Privacy Policy

This notice explains how Hippargi Labs ("Hippargi Labs", "we", "us"), operator of VyaparPulse, handles information when businesses ("Customers") use our WhatsApp collections software, and when we process data about their dealers and debtors. It is written with reference to the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Our role

Hippargi Labs is the data controller for Customer account data, team-member data, billing records and website usage data. For ledger data a Customer uploads about its own dealers (names, mobile numbers, invoices, amounts), the Customer decides what is collected and why, and we process it only on the Customer's instructions to provide the service. Customers are responsible for having a lawful basis to contact their dealers on WhatsApp.

2. What we collect

• Account data: name, email, login credentials, business name, GSTIN (if provided), UPI ID, support messages and team roles.
• Ledger data: dealer names, mobile numbers, invoice numbers, dates, amounts and payment status uploaded by Customers.
• Message data: WhatsApp reminders sent and replies received through the Customer's connected WhatsApp Business account.
• Billing data: plan and subscription status. Card and payment details are collected by Paddle, not stored by us.
• Usage and device data: pages visited, referring source, country, browser, operating system, device type, page performance, errors and interactions, as described under "Website analytics" below. Our service providers may also process IP addresses and device identifiers to deliver and secure the service.

3. How we use it and our legal bases

• To perform our contract: create accounts, import ledgers, send reminders, read and respond to dealer replies, show dashboards, generate payment links, bill subscriptions and provide support.
• For our legitimate interests: keep the service secure, prevent fraud and abuse, troubleshoot errors, and improve the product without identifying individual visitors.
• To meet legal obligations: maintain required accounting and tax records and respond to lawful requests.
• With consent where required: for optional processing that is not necessary to provide the Service. You may withdraw that consent for future processing.

AI features classify dealer reply text and suggest or send the matching reply, such as promise-to-pay, dispute or payment confirmation. We do not sell personal data and do not use Customer ledger data to advertise to anyone.

4. Who we share it with

• Hosting, database and authentication: Lovable Cloud, which stores and serves the application and maintains sign-in sessions; Google also receives sign-in information when you choose Google sign-in.
• Meta (WhatsApp Business Platform): to connect WhatsApp and deliver messages from the Customer's own number. Meta's own terms apply to that account.
• AI model providers: dealer reply text is sent to an AI model to classify intent. It is not used by us to train models.
• Paddle: our Merchant of Record for selling subscriptions, managing payments and subscriptions, tax compliance and invoicing.
• Email delivery providers: to send sign-in, account and billing emails.
• Professional advisers: legal and accounting advisers where necessary for our business and legal obligations.
• Authorities: where required by applicable law.

Some of these providers may process data outside India, under appropriate contractual safeguards.

5. Website analytics

Our hosting provider, Lovable, counts visits to our published site. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Clicks are identified by their location on the page, not by their text. Detailed data is kept for 90 days and daily summaries for a year. This is recorded for every visitor. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

6. Cookies, sign-in and external content

When you sign in, your browser stores a sign-in session so you stay logged in. A small preference cookie remembers whether the app sidebar is open or closed. We do not use advertising cookies.

The Facebook Login tool loads from Meta when you connect WhatsApp; Meta receives connection information such as your IP address and device details and may use its own cookies under its privacy policy. Pages also load fonts from Google Fonts, which receives your IP address to deliver them.

7. Retention

We keep Customer data while the account is active. After cancellation, data stays read-only for 90 days so it can be renewed or exported, and is then deleted or anonymised, except records we must keep under tax, accounting or other applicable law. Website analytics is retained as described above.

8. Security

We use appropriate technical and organisational measures, including encrypted connections, access controls, business-level data isolation and server-side storage of WhatsApp access tokens. No system is perfectly secure; we will notify affected Customers and authorities of a breach as required by law.

9. Your rights

You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you, subject to applicable law. Dealers whose data was uploaded by a Customer should contact that Customer first; we will help the Customer respond. Contact us using the details below to exercise your rights or complain.

10. Grievance Officer

Email support@vyaparpulse.com with the subject "Grievance". We acknowledge within 48 hours and aim to resolve within 30 days.

11. Changes

We may update this notice. Material changes are announced by email or in the app before they take effect.