Privacy Policy

Varnilix Private Limited ("Varnilix", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our products, or engage with our services.

We are a DPIIT-recognized startup (Recognition Number: DIPP241245) registered under the Startup India initiative, and we process personal information in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 (India), where applicable.

Personal Information

We may collect the following personal information when you interact with us:

• Name and contact information (email, phone number)
• Company name and designation
• Business address
• Communication preferences
• Information you provide to us through WhatsApp or other Meta Platforms (see Section 5)

Technical Data

When using our IoT products and services, we may collect:

• Device identifiers and telemetry data
• Power quality metrics and operational data
• System logs and diagnostic information
• Usage patterns and analytics

We use the collected information for:

• Providing and improving our products and services
• Responding to inquiries and support requests
• Sending relevant updates and communications
• Analyzing usage patterns to enhance user experience
• Complying with legal obligations
• Generating anonymized analytics and insights

We process personal information:

• With your consent
• To provide requested services
• To comply with legal obligations
• To protect our legitimate business interests, where permitted by law

We only process WhatsApp communications that users voluntarily send to our business account or that are necessary to deliver requested services. If you communicate with us through WhatsApp, we may receive and process information provided by the WhatsApp Business Platform, including:

• Your WhatsApp phone number
• Profile name
• Messages you send to us
• Media files you voluntarily share
• Message delivery and read status
• Metadata required for message delivery and security

This information is processed solely for:

• Responding to your inquiries
• Providing customer support
• Delivering requested services
• Maintaining communication records
• Improving our services

We only send WhatsApp messages in accordance with applicable WhatsApp Business Platform policies and after appropriate user interaction or consent where required. We do not use personal information obtained through the WhatsApp Business Platform to make solely automated decisions that produce legal or similarly significant effects on individuals.

We do not use WhatsApp message data for advertising or sell such information to third parties. Our use of the WhatsApp Business Platform is also subject to Meta's applicable Business Terms of Service and other Meta terms and policies.

When users interact with us through supported communication platforms such as the WhatsApp Business Platform, we may receive webhook notifications containing message events and related metadata, including message received, sent, delivered, read, or failed status, account events, template message events (if applicable), and other metadata provided through the platform.

Webhook data is processed solely for delivering requested services, maintaining communication continuity, and ensuring platform security. Webhook payloads are transmitted over encrypted (HTTPS/TLS) connections and access to this data is restricted to authorized personnel and systems.

We primarily store customer data on secure infrastructure located in India. Certain information may also be processed by trusted third-party service providers, including Meta Platforms, Inc., as necessary to provide our services (see Section 12). We implement industry-standard security measures including:

• TLS encryption for data in transit
• Encryption of sensitive data where appropriate
• Secure cloud infrastructure with Indian data residency for primary storage
• Access control mechanisms and secure authentication
• Routine monitoring, regular security audits, and vulnerability assessments

We retain personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

WhatsApp conversations and webhook data are retained for customer support, compliance, and operational purposes unless a longer retention period is required by law. When data is no longer required, it is securely deleted or anonymized.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• With service providers who assist in our operations (under strict confidentiality agreements)
• In connection with a merger, acquisition, or sale of assets

We may use trusted third-party infrastructure providers, including cloud hosting providers, messaging platforms (such as Meta's WhatsApp Business Platform), analytics providers, and security services, to help us deliver our services. These providers process data only on our instructions and under appropriate confidentiality and security obligations.

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Withdraw consent for data processing
• Lodge a complaint with relevant authorities

You may request access to, correction of, or deletion of your personal information (including WhatsApp conversation data) by contacting us at info@varnilix.com. We will respond within a reasonable timeframe as required by applicable law. To request deletion of your WhatsApp conversation data specifically, email us with the phone number you used to contact us and your deletion request; see our Data Deletion Instructions page for details. We may verify your identity before processing the request.

Our services are not intended for individuals under the age of 18 unless otherwise permitted by applicable law or under the supervision of a parent or legal guardian. We do not knowingly collect personal information from children.

We primarily store customer data on infrastructure located in India. Certain information may also be processed by trusted third-party service providers, including Meta Platforms, Inc., in other jurisdictions as necessary to provide our services, in accordance with applicable law and with appropriate data protection safeguards.

Our website may use essential cookies necessary for website functionality. Where non-essential cookies (such as analytics) are used, they will be subject to applicable consent requirements. You can control cookie preferences through your browser settings.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Use of our services through Meta Platforms, including the WhatsApp Business Platform, is subject to the applicable Meta Privacy Policy and Meta Terms of Service. We only access information that users voluntarily provide or that is necessary for operating our services through Meta's APIs.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the revised policy.

For privacy-related inquiries, including WhatsApp data or to exercise your rights, please contact us: