01Who we are
TUVI Digital (“TUVI”, “we”, “us”) is a software and automation studio based in India. We build workflow automation, AI integrations, websites and applications, and we run advertising and messaging for ourselves and for our clients.
This policy explains what personal data we collect, why, who we share it with and the choices you have. It applies to tuvidigital.in, to our adverts and lead forms on Meta platforms (Facebook and Instagram), to conversations with us over WhatsApp and phone, and to the TUVI Digital app that connects to Meta’s APIs.
02When we act for our clients
Much of our work is done on behalf of client businesses: for example, running a client’s WhatsApp Business number, or routing leads from a client’s adverts into their CRM. In those cases the client decides why and how the data is used and their privacy policy applies. We handle that data only on the client’s instructions and under our agreement with them.
If you contacted one of our clients and have a question about your data, please contact that business first. If you write to us, we will pass your request to them.
03Information we collect
Information you give us
- Website enquiry form: your name, work email, company, a description of what you need, and the budget range and timeline you select.
- WhatsApp and phone: your phone number, your WhatsApp profile name, the messages, files and voice notes you send us, and call details such as time and duration.
- Working with us: billing and contact details, and whatever access and information you provide for the project.
Information we receive through Meta platforms
- Lead adverts: when you submit a lead form on Facebook or Instagram, we receive the fields you filled in (typically name, phone number, email, city and your answers to our questions), together with identifiers for the advert, campaign and form.
- WhatsApp Business Platform: your phone number, profile name, message content, media, timestamps, and delivery and read status for messages exchanged with a WhatsApp Business number we operate.
- Marketing API: for advertising accounts and Pages that we are authorised to manage, we access campaign settings, advert performance figures, Page and account identifiers, and leads generated by those adverts.
Information collected automatically
- When you submit the enquiry form we record your IP address and browser type, to prevent abuse.
- Our hosting provider keeps standard server logs (IP address, pages requested, time) for security and reliability.
We do not ask for sensitive personal data such as health, financial account or government identity details through these channels. Please do not send it to us unless we have specifically requested it for a project.
04How we use it
- To reply to your enquiry, prepare a proposal and follow up on it.
- To deliver, support and bill for the services you have asked for.
- To send WhatsApp messages you have agreed to receive: replies, service updates and, only with your opt-in, marketing messages.
- To run our adverts, and to measure which adverts and forms lead to real enquiries.
- To keep our systems secure, and to detect spam, fraud and misuse.
- To meet legal, tax and accounting obligations.
We do not sell personal data. We do not rent or trade it, and we do not pass it to data brokers.
Data we obtain through Meta’s APIs is used only to provide the service it was obtained for. We do not use it to build profiles for unrelated purposes, to make decisions about eligibility for credit, employment, housing or insurance, or for surveillance. We follow the Meta Platform Terms and the WhatsApp Business Messaging Policy.
05Legal basis
We process personal data on the basis of your consent (for example, when you submit a form or opt in to WhatsApp messages), to perform a contract with you or take steps you asked for before one, and for other uses permitted by law such as meeting legal obligations. This includes the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules, as applicable.
You can withdraw consent at any time. Withdrawing consent does not affect processing that happened before you withdrew it.
06WhatsApp messaging
- Opt-in. We message you on WhatsApp only if you messaged us first, or gave your number and agreed to be contacted on WhatsApp (for example on a lead form or by ticking a box).
- What we send. Replies to your questions, updates about your enquiry or project, and, if you opted in to them, offers and news.
- Opt-out. Reply STOP to any message, or tell us in any way, and we will stop sending you marketing messages. You can also block the number in WhatsApp.
- Automation. Some replies are written by an automated assistant. You can ask to speak to a person at any time.
- Meta’s role. Messages are delivered through the WhatsApp Business Platform, operated by Meta. Meta processes message data under its own terms and privacy policy.
07Advertising on Meta
We advertise on Facebook and Instagram using lead forms and adverts that open a WhatsApp chat. Meta decides who sees an advert based on its own data about its users; we do not receive that data. We receive only what you choose to submit, plus aggregated performance figures.
We may use Meta’s audience tools to avoid showing adverts to people who have already contacted us, or to reach similar audiences. Where we do, contact details are hashed (converted to an irreversible code) before they are matched by Meta.
You can control the adverts you see in your Facebook and Instagram ad preferences.
08Use of AI
We use AI models from third-party providers to help draft replies, summarise conversations and sort enquiries. Where we do, the relevant text is sent to that provider for processing on our behalf. Where a provider offers the option, we configure it so that your data is not used to train its models.
AI-drafted responses that matter, such as quotes or commitments, are reviewed by a person.
10How long we keep it
- Enquiries and lead-form submissions: up to 24 months after our last contact with you.
- WhatsApp conversations: up to 24 months after the last message.
- Client project and billing records: for the length of the engagement and as long afterwards as tax and accounting law requires.
- Backups: deleted data may remain in backups for up to 30 further days before it is overwritten.
We delete or anonymise data sooner if you ask us to and we have no legal reason to keep it. See Data Deletion.
11Security
Data is encrypted in transit. Access to our systems is limited to the people who need it, protected by individual accounts, and credentials are stored in a secrets manager. Our enquiry database is not publicly readable.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the relevant authority as the law requires.
12Your rights and choices
- Ask what personal data we hold about you and get a copy of it.
- Ask us to correct or update it.
- Ask us to delete it. See Data Deletion for how.
- Withdraw consent, including opting out of WhatsApp or marketing messages.
- Nominate another person to exercise your rights if you are unable to.
- Raise a grievance with us and, if you are not satisfied, with the Data Protection Board of India.
To use any of these rights, email contact@tuvidigital.in, call or message +91 98990 32397, write to us on WhatsApp, or use the contact form. We may need to confirm your identity first. We respond within 30 days.
13Children
Our services are for businesses. They are not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has given us personal data, tell us and we will delete it.
15Changes to this policy
We may update this policy as our services or the law change. The date at the top shows when it was last revised. If a change materially affects how we use your data, we will tell you through the channel we normally use to reach you.
16Contact and grievance officer
Questions, requests and complaints about personal data go to the Grievance Officer, TUVI Digital. You can email contact@tuvidigital.in, call or message +91 98990 32397, write to us on WhatsApp, or use the contact form.
We acknowledge grievances within 48 hours and resolve them within 30 days.