Privacy Policy (with Integrated Anti‑Spam Policy)
Last Updated: October 26, 2025
Welcome to Sarvajeyam Solutions Private Limited. We are committed to protecting your privacy and securing your personal information. This policy explains how we collect, use, and safeguard data for our website, CRM/ERP platform, mobile applications, APIs, and related services (our "Services").
This document also incorporates our strict Anti‑Spam Policy, ensuring compliance with Indian laws, including TRAI regulations and the Digital Personal Data Protection Act, 2023 (DPDP Act), as well as the requirements of messaging platforms like WhatsApp/Meta.
1. Scope & Our Role
This Policy applies to:
- Visitors to our website.
- Our customers who use the CRM/ERP platform ("Customers").
- Individuals whose data is processed by our Customers through our platform ("End‑Users").
- All messaging services (SMS, WhatsApp, Email, In‑App Notifications) provided via our platform.
Our Role Regarding End‑User Data
For personal data entered into our platform by our Customers ("Customer’s Customer Data"), we act as a Data Processor. This means we process this data strictly on the instructions of our Customer, who is the Data Controller (or Data Fiduciary under the DPDP Act, 2023).
The Customer is responsible for ensuring they have a legal basis and necessary consents to collect and process End‑User data under applicable laws like the DPDP Act, 2023. For Customer’s Customer Data, we rely on the Customer’s lawful basis (consent or other legal basis) under the DPDP Act, as applicable.
Our Services and all data processing are conducted exclusively within India.
2. Information We Collect
2.1 Customer Information
We collect the following from our Customers during onboarding and account usage:
- Company Name
- Authorized Contact Person's Name
- Email Address and Mobile Number
- Business Address
- Login Credentials
- Billing and Payment Details (if applicable)
2.2 Customer’s Customer Data (End‑User Information)
Our Customers may input the following End-User data into our platform:
- Name, Contact Number, and Address
- Loan or Application Details
- Repayment or Transaction History
- KYC or Identity Documents (if applicable)
- Any other business‑related information as required by the Customer
Note on Sensitive Data: Customers are solely responsible for ensuring they have the necessary legal basis and robust security in place for inputting any Sensitive Personal Data (such as KYC or biometric data) onto our platform, in full compliance with the DPDP Act.
We do not directly collect this data from End‑Users. We process it solely on behalf of and as instructed by our Customer.
2.3 Automatically Collected Information
When you use our Services, we may collect:
- IP Address
- Device, Operating System, and Browser Information
- Activity Logs and Timestamps
- System Performance and Security Logs
- Usage Analytics (to optimize our platform)
3. How We Use Your Information
We use the information we collect based on:
- Contractual Necessity: To provide and maintain our Services.
- Legitimate Interests: To secure our platform, prevent fraud, and improve performance.
- Legal Compliance: To adhere to Indian laws and regulations.
Specific purposes include operating and maintaining our CRM/ERP platform, supporting customer workflows, ensuring platform security, fulfilling regulatory obligations, and enhancing features. **We never sell personal data, use data for marketing or advertising, share data for profiling, or build unrelated profiles on End-Users.** All data is processed and stored exclusively within India.
4. Data Sharing and Disclosure
We only share data under the following circumstances:
- With Sub‑Processors: cloud hosting, SMS gateways, WhatsApp BSPs, etc. Sub‑processors are bound by strict agreements. A key sub‑processors list is available upon request.
- For Legal Reasons: when required by Indian law, court order, or government authority.
- With WhatsApp/Meta: only to deliver messages, verify templates, and ensure policy compliance. You acknowledge that message delivery via global providers like WhatsApp may involve transfers outside India as required by their infrastructure. No data is shared for advertising or profiling.
5. Data Security
We implement industry‑standard security measures including encryption (in transit and at rest), Role‑Based Access Controls (RBAC), strict authentication, India‑hosted servers, regular security assessments, and continuous monitoring. While no system is impervious, we follow best practices to protect data.
6. Data Retention
- Customer Information: Retained for the duration of service and a reasonable period thereafter for legal, audit, and billing purposes.
- Customer’s Customer Data: Retained only as instructed by the Customer.
Upon a Customer's written request, data will be deleted or exported, subject to legal obligations.
7. Your Rights (Under the DPDP Act, 2023)
- Customers: You can request access, correction, or deletion of your personal data by contacting us. We will respond to verified requests within 30 days.
- End-Users: End-Users should contact the Customer (Data Controller/Fiduciary) who collected their data. We will assist Customers in fulfilling such requests as instructed.
8. Cookies and Tracking
Our website uses cookies for authentication, session management, and analytics. You can manage cookie preferences via your browser settings; disabling essential cookies may affect functionality.
9. Messaging Integrations (SMS/WhatsApp/Email)
When Customers use messaging features:
- Only the data necessary for message delivery is shared with the service provider.
- We do not use messaging data for our own marketing.
- All messaging complies with TRAI, DND, WhatsApp, and IT Act rules.
10. WhatsApp/Meta Compliance
Customers using WhatsApp through our platform must adhere to:
- Valid Opt‑In: Maintain clear, auditable records of End-User consent.
- Approved Messages: Only send user‑initiated or pre‑approved template messages.
- Policy Adherence: All content must comply with WhatsApp's Business & Commerce Policies.
- Prohibited Activities: Scraping contacts, using purchased lists, or sending unsolicited promotional blasts is forbidden.
Violations may lead to template rejection, phone number restrictions, or bans by WhatsApp/Meta.
11. Our Anti‑Spam Policy
We enforce a strict Zero‑Tolerance Anti‑Spam Policy.
11.1 What We Consider Spam
- Unsolicited or unwanted messages.
- Bulk messaging without explicit prior consent.
- Misleading, fraudulent, or deceptive content.
- Any violation of TRAI DND, WhatsApp policy, or the IT Act.
11.2 Customer Responsibilities
- Obtain and document valid consent from all message recipients.
- Never use purchased, rented, or scraped contact lists.
- Clearly identify themselves as the sender.
- Immediately honor all opt‑out requests.
11.3 Enforcement
We reserve the right to:
- Suspend or permanently block messaging features.
- Request proof of consent from Customers.
- Terminate accounts for severe or repeated violations.
- Report abuse to telecom providers or WhatsApp.
11.4 Reporting Spam
If you receive spam from a user of our platform, please report it immediately to:
12. Updates to This Policy
We may update this Policy periodically. The latest version will be posted on our website with an updated "Last Updated" date. Continued use of our Services after any change signifies acceptance of the updated policy.
13. Contact Us
If you have questions about this Policy, contact: