DPDP notice

This notice is given under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it. It is written mainly for people who chat with a shop that uses Resandhi. Merchants will find the full picture in our privacy policy.

Who is responsible for your data

When you message a shop on WhatsApp and an automated agent answers, that agent may be running on Resandhi. In that case:

• The shop is the data fiduciary. It decides why your data is used — to answer your questions, take your order, collect payment and handle returns — and it is responsible to you under the DPDP Act.
• Resandhi is the shop’s data processor. We run the agent and store the conversation for the shop, only on its instructions. We do not use your data for our own purposes, sell it, or share it with other shops.

If you are a merchant with a Resandhi account, we are the data fiduciary for your account data, and the rights below apply to it in the same way.

What data is used, and why

• Your WhatsApp number and profile name — to reply to you and recognise you next time.
• Your messages, voice notes and images — to understand what you are asking. Voice notes are turned into text for the agent to read.
• Orders, delivery addresses and payment status — to take and deliver your order and handle returns. Card and bank details are entered on the payment gateway’s own page; neither the shop’s agent nor Resandhi ever sees them.
• Preferences, such as your language or size — so you do not have to repeat yourself.

To write replies, the relevant text is passed to an AI provider (Anthropic or OpenAI) under zero-data-retention terms. They do not keep it, and your conversations are not used to train AI models. Your data is stored in India.

Your consent

The first time the shop’s agent writes to you, its message says that it is an automated assistant for the shop, what your data is used for, and how to stop. By continuing the conversation you consent to that use. The shop sends you template messages outside a conversation — such as an order confirmation or a delivery update — only if you have opted in, and that opt-in is recorded.

Withdrawing consent

Reply STOP in the chat at any time. The agent stops messaging you within seconds, and the shop will not send you further automated messages unless you start a conversation again. Withdrawing consent does not undo anything that happened before — an order you already paid for will still be delivered and any refund still processed.

Your rights

Under the DPDP Act you have the right to:

• Access — get a summary of the personal data held about you and how it is being used, and a copy of it.
• Correction and updating — have wrong or incomplete data corrected, such as a delivery address.
• Erasure — have your data deleted once it is no longer needed, unless the law requires it to be kept (for example, tax records of an order).
• Grievance redressal — complain to the shop or to us and get a response.
• Nomination — nominate someone to exercise these rights for you if you die or become unable to.

How to use your rights

You can ask the shop directly, or write to us at [email protected]. Tell us the shop’s name and the WhatsApp number you used. We will confirm the request comes from that number before acting on it, and we let the shop know.

• Export and deletion are completed within 24 hours of the request being confirmed. Deletion covers everything Resandhi holds about you for that shop, including the search data derived from your conversations.
• Records the shop must keep by law, such as invoices, are kept only for as long as the law requires.
• Deleting your data from Resandhi does not delete the chat from your own phone or from WhatsApp, which Meta runs under its own terms.

Children

The shop’s agent is meant for adult customers. If you are under 18, please ask a parent or guardian to chat with the shop for you. If we learn that a child’s data has been collected without a parent’s or guardian’s consent, it will be deleted.

Grievance Officer

If you have a complaint about how your data has been handled, please write to our Grievance Officer. We will acknowledge it promptly and resolve it within the time the DPDP rules allow.

[Grievance Officer name]
Grievance Officer, [Registered company name]
[Registered office address, India]
[email protected]

The Data Protection Board of India

If you are not satisfied with how the shop or Resandhi has handled your grievance, you may complain to the Data Protection Board of India. The Act asks that you first raise it with us or the shop, so we have the chance to put it right.