Privacy Policy

1. Who we are

Shubh Sales AI is a sales platform made and operated by Synilogic IT Solution Private Limited, Kota, Rajasthan, India (“Synilogic”, “we”, “us”). This policy covers this website, the Shubh Sales AI web panel and the Shubh Sales AI Android app (together, the “Service”).

Questions about this policy or about your data go to synilogicitsolution@gmail.com.

2. Two kinds of data, and who is responsible for each

Account and website data. When you visit this site, ask for a demo, or create and use an account, we decide how that information is used and we are responsible for it.

Customer data. A company that uses the Service (our “customer”) puts its own business data into it: call recordings, call logs, transcripts, leads, contacts, messages, proposals, invoices and similar records about the people it sells to. The customer decides what is collected and why. We process that data only on the customer’s behalf and on its instructions, to provide the Service. If you are somebody a customer of ours has called or messaged, that company is the right place to send a request about your data; we will help it respond.

3. What we collect

• Enquiries. Name, company, email, phone, team size and your message when you book a demo or write to us, with the page you came from and any campaign tags in its address.
• Account details. Company name, and for each user their name, employee ID, email, mobile number, role and a hashed password.
• Billing details. Plan, invoices, billing address and tax details such as GSTIN. Card and bank details are entered with our payment provider and are not stored by us.
• Customer data. Whatever a customer and its team put into the Service or sync from their handsets: call recordings and call logs, transcripts and AI analysis of calls, leads and contacts, messages sent and received through connected channels, documents, attendance and activity records.
• Device and usage data. IP address, browser and device type, app version, sign-in times, and a record of actions taken in the product (the audit trail).

4. The Android app

The app is used by a customer’s sales team on their work calls. With the permissions the user grants, it reads the phone’s call log and the recording files the phone’s own dialer has written, and uploads them to that customer’s account. It may also read contacts to name callers, and use notifications to deliver reminders. It collects this for the customer’s account only, and only while the user is signed in. Permissions can be withdrawn at any time in Android settings; some features stop working without them.

5. How we use data

• To provide, secure and support the Service, including transcribing and analysing calls when a customer has that feature switched on.
• To answer enquiries, send service messages (confirmations, security notices, invoices, renewal reminders) and bill for the Service.
• To detect abuse, investigate faults and keep an audit trail.
• To meet legal, tax and accounting obligations.

We do not sell personal data. We do not use customer data to advertise to anybody, and we do not use customer call recordings or transcripts to train AI models of our own.

6. AI analysis

When AI call analysis is enabled, recordings and transcripts are sent to AI providers we engage for transcription and analysis, and the results are stored in the customer’s account. AI output can be wrong or incomplete; it is an aid to a person’s judgement and not a decision about anybody.

7. Data from Facebook, Instagram and WhatsApp

A customer’s administrator can connect the customer’s Facebook Pages, ad accounts, Instagram business account or WhatsApp Business account. They do this through Facebook Login for Business, choosing which assets and permissions to grant. We receive only what is granted, and use it only to provide these features to that customer:

• Your Facebook app-scoped user ID and access tokens, stored encrypted and used only to call Meta’s APIs for the customer you connected.
• Page and ad account details: names and IDs of the Pages and ad accounts you select, and the linked Instagram business account, so you can choose which to connect.
• Lead Ads submissions: the answers people give on the customer’s Facebook and Instagram lead forms, with the campaign, ad set and ad that produced them. These are filed in the customer’s account as leads. The raw payload received from Meta is deleted within 30 days.
• Ad performance: spend, impressions and clicks for the selected ad accounts, used to show the customer what each lead cost.
• Page posts the customer chooses to publish through the Service, and confirmation that they were published.
• WhatsApp Business: the account, phone number and message template details, and the messages the customer sends and receives with its own contacts.

We do not sell data received from Meta, and we do not share it with data brokers. We do not use it for advertising, profiling or eligibility decisions. We do not use it to train AI models, or for any purpose that Meta’s Platform Terms and Developer Policies do not allow.

Access tokens are deleted when the customer disconnects, when you remove the app in your Facebook settings, or when you ask Meta to have us delete your data. See how to delete your data, which also lets you check a deletion request by its confirmation code.

8. Who we share data with

We share data only as needed to run the Service, with:

• Infrastructure providers that host the application, database and files and protect the site (including MongoDB Atlas and Cloudflare).
• AI providers for transcription and analysis (including OpenAI and Anthropic), when that feature is on.
• Messaging and notification providers a customer connects or we use to deliver messages: for example WhatsApp (Meta), email and SMS gateways, and Google Firebase for push notifications.
• Payment providers (such as Razorpay) to collect payments.
• A partner agency, where a customer bought the Service through one: the agency can see that customer’s plan and billing status, and what the customer allows beyond that.
• Authorities, where the law requires it, or to protect the rights and safety of our users and of us.

These providers may process data on servers outside your state or outside India. We require them to protect it and to use it only for the service they provide to us.

9. Cookies and similar storage

We use only what is needed to keep you signed in, remember your preferences and protect the Service. We do not use advertising cookies. The site loads its typeface from Google Fonts, and security checks from Cloudflare, which may receive your IP address when a page loads.

10. How long we keep it

• Customer data is kept for as long as the customer’s account is active. Each customer sets how long recordings, transcripts and analysis are kept, and they are deleted automatically after that window. After an account is closed, its data is deleted within 30 days, apart from backups that expire on their own schedule.
• Audit records are kept longer than the records they describe, so that who did what remains answerable.
• Invoices and tax records are kept for as long as the law requires.
• Enquiries are kept for up to 24 months unless you ask us to delete them sooner.

11. How we protect it

Data travels over encrypted connections. Each company’s records are kept separate from every other company’s. Access inside a company follows the roles its administrator assigns, credentials for connected services are stored encrypted, and downloads and transcript views are logged. No system is perfectly secure; if a breach affects your data we will tell the affected customer without undue delay, and the authorities where the law requires.

12. Your rights

Subject to the law that applies to you, including India’s Digital Personal Data Protection Act, 2023, you may ask to see the personal data held about you, to have it corrected or erased, to withdraw consent, and to nominate somebody to exercise these rights for you. If your data is in a customer’s account, ask that company; the Service gives it tools to export or erase everything held about one person, and to record an opt-out that stops further messages. To remove data we received from Facebook, Instagram or WhatsApp, follow the steps on our data deletion page. For other data we are responsible for, write to synilogicitsolution@gmail.com. We answer within 30 days.

13. Children

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect a child’s data for our own purposes.

14. Complaints and grievance officer

Write to the Grievance Officer, Synilogic IT Solution Private Limited, Plot No. C-7, Santosh Nagar 1st, Thekhda Road, Borkheda, Kota, Rajasthan 324001, India, at synilogicitsolution@gmail.com. We acknowledge a complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

15. Changes to this policy

We will post any change here and update the date above. If a change materially affects how customer data is handled, we will tell account administrators before it takes effect.