Privacy Policy

Uraiyadal is a Software-as-a-Service (SaaS) platform that provides businesses with tools to build, deploy, and manage chatbot-based communication workflows, primarily through WhatsApp Business API and other messaging channels. We act as a technology provider and, where applicable, a data processor on behalf of our customers.

Registered address and contact: uraiyadal.ai@gmail.com

2.1 Information You Provide

• Account registration details: name, email address, phone number, company name, industry
• Billing information: payment details processed securely by our payment gateway partners (we do not store raw card data)
• Profile and onboarding information you choose to provide
• Communications: support tickets, emails, and chat messages you send us

2.2 Information Collected Automatically

• Device information: browser type, operating system, IP address, device identifiers
• Usage data: pages visited, features used, clicks, session duration, and error logs
• Cookies and similar tracking technologies (see Section 7)

2.3 Data from End Users of Your Chatbots

When your end users interact with chatbots deployed through Uraiyadal, we process messages and metadata on your behalf as a data processor. You, as our customer, are the data controller for that data and are responsible for ensuring you have appropriate consents and legal bases for processing your end users' data.

• To provide, maintain, and improve the {PRODUCT_NAME} platform and services
• To process your subscription payments and manage your billing
• To communicate service updates, security alerts, and support responses
• To detect, prevent, and address technical issues, fraud, or abuse
• To comply with applicable laws, regulations, and legal obligations (including Indian IT Act 2000, IT (Amendment) Act 2008, and applicable GDPR obligations)
• To analyse aggregated, anonymised usage trends to improve our product
• To send product updates and promotional communications where you have opted in (you may opt out at any time)

For users in the European Economic Area (EEA), UK, and other applicable jurisdictions, we process personal data under the following legal bases:

• Contract performance: Processing necessary to provide the services you subscribed to
• Legitimate interests: Fraud prevention, security, product analytics, and service improvement
• Legal obligation: Compliance with applicable laws and regulatory requirements
• Consent: Where required and obtained (e.g., marketing emails)

We do not sell your personal data. We may share your data with:

• Messaging channel providers (e.g., Meta/WhatsApp Business API, other communication APIs): necessary to deliver your chatbot messages. These providers have their own terms and privacy policies.
• Payment processors (e.g., Razorpay, Stripe): to process billing transactions securely
• Cloud infrastructure providers (e.g., AWS, Google Cloud): for hosting and data storage
• Analytics and monitoring tools: for uptime monitoring and aggregated usage analytics
• Legal and regulatory authorities: when required by Indian law, court orders, or other mandatory legal processes
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred subject to the same privacy protections

We retain personal data for as long as necessary to provide our services and comply with our legal obligations. Specifically:

• Account data is retained for the duration of your subscription plus a maximum of 90 days after termination, unless you request earlier deletion
• Billing records are retained for a minimum of 7 years as required under Indian accounting and tax laws
• Chatbot message logs are retained for up to 180 days by default; enterprise customers may configure custom retention policies
• Anonymised, aggregated analytics data may be retained indefinitely

We use cookies and similar technologies to:

• Keep you logged into your session
• Remember your preferences
• Understand how users interact with our platform (analytics)
• Prevent fraud and maintain security

You can control cookies through your browser settings. Disabling essential cookies may impact platform functionality.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention obligations
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object or restrict processing: Object to certain types of processing or request restrictions
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time
• Right to lodge a complaint: With your applicable supervisory authority (e.g., the Data Protection Board of India once operational, or applicable EU/UK Data Protection Authority)

To exercise any right, email us at uraiyadal.ai@gmail.com. We will respond within 30 days.

We implement industry-standard technical and organisational measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encryption at rest for sensitive data
• Role-based access controls and least-privilege principles
• Regular security reviews and vulnerability assessments
• Multi-factor authentication options for account access

However, no system is completely secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and enable two-factor authentication.

Your data may be processed in countries other than India. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) as required under GDPR
• Adequacy decisions by relevant data protection authorities
• Contractual data processing agreements with all sub-processors

We comply with applicable obligations under the Indian Personal Data Protection framework and applicable international regulations.

If you (the Customer) enable co-browsing or session recording features:

• Data collected: Screen activity, clicks, scrolls, and any information visible on the End User's screen during the active co-browsing session
• Data controller: You (the Customer) are the sole controller of all co-browsing session data
• Storage: Session recordings, if enabled by you, are stored under your account and subject to your configured retention policies
• Velzy Labs LLP access: Velzy Labs LLP employees, contractors, and affiliates do NOT have access to co-browsing data, session recordings, or any End User information visible during sessions
• Consent: You are responsible for obtaining End User consent before initiating co-browsing or recording, in compliance with applicable privacy and recording consent laws
• Deletion: You may delete session recordings from your account at any time. All recordings are deleted upon account termination

The Platform uses AI/ML for features such as automated chatbot responses, document analysis (RAG), intent detection, and AI-generated suggestions. Regarding AI data processing:

• Purpose: Your data (documents, conversation context) is processed solely to generate AI responses within your chatbot. We do NOT use your data to train AI models
• Third-party AI providers: AI features use third-party large-language-model providers. Data sent to these providers for processing is subject to their privacy policies and data processing terms
• Data retention by AI providers: We configure API calls to minimise data retention by third-party AI providers. However, these providers may retain data as described in their own policies
• Accuracy: AI-generated outputs are not guaranteed to be accurate or complete. See our Terms of Service for full AI disclaimers
• Opt-out: You may disable AI-powered features through your Platform settings

• All content, images, documents, and media uploaded to the Platform ("Tenant Content") remains under your ownership and control
• Velzy Labs LLP processes Tenant Content solely to provide Platform services (e.g., displaying images in chatbot messages, storing documents for RAG)
• You are responsible for ensuring Tenant Content complies with applicable laws, including intellectual property and privacy regulations
• Tenant Content is deleted within 90 days of account termination, unless you request earlier deletion
• Velzy Labs LLP does not access Tenant Content except as necessary to provide technical support at your request

Uraiyadal uses the following categories of sub-processors to deliver the Platform:

• Cloud infrastructure: VPS hosting providers for application hosting and data storage
• Database: Managed cloud database services for transactional data storage
• AI/ML: Third-party AI model providers for AI-powered features
• Messaging: Meta WhatsApp Business API for message delivery
• CDN & Edge: Global CDN and edge-network providers for content delivery and security
• Payments: Razorpay for payment processing in India
• Media Storage: Cloud object storage for file and media storage

Each sub-processor is bound by data protection obligations no less protective than this Privacy Policy. An up-to-date list is available upon request at uraiyadal.ai@gmail.com.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us immediately at uraiyadal.ai@gmail.com.

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy periodically. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or an in-platform notification
• For significant changes, seek your renewed consent where required by law

Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Amendment) Act, 2008, and applicable rules thereunder. Any disputes shall be subject to the jurisdiction of courts in Chennai, Tamil Nadu, India.

For any privacy-related questions, concerns, or requests, please contact our Data Protection contact: