Your data. Your customers’ data. Plainly explained.
What we collect, why, who sees it, and how to get it deleted. Designed for humans who prefer clear explanations over dense legalese.
Two Different Data Worlds
Data protection laws make a strict distinction between data about your company vs the customer records you store in DigAI.
Data About You (Account & Billing)
DigAI is the Data Controller {{LEGAL_REVIEW}}Information you provide to register, log in, pay your subscription, and operate your DigAI account.
- Account administrator full name and business email
- Billing company name, GSTIN number, and billing address
- Payment transaction tokens from Razorpay (no card numbers)
- Product usage telemetry and dashboard login timestamps
To provide your account access, generate GST-compliant tax invoices, deliver customer support, and safeguard account security.
Data You Store About Your Customers (CRM & Messages)
You are the Controller; DigAI is the Processor {{LEGAL_REVIEW}}Information about your leads, patients, students, or buyers that you ingest into your DigAI CRM workspace.
- Customer phone numbers, names, and email addresses
- WhatsApp message histories and customer inquiry logs
- Custom form responses, appointment booking slots, and deal amounts
- Uploaded documents, student notes, and campaign tags
Exclusively to execute your configured automations, dispatch messages, and maintain your CRM records under your direct instructions.
What We Collect, and Why
Clear breakdown of data categories, operational purposes, and statutory retention periods.
| Category | Concrete Examples | Operational Purpose | Retention Period |
|---|---|---|---|
| Account Credentials | Email, hashed password, organization name | Authenticate staff logins and prevent unauthorized access | Duration of active account + 30 days after deletion {{CONFIRM}} |
| Billing & Invoicing | GSTIN, business address, Razorpay payment reference | Generate statutory GST tax receipts and process renewals | 8 years as required by Indian taxation and accounting law {{CONFIRM}} |
| CRM Contacts & Deals | Prospect names, phone numbers, custom pipeline fields | Organize your sales leads and execute automated workflows | Controlled by customer; wiped upon contact deletion {{CONFIRM}} |
| Messaging History | WhatsApp chat messages, template delivery states | Power Unified Inbox, customer timelines, and reply threads | Rolling 12 months in dashboard; configurable archive {{CONFIRM}} |
| Application Telemetry | Browser user-agent, IP address, API error status codes | Monitor platform uptime, detect brute force attacks, debug errors | 90 days in rolling log aggregators {{CONFIRM}} |
Who Can See Your Data
Access is protected by three distinct operational perimeter layers.
Team members invited to your workspace
Designated DigAI customer success engineers
Infrastructure and channel providers (Meta, Razorpay, Google, SMTP)
Your Privacy Controls & Options
Every action you need to export, delete, restrict, or configure customer data.
Export Your Data
Download all contacts, deals, and notes in CSV or JSON at any time.
Delete Individual Contacts
Immediately wipe a lead or customer record and their conversation history.
Close & Delete Organization Account
Permanently wipe your entire organization workspace and database records.
Marketing Consent & Opt-Out
Manage global DO_NOT_CONTACT tags to prevent automated messaging.
Cookie & Tracking Preferences
Review and adjust functional, analytics, and marketing cookie preferences.
Retention & Deletion Lifecycle
What happens when an account is closed or contact records are deleted.
Active Operations
Data stored securely in encrypted primary database; accessible to your team.
Account Closure Grace Period
Upon subscription cancellation, account remains in read-only grace period for data export.
Hard Deletion from Production
Production database records and uploaded media are purged from active clusters {{CONFIRM}}.
Backup Expiration
Automated encrypted database snapshot backups naturally expire and overwrite {{CONFIRM}}.
Contact our Privacy Officer & Legal Counsel
Have specific data subject deletion requests, DPDP Act fiduciary inquiries, or cross-border processing questions? Contact our dedicated privacy desk directly.
Ready to automate with privacy by design?
All DigAI workspaces include automated multi-tenant isolation and granular staff permissions.