Privacy Policy

1. Scope and role

This policy explains how Agent Wallah handles personal data through this website, inquiry forms, account flows, support interactions, and related service operations. For customer-deployed agents, the commercial agreement should identify whether Agent Wallah acts on the customer's instructions or for its own stated purposes.

2. Data we collect

• Inquiry data such as name, organisation, email, phone number, request type, workflow description, and message.
• Account data such as name, business name, email, phone number, selected services, authentication records, and policy acceptance version.
• Technical and security data such as IP address, user agent, request time, referral source, audit events, and suspected misuse indicators.
• Service data supplied by customers or generated while configuring, operating, supporting, and evaluating an agreed workflow.

3. Why we process data

• Respond to inquiries, privacy requests, support needs, and commercial discussions.
• Create and secure accounts, deliver contracted services, and maintain operational records.
• Prevent abuse, diagnose failures, protect systems, and comply with legal obligations.
• Measure aggregate website performance using privacy-first, cookieless analytics without sending form contents or contact details.

4. Consent and lawful processing

Where consent is the appropriate basis, we ask for a clear affirmative action and explain the purpose at the point of collection. You may withdraw consent through the contact form, although this does not affect processing already completed or records that must be retained for legal or contractual reasons.

5. Sharing and international processing

Data may be handled by service providers supporting hosting, email delivery, security, analytics, communications, integrations, and AI model processing. We disclose only what is reasonably needed for the service and use contractual or technical safeguards where appropriate. Some providers may process data outside India, subject to applicable law and customer deployment choices.

6. Retention

Unsuccessful website inquiries are retained for up to 12 months and then deleted or anonymised unless an active engagement, dispute, security need, or legal obligation requires longer retention. Account, billing, audit, and contracted-service records follow the applicable operational or legal retention period.

7. Security

We use access controls, authentication, logging, data minimisation, encryption where appropriate, and deployment-specific safeguards. No internet service can guarantee absolute security. If a breach creates a legally reportable risk, we will take response and notification steps required by applicable law.

8. Your choices and rights

• Ask what personal data we process and request access, correction, updating, or erasure where applicable.
• Withdraw consent or object to optional processing.
• Raise a grievance and receive a response through the published contact route.
• Nominate another person to exercise applicable rights in the event of death or incapacity, where provided by law.

9. Children

The public website and account services are intended for adults and business users. We do not knowingly invite children to create accounts or submit personal data. If child data is required for a customer workflow, it must be covered by a specific lawful deployment design and required verifiable parental or guardian consent.

10. Browser storage and analytics

The site may use essential browser storage for theme preference and authentication tokens. The configured website analytics is intended to be cookieless and must not receive form messages, names, email addresses, phone numbers, or account credentials.

11. Grievances and policy updates

Submit privacy, deletion, correction, consent-withdrawal, or grievance requests through the contact form by selecting 'Privacy or data request'. We may need to verify identity before acting. We aim to acknowledge privacy requests within seven business days and will publish material policy changes with an updated effective date.