Privacy Policy

Last Updated: July 2026 · Version v1.1

This Service is operated by Atmanirbhar AI Consulting Private Limited (CIN U62099KA2026PTC222785), registered at 4053, Prestige Sunrise B4, N2 Electronic City, Electronic City, Bangalore South, Bengaluru – 560100, Karnataka, India. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary and you are the Data Principal.

1. Information We Collect

When you interact with our AI assistant via WhatsApp, we collect:

  • Phone Number— Your WhatsApp phone number, used to identify your conversation.
  • Message Content— The messages you send and receive during your conversation.
  • Booking Information — Appointment details including dates, times, services, and preferences.
  • Interaction Data — Timestamps, conversation flow, and interaction patterns.

2. How We Use Your Information

We use your information to:

  • Process your appointment requests and manage bookings.
  • Provide personalized responses based on your conversation history.
  • Improve our AI assistant's accuracy and helpfulness.
  • Send appointment reminders and follow-up messages.
  • Analyze usage patterns to improve our services (in aggregated, anonymized form).

3. Data Storage and Retention

  • Conversation data is stored securely, transmitted over encrypted connections, and phone numbers are hashed (HMAC-SHA-256) before storage.
  • Active conversation sessions expire after 24 hours of inactivity.
  • Booking records are retained while your account with the business is active and for 30 days after the account is closed, after which they are permanently deleted — consistent with our Terms and Refund Policy.
  • We erase personal data once the purpose it was collected for is served or you withdraw consent, except where retention is required by law (DPDP Act § 8(7)).
  • You may request deletion of your data at any time (see Section 6).

4. Data Sharing

We do not sell your personal information. Your data may be shared with:

  • The business you are interacting with (your service provider / tenant).
  • Our infrastructure providers (cloud hosting, database services) under strict data processing agreements.
  • AI model providers (e.g. Anthropic, OpenAI) that process message content to generate responses, as sub-processors under contract.
  • Messaging platforms (Meta Platforms — WhatsApp, Instagram, Messenger) through which messages are delivered.
  • Payment providers (e.g. Razorpay, Stripe) to process subscription payments.
  • Law enforcement, if required by applicable law.

Cross-Border Transfers & Sub-Processors

Some of our sub-processors — including AI model providers and messaging platforms — operate outside India, so your data may be processed abroad. Where this happens we rely on contractual safeguards with those providers and transfer data only as permitted under the DPDP Act, 2023 (§ 16). Categories of sub-processor: AI model providers, cloud hosting, messaging platforms, and payment providers.

Your Rights under the DPDP Act, 2023

We process your personal data on the basis of your consent (DPDP Act § 6). In addition to the rights in Section 6, as a Data Principal you may:

  • Seek grievance redressal from us before approaching the Data Protection Board (see Contact below).
  • Nominate another individual to exercise your rights in the event of death or incapacity.
  • Escalate an unresolved grievance to the Data Protection Board of India (dpb.gov.in).

The details of this notice are available in any language listed in the Eighth Schedule to the Constitution of India on request (DPDP Act § 5(3)).

Children

The Service is not directed at individuals under 18. We do not knowingly process the personal data of a child without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children (DPDP Act § 9).

5. AI Interaction

  • Our assistant is powered by artificial intelligence.
  • Conversations are processed by AI language models to generate responses.
  • No human reads your conversations unless you escalate to human support.
  • AI-generated responses may not always be accurate; please verify critical information.

6. Your Rights

You have the right to:

  • Access— Request a copy of your personal data.
  • Correction— Ask us to correct inaccurate data.
  • Deletion— Request deletion of your personal data.
  • Withdraw Consent — Revoke your consent at any time by messaging “STOP” or “REVOKE CONSENT”.
  • Data Portability — Request your data in a portable format.

7. Government & Authority Requests

From time to time, a public authority may request access to personal data. We handle every such request under a documented process designed to protect our users:

  • Legality review— We review the legal validity of every request before disclosing any data, and decline requests that lack a lawful basis.
  • Right to challenge — We will challenge requests we consider unlawful, overbroad, or improperly issued, including through legal channels where appropriate.
  • Data minimization — Where disclosure is legally required, we disclose only the minimum information necessary to satisfy the request.
  • Documentation— We document each request, our response, the legal reasoning, and the people involved, and notify affected users where permitted by law.

8. Contact

For privacy inquiries or to exercise your rights, contact our Grievance Officer, Ajayta Singha, at [email protected], or send “PRIVACY” in your WhatsApp conversation. We aim to acknowledge requests within 48 hours and resolve them within 15 days. See our Contact page for full details.

9. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated through the WhatsApp conversation.