Data Protection (DPDP Act, 2023)

Roles

For your team's account data, Wevanta Infotech Private Limited is the data fiduciary.

For the data of your leads and customers stored in SunFlow CRM, your company is the data fiduciary and Wevanta Infotech Private Limited acts as your data processor, processing it only on your instructions to provide the service.

Purpose and minimisation

We process personal data only to provide, secure, support and bill the service. Customer data is not used for any other purpose.

Consent

Your company is responsible for obtaining your customers' consent, including WhatsApp opt-in. SunFlow CRM records opt-in and sends WhatsApp messages only to customers marked as opted in.

Security safeguards

Database-level separation of every company's data, encrypted storage of integration keys, access logging, and restricted administrator access with a separate login.

Breach notification

If a personal data breach affects your data, we will inform you without undue delay with the information you need to notify the Data Protection Board and affected people.

Rights of data principals

Access, correction, erasure, grievance redressal and nomination. Requests about your customers' data should go to your company; we will help you respond. See Grievance Redressal and Data Deletion Request.