LEGAL
Privacy Policy
How Vistaar Flow collects, uses, protects, and manages personal and business data.
1. Information We Collect
- Account information such as name, business name, email address, mobile number, billing details, user role, and login activity.
- CRM data uploaded or created by customers, including contacts, leads, opportunities, tasks, notes, emails, WhatsApp messages, campaign records, forms, files, and media.
- Integration data required to connect services such as WhatsApp Cloud API, Meta Lead Ads, Gmail, email providers, payment gateways, website widgets, and similar business tools.
- Technical information such as IP address, device/browser details, cookies, session data, logs, usage events, error reports, and security audit records.
2. How We Use Information
- To provide, operate, secure, and improve Vistaar Flow CRM and related services.
- To create and manage leads, contacts, opportunities, campaigns, tasks, automations, reports, billing, and customer support requests.
- To send service notifications, security alerts, product updates, invoices, payment confirmations, and important account messages.
- To detect abuse, prevent fraud, troubleshoot issues, maintain logs, and comply with applicable legal and regulatory requirements.
3. Legal Basis And Indian Compliance
- We process personal data in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as and when applicable.
- Where consent is required, customers are responsible for obtaining valid consent from their leads, contacts, users, and end customers before uploading or processing such data in the CRM.
- Customers must ensure that WhatsApp, email, Meta, website form, and campaign communications comply with applicable consent, anti-spam, platform, and telecom rules.
4. Data Sharing
- We do not sell customer data.
- We may share data with trusted service providers only when required to operate the CRM, such as hosting, storage, email delivery, WhatsApp/Meta APIs, payment processing, analytics, security, and customer support tools.
- We may disclose information if required by law, court order, government authority, or to protect the rights, safety, and security of Techoceanhub Private Limited, Vistaar Flow, customers, or the public.
5. Data Storage, Security, And Retention
- We use reasonable security practices, access controls, encryption where appropriate, audit logs, and operational safeguards to protect customer data.
- Customer data is retained for as long as the account is active, as needed to provide services, or as required for legal, tax, audit, dispute, and security purposes.
- Customers may request deletion or export of their data, subject to applicable law, account ownership verification, outstanding obligations, backups, and legitimate retention requirements.
6. Cookies And Tracking
- We may use cookies and similar technologies for login sessions, security, preferences, analytics, performance, and product improvement.
- Customers using the Vistaar Flow website widget on their own websites are responsible for disclosing such tracking and obtaining required visitor consent on their website.
7. Customer Responsibilities
- Customers are responsible for the accuracy, legality, consent, and permitted use of all contact, lead, campaign, and communication data uploaded into the CRM.
- Customers must not use Vistaar Flow to send unlawful, misleading, abusive, unsolicited, or non-compliant communications.
- Customers should configure user access carefully and remove access for users who no longer require it.
8. Your Rights And Requests
- Depending on applicable law, individuals may request access, correction, deletion, withdrawal of consent, or grievance redressal regarding personal data.
- Because Vistaar Flow is primarily a business CRM, many requests relating to lead/contact data may need to be handled by the customer business that collected that data.
9. Contact And Grievance Redressal
For privacy questions, data requests, or grievance redressal, contact Techoceanhub Private Limited at support@techoceanhub.com. Please include your account email, business name, and request details so we can verify and respond appropriately.