This Privacy Policy explains how Falak Enterprise, a GST-registered proprietorship based in Bhopal, Madhya Pradesh, India ("we", "us"), handles personal data in connection with Falak OS, our CRM and WhatsApp operations software for solar EPC businesses (the "Service"). It is written with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") in mind and forms part of our Terms of Service.
1. Two different roles
We handle data in two capacities, and it matters which one applies:
- For your account with us — the details you give us to sign up, subscribe, and get support — we are the Data Fiduciary and decide how that data is used, as described below.
- For the data you load into the Service about your own leads and customers ("Customer Data") — you are the Data Fiduciary and we act only as your Data Processor. We process that data on your instructions, to run the Service for you. This policy tells you how we protect it; how you use it with your own customers is your responsibility.
2. Data we collect
Account and billing data
Your name, business name, email, phone number, GST details where relevant, plan and payment records, and support correspondence.
Customer Data you upload
Records you create or import — leads, customer contacts, addresses, project and site details, quotations, payment entries, and files. This may include personal data of your customers, which you are responsible for collecting lawfully.
WhatsApp messages
Messages, templates, and media you send and receive through the WhatsApp suite, along with delivery and read status, so the inbox and automations work. These pass through the WhatsApp Cloud API operated by Meta.
Technical and usage data
Log data such as IP address, browser type, timestamps, and actions within the Service, used to keep it secure and working. Our public website uses Google Analytics 4 to understand aggregate traffic; the Service application itself is not used for advertising.
3. How we use data
- to provide, operate, secure, and support the Service;
- to process subscriptions, send invoices, and prevent misuse or fraud;
- to send you service and account notices, and — only where you have not opted out — occasional product updates;
- to diagnose problems, back up data, and improve reliability;
- to meet legal, tax, and regulatory obligations.
We do not sell personal data, and we do not use your Customer Data to train advertising or profiling systems.
4. Legal basis
We rely on your consent, on the need to perform our contract with you, and on our legitimate and legal obligations. For Customer Data, you confirm that you have a valid legal basis — usually the consent of your customers or another ground permitted under the DPDP Act — for the data you load and the messages you send.
5. Who we share data with
We share data only as needed to run the Service, with:
- Meta Platforms, which operates the WhatsApp Cloud API that carries your WhatsApp messages;
- our hosting and infrastructure providers, on which the Service and its databases run;
- payment and communication providers strictly to process transactions and notices;
- professional advisers or authorities where the law requires it.
These providers act as our sub-processors or as independent controllers under their own terms. We do not otherwise disclose your data to third parties for their own purposes.
6. Where data is stored
Customer Data is kept in databases separated by tenant so that one customer's data is not accessible to another. Data in transit is protected with TLS/HTTPS, access to production systems is restricted to authorised personnel, and we take regular backups. Some sub-processors, including Meta, may process data outside India; where that happens we rely on the provider's own safeguards and applicable law.
7. How long we keep data
We keep account data for as long as your account is active and for a reasonable period afterwards to meet legal and tax requirements. Customer Data is kept while your subscription is active. After termination, you may request an export within 30 days, after which we delete or anonymise your Customer Data unless the law requires us to retain it longer. Trial data from accounts that do not convert may be deleted after the trial ends.
8. Your rights
Under the DPDP Act, as the person whose account data we hold, you may ask us to:
- access a summary of the personal data we hold about you and how it is processed;
- correct or update inaccurate or incomplete data;
- erase data where it is no longer needed and the law allows;
- withdraw consent you previously gave, without affecting processing already done.
If the request concerns data about one of your customers held inside your account, we will refer it to you, since you are the Data Fiduciary for that data, and assist you as your processor.
9. Grievances
If you have a question or complaint about how we handle personal data, contact us at falak.enterprise17@gmail.com and we will respond within a reasonable time. You also have the right to raise a complaint with the Data Protection Board of India under the DPDP Act.
10. Cookies
The Service uses cookies that are necessary to sign you in and keep your session secure. Our public website additionally uses analytics cookies. You can control cookies through your browser settings, though disabling essential cookies may stop the Service from working.
11. Children
The Service is built for businesses and is not directed at children. We do not knowingly collect personal data of children through the Service.
12. Changes to this policy
We may update this policy as the Service and the law evolve. If a change is material, we will give reasonable notice by email or within the Service. The "Last updated" date above shows the current version.
13. Contact
Falak Enterprise, Bhopal, Madhya Pradesh, India.
Email: falak.enterprise17@gmail.com · Phone: +91 89890 03670