Privacy Policy

Friendly AI Solution collects only the information strictly necessary to provide seamless Marg ERP integration, cloud synchronization, and automated communication services:

• Merchant Account Details: Organization legal trade name, GSTIN, registered address, authorized contact person, official email address, and billing phone number.
• Marg ERP Synchronization Data: Customer ledger names, phone numbers, invoice numbers, billing totals, GST breakup, due dates, outstanding balances, and quotation details extracted securely via local bridge queries.
• WhatsApp Communication Logs: Message dispatch timestamps, delivery receipts (sent, delivered, read), template identifiers, and customer chat replies routed through webhooks.
• Technical & Session Telemetry: User IP addresses, login timestamps, browser user-agent, operating system details, and system error diagnostic traces.

Your data is processed strictly for authentic business operations and service fulfillment, specifically:

• Dispatching automated GST invoice PDFs and payment reminders with dynamic UPI QR links directly to your retail and wholesale buyers on WhatsApp.
• Maintaining your unified Sales CRM, lead pipeline, follow-up planners, and support ticket desk.
• Monitoring synchronization health between your local Marg ERP 9+ accounting database and cloud dashboard.
• Providing prioritized customer support, bug fixes, and security audit verification.

We do NOT sell, lease, monetize, or trade your company data, client phone lists, or financial records to any third-party advertisers, data aggregators, or marketing firms under any circumstances.

Our platform integrates with Meta Platforms Inc. via official Graph API endpoints under verified Meta Tech Provider status:

• Transport Security: All WhatsApp message payloads travel over encrypted TLS 1.3 tunnels directly to Meta's verified Cloud API servers located in high-security data centers.
• Customer Consent & Opt-In: Merchants must obtain explicit customer consent before sending automated notifications. Recipients can opt out at any time by texting "STOP", which immediately suspends automated outbound flows.
• Strict Isolation: Chat transcripts and customer phone numbers are isolated within your dedicated tenant workspace and are never combined with other merchants' datasets.

We implement defense-in-depth security measures to protect your proprietary business records against unauthorized access, loss, or disclosure:

• Encryption at Rest & Transit: Critical credentials, database connections, and API tokens are encrypted using industry-standard 256-bit AES algorithms. All web traffic requires modern HTTPS with automated SSL certificate renewal.
• Role-Based Access Control (RBAC): Within your CRM workspace, fine-grained permission controls prevent unauthorized staff members from accessing financial ledgers, exporting customer directories, or reconfiguring WhatsApp settings.
• SQL Injection & CSRF Defense: All database queries are executed via PDO prepared statements with strict parameter binding. State-changing requests require unique cryptographic anti-CSRF tokens.

To deliver high-speed cloud operations, Friendly AI Solution collaborates with trusted, enterprise-grade infrastructure providers:

• Cloud VPC Hosting: Tier-4 data centers with automated NVMe SSD mirroring, daily offsite snapshots, DDoS protection, and 99.9% guaranteed network uptime.
• Payment Gateways: RBI-licensed payment aggregators (e.g., Razorpay, Cashfree, PayU) for PCI-DSS compliant subscription billing. We do not store credit/debit card CVV numbers or banking PINs on our servers.
• Meta WhatsApp Cloud API: Official Meta Platforms endpoints for enterprise messaging infrastructure.

Our web applications use strictly essential HTTP cookies and secure session tokens necessary for user authentication, CSRF validation, and interface preference retention (such as theme and active table filters).

We do not deploy intrusive third-party behavioral tracking cookies, cross-site profiling beacons, or targeted advertising analytics on our CRM workspaces.

You maintain comprehensive control over your personal and organization data in full alignment with the Digital Personal Data Protection (DPDP) Act, 2023:

• Right to Access & Portability: You may inspect and export all leads, customer contacts, message histories, and payment logs in CSV/Excel format at any time.
• Right to Rectification: Contact information, phone numbers, and profile details can be updated directly from the CRM settings panel.
• Right to Erasure ("Right to be Forgotten"): Upon subscription termination or upon verified written request, all client-specific database tables and backup archives will be permanently sanitized and purged within 30 days.

Friendly AI Solution is engineered to adhere strictly to the guidelines set forth under India's Digital Personal Data Protection Act, 2023 (DPDP Act) as well as international best practices for data processing (GDPR principles for data minimization and purpose limitation).

We process personal data solely on lawful grounds, implement reasonable security safeguards, and uphold strict protocols for detecting and reporting any unauthorized data access within statutory reporting timeframes.

In accordance with the Information Technology Act, 2000 and the DPDP Act 2023, if you have any questions, concerns, or grievances regarding our privacy practices or data processing, you may directly contact our designated Data Protection & Compliance Officer: