1. Who we are
This policy is published by Srinera Private Limited (CIN U62011TS2026PTC224108), whose registered office is at Plot No. 8, Vinobha Nagar Phase II, Shaikpet, Hyderabad 500008, Telangana, India (“Srinera”, “we”, “us”). We build software for businesses: a shared platform that businesses use to take orders, run their shop and keep their customers informed (“the Platform”), and custom software for clients.
For any question about this policy or your personal data, email [email protected].
2. Whom this policy covers
This policy covers:
- visitors to srinera.com;
- people at businesses that use the Platform or work with us;
- customers of those businesses.
When a business uses the Platform, that business decides how its customers’ data is used, and we process that data on its instructions. The business’s own privacy notice also applies.
3. What we collect
Website visitors
srinera.com has no accounts and no analytics. It has one enquiry form. If you use it, we receive the name, email address and message you enter, and the phone number and organisation if you add them, and we use them only to reply. The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person and may set a cookie or use similar storage in your browser for that check. Cloudflare hosts the site and processes technical request data, such as IP address, browser and the page requested, to deliver and protect it. If you email us, we receive your email address and your message.
People at businesses using the Platform
- Name, business details, phone number, email address, role and permissions.
- Sign-in and security data, such as authenticator settings, trusted devices and sign-in history.
- Credentials the business provides to connect its WhatsApp and payment accounts.
Customers of those businesses
- Name, phone number, email address and delivery addresses.
- Orders and their details, such as items, sizes or measurements, dates and notes.
- Payment records: amount, status and the payment gateway’s reference. Never card or bank details.
- Photographs of orders or returns.
- WhatsApp consent: when it was given, how, and who recorded it.
- Messages sent, their delivery status, and opt-outs.
- One-time sign-in codes, stored only in hashed form.
- Records of actions taken by the business’s staff.
4. How we use it
We use personal data to:
- run the Platform for the businesses that use it;
- send order updates and sign-in codes on a business’s behalf;
- take payments through the business’s own payment gateway account;
- keep accounts secure and prevent abuse;
- give support, answer emails, and meet our legal obligations.
We do not sell personal data. We do not use a business’s customer data for our own marketing or for advertising.
5. WhatsApp Business Platform
Businesses can connect their own WhatsApp Business Account to the Platform. The business keeps ownership of its account, phone number and message templates. With the business’s permission, our app uses Meta’s WhatsApp Business Platform to send that business’s messages and to read the account details needed to do so, such as its phone number and message templates. We store the access credentials encrypted.
- We send only message templates that Meta has approved for the business, for order updates such as a quote or order being ready, a balance being due, or an order being dispatched.
- We send updates only to customers who have agreed to receive them, and we record that agreement.
- Replying STOP ends these updates, and we record the opt-out.
- From Meta we receive message delivery status and opt-out replies only.
- To deliver a message we share the recipient’s phone number, the template and its details (such as a name, order reference or link) with Meta, which handles them under its WhatsApp Business terms and privacy policy.
- We use WhatsApp data only to deliver these messages.
6. Service providers
We use these service providers to run our services:
- Meta Platforms: WhatsApp Business messaging.
- Razorpay: payments, on the business’s own Razorpay account.
- Cloudflare: website hosting, DNS, security and file storage.
- Amazon Web Services, Mumbai region: application hosting and database.
Some of these providers may process data outside India. We also disclose personal data when the law requires it.
7. How long we keep data
We keep personal data while a business uses the Platform, and only for as long as it is needed for the purposes in this policy or as the law requires, for example records of orders and payments. When it is no longer needed, we delete or anonymise it.
8. Your rights and deletion requests
Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or delete your personal data, withdraw your consent, or raise a grievance.
How to ask for your data to be deleted
- Email [email protected] with the subject “Data deletion request”.
- Include your name, the phone number or email address you used and, if you are a customer of a business on the Platform, that business’s name.
- We verify your identity before acting on the request.
For a business’s customer data, we act together with the business concerned. Where the law requires us to keep certain records, we keep them and delete or anonymise the rest. We respond within 30 days.
To stop WhatsApp messages at any time, reply STOP.
9. Security
- Connections are encrypted (HTTPS).
- The database keeps each business’s data separate from every other business.
- Credentials for connected accounts are stored encrypted.
- Staff sign in with a password and an authenticator app.
- One-time sign-in codes are stored only in hashed form.
- Card details never reach us: payment happens on the payment gateway’s own page.
- Access is limited and recorded in an audit log.
No system is completely secure. If a security incident affects personal data, we will notify it as the law requires.
10. Children
Our services are for businesses. We do not knowingly collect personal data directly from children.
11. Changes to this policy
We will post any update to this policy on this page and change the effective date at the top.
12. Contact and grievance officer
Grievance Officer, Srinera Private Limited
CIN U62011TS2026PTC224108
Registered office: Plot No. 8, Vinobha Nagar Phase II, Shaikpet, Hyderabad 500008, Telangana, India
Email: [email protected]