Vyapic Private Limited, operating under the brand name Vyapic, respects the privacy of its customers, users, website visitors and individuals whose personal data is processed through the Vyapic platform.

This Privacy Policy explains how Vyapic collects, receives, uses, stores, shares, protects, retains and deletes personal data when a person or organization:

• visits the Vyapic website;
• creates or uses an Vyapic account;
• uses our AI-powered ERP, CRM, automation, communication, analytics or AI-agent services;
• connects a WhatsApp Business Account, Google account or another supported integration;
• communicates with us through email, telephone, WhatsApp, forms or support channels; or
• interacts with a business that uses Vyapic to manage its operations or communications.

By using the services, you acknowledge that personal data may be processed as described in this Privacy Policy. Where consent is legally required, we will seek consent through an appropriate notice or affirmative action.

In this Privacy Policy, “Vyapic,” “we,” “us” and “our” refer to Vyapic Private Limited.

This Privacy Policy applies to personal data processed through:

• the Vyapic public website;
• Vyapic web and mobile applications;
• customer, employee, vendor and partner portals;
• ERP, CRM, HRMS and business-operation modules;
• WhatsApp Business Platform integrations;
• Google integrations;
• AI chatbots, AI voice agents and generative-AI features;
• APIs, webhooks and automation tools;
• technical support and professional services; and
• other services that link to this Privacy Policy.

A business customer using Vyapic may publish its own privacy notice. When you interact with such a business, you should also review that business’s notice because the business may independently determine how and why it uses your personal data.

Depending on the customer’s subscription and configuration, Vyapic may provide modules and capabilities including:

• Customer Relationship Management;
• lead, enquiry and opportunity management;
• sales, quotation and target management;
• order and dispatch management;
• procurement, purchase and vendor management;
• inventory, stock and warehouse management;
• manufacturing, production, machine and shop-floor management;
• product, variant and bill-of-material management;
• finance, invoicing, accounting, costing and profitability reporting;
• Human Resource Management System, attendance, leave and payroll;
• project, task and workflow management;
• helpdesk, complaint and grievance management;
• appointment and calendar scheduling;
• document and knowledge management;
• WhatsApp, email and supported communication tools;
• dashboards, analytics, forecasts and reports;
• AI-generated reply suggestions and summaries;
• AI chatbots and AI voice agents;
• document, image, audio and message analysis;
• task, lead and intent detection;
• knowledge-base responses and workflow recommendations; and
• other business-operation modules introduced from time to time.

Only the information needed for the modules activated and used by a customer is intended to be processed.

We may process personal data to:

• create, authenticate and administer accounts;
• provide subscribed ERP, CRM, HRMS, communication, automation and AI services;
• operate customer-configured workflows and integrations;
• manage customers, leads, employees, vendors, products, orders and business records;
• process operational, accounting and reporting information;
• send and receive authorized communications;
• manage WhatsApp templates and webhook events;
• display messages in shared inboxes;
• operate AI chatbots, voice agents and assisted-response features;
• generate summaries, classifications, recommendations and reports;
• schedule appointments and follow-ups;
• provide customer service, training and technical support;
• process subscriptions, invoices and payment status;
• maintain audit trails and business records;
• secure accounts and detect fraud, spam, misuse and unauthorized access;
• monitor availability, reliability and performance;
• troubleshoot errors and improve usability;
• communicate account, billing, product and security updates;
• comply with legal and contractual obligations;
• respond to lawful requests; and
• establish, exercise or defend legal rights.

Where practical, we may use aggregated or de-identified information for analytics, capacity planning and service improvement.

We process personal data: with valid consent; for the specified purpose for which information was voluntarily provided; for legitimate uses or other grounds permitted under applicable law; to provide a requested or authorized service; where processing is required or authorized by law; to protect systems, users and legal rights; or on the documented instructions of a business customer responsible for establishing the appropriate lawful basis.

Where consent is relied upon, it may be withdrawn through an available account control or by contacting us. Withdrawal does not affect processing lawfully completed before withdrawal.

Business customers using Vyapic for WhatsApp communications are responsible for: obtaining appropriate recipient opt-in or another lawful basis; providing required notices; maintaining evidence of consent where applicable; using approved templates where required; observing applicable messaging and customer-service-window requirements; respecting opt-out requests; avoiding misleading, unlawful or unsolicited communications; and complying with Meta, WhatsApp and applicable legal requirements.

A recipient may request that messages stop by using the opt-out method included in the communication, contacting the sending business or contacting Vyapic at admin@itechsarathi.in.

Meta, Google, AWS or other customer-authorized services may process information in India or other countries depending on the selected service, cloud region, account configuration and provider infrastructure. Where personal data is processed outside India, Vyapic takes reasonable steps intended to use reputable providers, apply contractual protections, restrict access to authorized purposes, use encryption and access controls, and comply with applicable cross-border restrictions.

We retain personal data only for as long as reasonably necessary for the relevant purpose, customer instruction, contract, security requirement or legal obligation:

Vyapic maintains administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure or destruction:

• encryption in transit;
• encryption or equivalent protection at rest where appropriate;
• role-based access controls;
• multi-factor authentication for privileged access;
• secure credential and token management;
• tenant and environment separation;
• logging and monitoring;
• network and infrastructure controls;
• backup and recovery procedures;
• vulnerability and patch management;
• employee confidentiality and access restrictions;
• vendor-security requirements; and
• incident-response procedures.

If Vyapic becomes aware of a suspected personal data breach, we will investigate, contain and remediate the incident, preserve relevant evidence, assess potential harm, notify affected business customers and assist with legally required notifications without undue delay.

Subject to applicable law, identity verification and any valid limitation, an individual may request:

• information about relevant personal data and processing activities;
• correction of inaccurate or misleading data;
• completion of incomplete data;
• updating of outdated data;
• erasure of eligible data;
• withdrawal of consent;
• grievance redressal; and
• other rights available under applicable law.

A data deletion request may be emailed to:

The requester should provide sufficient information to identify the relevant account, business and data and to verify identity or authority.

An authorized administrator may request disconnection through available account controls, the applicable third-party service or Vyapic support. Users can revoke Vyapic’s access to their Google account at any time via Google Security Settings or through their organization settings.

Vyapic is a business software platform and is not intended for independent use by children under 18 years of age. If you believe a child’s personal data has been processed improperly, contact admin@itechsarathi.in.

Some customers may use Vyapic in sectors involving health, financial, employment, identity or other high-risk information. Customers are responsible for determining whether such data should be collected, limiting collection to what is necessary, obtaining required authorization, configuring suitable access controls and complying with sector-specific requirements. AI-generated content must not be treated as a substitute for qualified medical, legal, financial, accounting or regulatory advice.

Our website and applications may use cookies and similar technologies for authentication, session management, security, user preferences, performance monitoring, error detection and optional analytics.

Vyapic may send business users information about products, features, events, service updates, training or related offerings in accordance with applicable preferences and legal requirements. Recipients may opt out at any time by contacting admin@itechsarathi.in.

Our services may contain links to or integrations with third-party websites and products. Vyapic is not responsible for the independent privacy, security, availability, content or terms of third parties. Users should review the relevant provider’s policies before enabling an integration or submitting information.

We may update this Privacy Policy to reflect changes in our services, AI functionality, processing practices, integrations, security controls, business operations or applicable law. The updated version will be posted on this page with a revised “Last Updated” date.