party platform rules and any third-party rights embedded in such content.
• Feedback — If you submit feedback or suggestions, we may use them without restriction or compensation.

8. Data Protection

Our collection and processing of personal data is governed by our Privacy Policy, which forms part of these Terms. For personal data of your leads and customers processed through the Platform, you are the Data Fiduciary and Vajraa acts as a Data Processor on your documented instructions under the Digital Personal Data Protection Act, 2023. Upon termination, you may export your data within 30 days, after which it will be deleted or anonymised in accordance with the Privacy Policy.

9. Disclaimers

The Platform is provided on an "as is" and "as available" basis. To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Platform will be uninterrupted, error-free, or secure, or that it will generate any particular volume of leads, sales, engagement, or return on advertising spend. Marketing outcomes depend on factors outside our control, including your offers, pricing, market conditions, and third-party platform algorithms.

10. Limitation of Liability

To the maximum extent permitted by law: (a) Vajraa shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, goodwill, data, or business opportunity; and (b) Vajraa's total aggregate liability arising out of or relating to the Platform or these Terms shall not exceed the fees paid by you to Vajraa in the three (3) months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law.

11. Indemnity

You agree to indemnify and hold harmless Vajraa, its proprietor, employees, and agents from and against all claims, damages, losses, penalties, and expenses (including reasonable legal fees) arising out of: (a) your content, products, services, or advertisements; (b) your breach of these Terms or applicable law; (c) your failure to obtain required consents from your leads and customers; or (d) disputes between you and your customers or any third party.

12. Term, Suspension, and Termination

• These Terms apply from your first use of the Platform and continue until terminated.
• You may terminate by cancelling your subscription; termination takes effect at the end of the current billing cycle.
• We may suspend or terminate access immediately for breach of these Terms, unlawful use, non-payment, or risk to the Platform or other users; and otherwise with 30 days' notice.
• Upon termination, your licence ends and outstanding fees become immediately payable. Sections 7 to 11 and 13 to 14 survive termination.

13. Assignment and Successor Entity

You may not assign these Terms without our written consent. We may assign or transfer these Terms, including to any company into which the business of Vajraa may be transferred or incorporated, or in connection with a merger, acquisition, or restructuring; these Terms will bind and benefit such successor entity.

14. Governing Law and Dispute Resolution

These Terms are governed by the laws of India. Any dispute arising out of or in connection with these Terms or the Platform shall first be attempted to be resolved amicably. Failing resolution within thirty (30) days, the dispute shall be referred to arbitration by a sole arbitrator under the Arbitration and Conciliation Act, 1996, with the seat and venue of arbitration at Pune, Maharashtra, and proceedings conducted in English. Subject to the foregoing, courts at Pune, Maharashtra shall have exclusive jurisdiction.

15. General

• Entire Agreement — These Terms, together with the Privacy Policy and any written order or plan terms, constitute the entire agreement between you and Vajraa regarding the Platform.
• Changes — We may update these Terms; material changes will be notified through the Platform or by email. Continued use after the effective date of changes constitutes acceptance.
• Severability — If any provision is held unenforceable, the remainder continues in full force.
• No Waiver — Our failure to enforce any provision is not a waiver of it.
• Force Majeure — Neither party is liable for delay or failure caused by events beyond its reasonable control, other than payment obligations.
• Notices — Notices to us: ceo@vajraa.io or Vajraa, Office No. 204, Sumangal Heights, opposite Patel Tiles, near Chhatrapati Metro Station, Shivajinagar, Pune, Maharashtra 411005, India. Notices to you: your registered email.

User Data Deletion Instructions

Vajraa respects your right to have your personal data deleted. This page explains how to request deletion of data collected through the Vajraa platform, including data received through Meta platforms (Facebook, Instagram, and WhatsApp Business) when you interact with a business that uses Vajraa. This page supplements our Privacy Policy and is provided in accordance with the Digital Personal Data Protection Act, 2023 and Meta Platform Terms.

1. What Data This Covers

• Client Data — Account and business data of registered Vajraa Clients (name, email, phone number, business details, login credentials).
• End Customer Data — Lead and customer data captured through forms, Meta advertisements, WhatsApp conversations, and CRM records, processed by Vajraa on behalf of the business you interacted with.
• Meta-Sourced Data — Data received via Meta integrations, such as your name, contact details, and messages submitted through Facebook or Instagram lead forms or WhatsApp.

2. If You Are a Vajraa Client (Business User)

To delete your account and associated data:

• Log in to your Vajraa account, go to Settings, and select account deletion; or
• Email us at ceo@vajraa.io from your registered email address with the subject line "Data Deletion Request", stating your registered business name and phone number.
• We will verify your identity, confirm the request, and deactivate your account.
• Your data will be deleted or anonymised within 90 days of confirmation, except data we must retain under applicable law (such as tax, accounting, and invoicing records).

Before requesting deletion, export any data you wish to keep. Deletion is permanent and cannot be reversed.

3. If You Are a Lead or Customer of a Business Using Vajraa

If you interacted with a business (for example, through its Facebook or Instagram ad, website form, or WhatsApp number) and that business uses Vajraa, that business is the Data Fiduciary for your data. Vajraa processes your data only on that business's instructions.

• Contact the business you interacted with directly and ask them to delete your data. They can do this immediately from their Vajraa CRM.
• If you cannot reach the business or do not receive a response, email ceo@vajraa.io with the subject line "Data Deletion Request", stating the business name, your phone number or email used in the interaction, and the approximate date of interaction.
• We will verify the request, coordinate with the business, and ensure deletion of your identifiable data from the Vajraa platform within 30 days, except where retention is required by law.

4. Data Received Through Meta (Facebook, Instagram, WhatsApp)

If your data reached Vajraa through a Meta integration and you wish to remove it:

• Follow Section 3 above to have your data deleted from Vajraa.
• To manage or remove data held by Meta itself, use your Facebook or Instagram settings (Settings > Your Facebook Information / Apps and Websites) or WhatsApp settings. Deletion from Vajraa does not delete data held independently by Meta.

5. What Happens After Deletion

• Your identifiable data is removed from active Vajraa systems and marked for purge from backups in the normal backup rotation cycle.
• Records required under law (tax, accounting, transaction records) are retained for the legally mandated period and then deleted.
• Aggregated or anonymised data that can no longer identify you may be retained.
• We will confirm completion of your deletion request by email.

6. Contact

• Grievance Officer: Mr. Ajay Bhosale
• Email: ceo@vajraa.io
• Address: Vajraa, Office No. 204, Sumangal Heights, opposite Patel Tiles, near Chhatrapati Metro Station, Shivajinagar, Pune, Maharashtra 411005, India

Deletion requests are acknowledged within 72 hours and processed within the timelines stated above. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.