This Privacy Policy explains how Plutozab ("Plutozab," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website, engage us for consulting services, or use Plutozab Hub — including via our web dashboard, WhatsApp, or Telegram integrations (together, the "Services"). By using the Services, you agree to the practices described in this Policy.
1. Who We Are
Plutozab is based in Pune, Maharashtra, India. For the purposes of applicable data protection laws, we act as the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for the personal data described in this Policy.
2. Information We Collect
We collect the following categories of information:
- Account & Contact Data — name, email address, phone number, company name, and billing details you provide when signing up, contacting us, or subscribing to Plutozab Hub.
- Connected Business Data — sales, order, product, customer, and accounting data from platforms you connect, such as Zoho Books, WooCommerce, Tally, and Google Sheets, which you authorize us to access in order to generate insights, dashboards, and chatbot responses.
- Messaging Data — messages, phone numbers, and metadata exchanged through our WhatsApp and Telegram chatbot integrations (see Section 3 below).
- Usage Data — log data, device and browser information, IP address, and interactions with our website and dashboard, collected automatically.
- Communications — records of correspondence when you contact us for support or sales inquiries.
3. WhatsApp & Telegram Data
- When you message our WhatsApp or Telegram chatbot, we receive your phone number or Telegram user ID, the content of your messages, and associated metadata (such as timestamps) in order to respond to your queries and generate reports or insights.
- Messages sent via WhatsApp are transmitted using Meta's WhatsApp Business Platform. Meta processes certain data as part of operating that platform in accordance with its own Business Data Processing Terms and Privacy Policy, which apply in addition to this Policy.
- We use message content to generate AI-powered responses, which may involve processing by third-party AI model providers under contractual confidentiality and data protection terms (see Section 8).
- You can stop receiving messages from our chatbot at any time by replying "STOP" (WhatsApp) or blocking/muting the bot (Telegram), or by contacting us at hello@plutozab.com.
- We do not use your WhatsApp or Telegram messaging data for advertising purposes, and we do not sell this data to third parties.
4. Google Sheets & Google API Services Data
- When you connect a Google Sheets spreadsheet, you authorize us, via Google's OAuth consent screen, to access the spreadsheet data you select using Google's own file picker — for example, sales, order, or inventory data you maintain in Sheets — so we can generate insights, dashboards, and chatbot responses, in the same way we do for other Connected Business Data sources such as Zoho Books, WooCommerce, and Tally.
- We request a single Google API scope:
drive.file. This scope grants us access only to the specific spreadsheet(s) you explicitly select through Google's file picker (or that our app creates on your behalf) — it does not give us visibility into, or access to, any other file in your Google Drive, including the names or existence of files you have not selected. We do not request write access to your Google account, and we only read the spreadsheet data you have chosen to connect. - Plutozab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not use data obtained through Google APIs for advertising, and we do not sell it to third parties. We do not use it to develop, improve, or train generalized, non-personalized AI or machine learning models — including any large language model operated by us or by a third-party AI provider we use. When this data is sent to a third-party AI model provider (see Section 8), it is used only transiently, to generate the specific response, dashboard, or report you requested at that time; it is not retained by us or by those providers for model training, and we select providers that do not use API-submitted data to train their models by default. Access to this data by Plutozab personnel is limited to what is necessary to provide the Services, and to narrow exceptions permitted under the Limited Use requirements (for example, security purposes, legal compliance, or with your consent).
- You can revoke Plutozab's access to your Google account at any time via Google Account permissions or by disconnecting the integration in Plutozab Hub, and you may contact us at hello@plutozab.com to request deletion of previously synced Google Sheets data.
5. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Services, including generating AI chatbot responses, dashboards, and reports;
- Process subscriptions, billing, and payments;
- Communicate with you about your account, support requests, and service updates;
- Improve and develop our Services, including troubleshooting and analyzing usage patterns;
- Send marketing communications where you have consented, with an option to opt out at any time;
- Detect, prevent, and address fraud, security incidents, and technical issues; and
- Comply with legal obligations.
6. Legal Bases for Processing
Where applicable data protection law requires a legal basis, we rely on: performance of a contract with you (delivering the Services you signed up for); your consent (for example, for WhatsApp/Telegram messaging and marketing communications); our legitimate interests (such as improving and securing the Services); and compliance with legal obligations. Where you are located in the European Economic Area or UK, we process personal data in a manner consistent with the GDPR; where you are located in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023.
7. How We Share Information
We do not sell your personal information. We share information only with:
- Service providers — cloud hosting, database, and infrastructure providers; AI/ML model providers used to generate chatbot responses; and payment processors, each bound by confidentiality and data protection obligations.
- Platform partners — Meta (WhatsApp Business Platform) and Telegram, to the extent necessary to deliver messages through those channels.
- Legal & safety — where required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Plutozab, our users, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to equivalent protections for your data.
8. Third-Party AI Model Providers & Data Retention
To generate chatbot responses, reports, and insights, we send your queries — along with relevant context drawn from your connected business data (for example, sales figures or product names needed to answer your question) — to one or more third-party LLM API providers. We access some models directly and route others through an AI model routing service. We use API-level access to these services, not consumer-facing products. The specific providers and models in use may change over time as we evaluate performance, cost, and data-handling practices; we will update this section and notify you of material changes.
Data retention by AI providers. Each provider operates under its own data-handling policies. For models we access through our routing service, we require a zero-data-retention configuration — these providers do not log, store, or train on your request or response data beyond what is needed to serve that single request. For models we access directly, major providers typically do not use submitted data to train their models by default; however, they may temporarily store request and response data for safety, abuse-prevention, or operational purposes for a limited period as described in their own policies.
Some of the providers we use may be based, or operate infrastructure, outside India or the EEA, and would be subject to that jurisdiction's laws, which may differ from Indian or EU data-protection standards. We select providers that offer appropriate contractual commitments (such as data processing agreements) where available (see also Section 11 — International Data Transfers). If you have concerns about a specific provider, please contact us at hello@plutozab.com.
9. Data Retention
We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Messaging data from WhatsApp and Telegram interactions is retained only as long as needed to provide chatbot functionality and support, after which it is deleted or anonymized. Data synced from Google Sheets and other connected business platforms is retained only for as long as the integration remains active, or as needed to provide the Services, and is deleted upon disconnection or account closure, subject to any legal retention obligations. You may request earlier deletion as described in Section 12.
10. Data Security
We implement technical and organizational measures — including encryption in transit, access controls, and regular security reviews — designed to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International Data Transfers
Our infrastructure and service providers may process data in countries other than your own, including India and other jurisdictions where our cloud and AI service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for such transfers.
12. Your Rights & Choices
Depending on your location, you may have the right to:
- Access, correct, or update your personal data;
- Request deletion of your personal data;
- Withdraw consent (for example, to WhatsApp/Telegram messaging or marketing) at any time, without affecting the lawfulness of prior processing;
- Request a copy of your data in a portable format; and
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at hello@plutozab.com. We will respond within the timeframe required by applicable law.
13. Cookies & Analytics
Our website uses Google Fonts, which may involve a connection to Google's servers to load font files. We may use essential cookies necessary for the website and Plutozab Hub dashboard to function, and, where enabled, analytics tools to understand aggregate usage of our website. We do not currently use third-party advertising cookies.
14. Children's Privacy
The Services are intended for business use by individuals aged 18 and older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated Policy on this page with a revised "Last updated" date, and where changes are material, we will provide additional notice (such as by email).
16. Contact Us
If you have questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at:
Plutozab
Email / Grievance Contact: hello@plutozab.com
Location: Pune, Maharashtra, India