Privacy Policy

This Privacy Policy explains how Yogardens Agritech Pvt Ltd("Shopap", "we", "us") collects, uses and protects information when providing the Shopap service — a platform that handles WhatsApp business conversations and turns them into structured records for the businesses it serves in India. We have written it in plain language.

Roles: who is responsible for your data

The Customer is the Data Controller. The business using Shopap — a distributor, retailer, brokerage, clinic or other business — decides which counterparties to serve, what data to maintain, and how information processed through the service is used in their business.

Shopap is the Data Processor.We process data only on the Customer's behalf and only to provide the service described below.

Information we process

• WhatsApp message content sent to the Customer's business number, including order text and inquiries
• Voice notes sent as messages, and their transcriptions
• Phone numbers of customers, retailers, prospects, patients and Customer staff
• Order, booking and transaction records
• Lead and prospect information collected during qualification — names, contact numbers, and stated requirements such as budget, preferred location and timeline
• Appointment scheduling details — names, contact numbers and visit timing
• Customer and contact information maintained by the Customer (names, businesses, addresses, agreed pricing)
• Customer business information (business details, catalogue, product data, inventory levels, pricing, ledger and dues records where those features are used)

How messages are delivered

Messages are delivered through the Meta WhatsApp Business Platform. When you communicate over WhatsApp, Meta processes those messages in accordance with its own terms and privacy policies. Shopapreceives message content addressed to the Customer's business number in order to provide the service.

AI processing disclosure

Shopap uses third-party AI providers to convert unstructured messages (text and transcribed voice notes) into structured data — such as orders, leads and appointments. Specifically:

• AI providers we may use include: Anthropic (Claude), Google (Gemini).
• Message content is shared with these providers solely for structured extraction — identifying the intent and details contained in the message.
• Message content processed through Shopap is not used to train AI models.
• AI processing is not used for any purpose unrelated to providing the service.

Purpose and legal basis

We process personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act), on the basis of the Customer's instructions and consent obtained by the Customer from its customers, retailers or prospects in the course of their existing business relationship. We process data for these purposes only:

• Converting WhatsApp messages into structured records
• Matching products, applying pricing and validating inventory
• Qualifying inbound leads and recording stated requirements
• Booking, rescheduling and reminding about appointments
• Sending confirmations, reminders and service messages
• Preparing structured data for export to the Customer's tools
• Providing support and maintaining service reliability

Data retention

• Records are retained for as long as the Customer's account is active, so the Customer can access their own history.
• If a subscription ends, Customer data is deleted or anonymised within 90 days, except where law requires longer retention.
• Deletion requests are handled as described under Data Deletion below.

Security

• Data is encrypted in transit (TLS).
• Data is hosted in India (AWS Mumbai region).
• Access to production data is restricted to authorised personnel and protected by access controls.

Subprocessors

We use the following subprocessors to provide the service:

• Meta Platforms (WhatsApp Business Platform) — Message delivery between retailers and distributors
• Amazon Web Services (AWS) — Application hosting and data storage (Mumbai region, India)
• Cloudflare — DNS and network services
• Anthropic (Claude) — AI processing of message content solely for structured order extraction
• Google (Gemini) — AI processing of message content solely for structured order extraction

Cookies and analytics

This website does not use advertising cookies or third-party advertising trackers. If we introduce basic analytics to understand website usage, this policy will be updated to say so plainly.

Your rights

Individuals whose data is processed through Shopap — such as your customers, prospects or staff — may request access to, correction of, or deletion of their personal data. Because the Customer is the Data Controller, requests may be made either to the business you dealt with or directly to us at hello@shopap.tech — we will coordinate with the relevant Customer.

Data Deletion

You can request deletion of your personal data at any time:

• Email hello@shopap.tech with the subject line "Data Deletion Request", including the WhatsApp phone number the request relates to.
• We will acknowledge your request within 7 days.
• Verified deletion requests are completed within 30 days, except where we are legally required to retain specific records (for example, tax or accounting records).

Changes to this policy

If we make material changes to this policy, we will update this page and revise the "Last updated" date. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Governing law and contact

This policy is governed by the laws of India. For any questions about this policy or our data practices, contact:

Yogardens Agritech Pvt Ltd
Yogardens, 1117, 1st Floor, AECS Layout – A Block, HAL Layout, Singasandra, Bengaluru, Karnataka 560068, India
hello@shopap.tech
+91 93536 64752