1. Who we are
Vruddo.in provides Vruddo, an AI-powered business operating system for small and medium businesses. It covers point of sale and inventory, customer feedback, websites, social media publishing and customer messaging. For questions about this Policy, write to support@vruddo.in.
2. Information we collect
Information you give us
- Account information: your name, email address, phone number and login details, and those of any team members you invite.
- Business information: business name, address, category, logo, photos, products, prices and opening hours.
- Business records: sales, invoices, inventory, expenses and the customer records you add to the Service, such as customer names, phone numbers and purchase history.
- Content: posts, captions, images, videos, replies and messages you create or upload.
- Communications: messages you send us, such as support requests and access requests.
Information from platforms you connect
You can choose to connect third-party accounts. We only receive data from a platform after you sign in to it and grant permission, and only for the permissions listed below.
- Facebook and Instagram (Meta): when you connect, we receive an access token and the ID and name of the Facebook Page and Instagram professional account you choose. Through the permissions below we read your Page’s and account’s posts, comments, reviews and performance insights, and we publish content and replies for you.
- WhatsApp Business (Meta): if you connect a WhatsApp Business account, we receive its phone number ID and account ID. We use them to send messages you authorise to your customers and to receive their replies.
- Google Business Profile: if you connect it, we read your business listing and reviews and post the replies and updates you approve.
Information collected automatically
- Usage data: the pages and features you use, and basic device and browser details, so we can run, secure and improve the Service.
- Cookies: we use essential cookies to keep you signed in and keep your session secure. We do not use advertising cookies.
3. Facebook, Instagram and WhatsApp permissions
The permissions we request from Meta, and what each one is used for:
| Permission | How we use it |
|---|---|
| pages_show_list | List the Facebook Pages you manage so you can choose which Page to connect to your business. |
| pages_read_engagement | Read your Page's posts, follower count and engagement figures to show them in your dashboard. |
| pages_read_user_content | Read comments and reviews left on your Page so you can see and answer them from Vruddo. |
| pages_manage_posts | Publish posts that you create or approve in Vruddo to your Page. |
| pages_manage_engagement | Post the replies you write or approve to comments on your Page. |
| pages_manage_metadata | Subscribe your Page to update notifications so new comments and messages appear in Vruddo. |
| business_management | Find the Pages and Instagram accounts that belong to your Meta business portfolio. |
| instagram_basic | Read your Instagram professional account's profile and media to show them in Vruddo. |
| instagram_content_publish | Publish posts and Reels that you create or approve in Vruddo to your Instagram account. |
| instagram_manage_insights | Read reach and engagement insights for your Instagram posts to report on performance. |
Our commitments for Meta Platform Data. We use data received from Meta only to provide the features you use in Vruddo. We do not sell or license it. We do not use it for advertising, to build profiles of individuals, or for surveillance, and we do not share it with data brokers. We never publish anything to your Page or Instagram account unless you created it or approved it. You can disconnect at any time; see Data Deletion.
4. How we use information
- To provide the Service: running your workspace, building your website, and publishing and replying on the platforms you connect.
- To generate AI suggestions you ask for, such as post captions, review replies and business insights. AI output is a draft for you to review.
- To send messages you authorise to your customers, plus service notices such as sign-in links, alerts and receipts.
- To keep the Service secure, prevent fraud and abuse, and fix problems.
- To understand which features are used so we can improve them, using aggregated data where possible.
- To meet legal obligations.
5. How we share information
We do not sell personal information. We share it only:
- With service providers who process it for us under contract and only on our instructions: cloud hosting and databases, email delivery, maps, and AI model providers that generate the drafts you request.
- With the platforms you connect, when you publish content or send messages through them.
- Within your business, with team members you invite, according to the roles you give them.
- For legal reasons, when required by law or to protect the rights, safety and security of our users, the public or Vruddo.in.
- In a business transfer, such as a merger or acquisition, subject to this Policy.
6. Data retention and deletion
We keep your information while your account is active and for as long as we need it to provide the Service. When you disconnect Facebook, Instagram, WhatsApp or Google, we delete the stored access tokens straight away, so we can no longer reach that account. When you ask us to delete your account, we delete your account and business data within 30 days, except data we must keep by law (for example tax invoices). Copies in backups are removed on the normal backup cycle. See Data Deletion for how to ask.
7. Security
All data is encrypted in transit using HTTPS/TLS. Access tokens from connected platforms are encrypted at rest with AES-256-GCM and are never shown in the app. Access to production data is limited to people who need it to run the Service. No system is completely secure, but we work to protect your information and will tell you and the relevant authorities about a breach as the law requires.
8. Your rights
Under applicable law, including India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to act for you. To use these rights, email support@vruddo.in. We will reply within 30 days. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
If you are a customer of a business that uses Vruddo, that business controls your data. Please contact the business first. We will help them respond to your request.
9. Google user data
Vruddo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
10. Children
The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you think a child has given us data, contact us and we will delete it.
11. International processing
We are based in India. Our service providers may process data in other countries, such as the United States. Where they do, we use providers that apply appropriate safeguards.
12. Changes to this Policy
If we change this Policy, we will update the “Last updated” date above. If the changes are significant, we will also tell you in the Service or by email.
13. Contact and grievance officer
For questions, requests or complaints about privacy, contact our Grievance Officer at Vruddo.in: support@vruddo.in.