Who we are
SHYLO Technologies ("SHYLO", "we") builds websites, apps, dashboards and business software, and runs Nivora-SaaS (nivora-saas.shylotech.com), a business platform for companies. This policy explains what personal data we collect, why, who we share it with and the choices you have. Questions: info@shylotech.com or +91 76959 04013 (SHYLO Technologies, Hosur, Tamil Nadu, India).
What we collect
- Enquiries and bookings: your name, company, email, phone, country, the service you are interested in and your message, when you fill in a form on shylotech.com or book a meeting.
- Nivora-SaaS accounts: your name, work email, phone, company details, role, and a record of sign-ins and important actions (audit log) to keep accounts secure.
- Business data in Nivora-SaaS: the leads, clients, quotations, invoices, products, staff and other records a company adds. That company controls this data; we store and process it only to run the service for them.
- WhatsApp data: when a company connects its WhatsApp Business number, Nivora-SaaS receives and stores the messages, phone numbers and WhatsApp profile names of people who chat with that company, so the company can reply from its team inbox.
- Job applications: the details and CV you send through our careers page.
- Website usage: privacy-friendly, cookie-free page statistics (Vercel Web Analytics). We do not use advertising cookies or sell data.
Why we use it
- To reply to your enquiry, give you a quote, and deliver the work you asked for.
- To provide Nivora-SaaS: storing a company's records, sending the quotations, invoices, WhatsApp messages, emails and alerts the company asks it to send, and showing incoming messages in its inbox.
- To keep accounts and data secure, prevent misuse and fix problems.
- To meet legal, tax and accounting duties.
We use your data with your consent (for example when you submit a form) or because we need it to provide a service you or your company signed up for. You can withdraw consent at any time by contacting us.
Who we share it with
We never sell personal data. We share it only with service providers that help us run our services, and only what each one needs:
- Hosting and database: Vercel (website and app hosting) and Supabase (database and file storage, in Mumbai, India).
- Messaging chosen by each company: Meta Platforms (WhatsApp Business Cloud API), the company's own email mailbox (SMTP), MSG91 (SMS) and Telegram (new-lead alerts, which contain no lead names or numbers).
- Email delivery: Web3Forms (copies of website enquiries to our inbox) and an email delivery service for account emails such as sign-up confirmations and password resets.
- Payments: Razorpay, when a company takes online payments. We do not store card details.
- Authorities, when the law requires it.
Some of these providers may process data outside India. They are bound by their own security and privacy commitments.
WhatsApp and Meta
When a company connects WhatsApp to Nivora-SaaS through Meta's Embedded Signup, we receive an access token and the IDs of its WhatsApp Business account and phone number from Meta. We use them only to send and receive that company's WhatsApp messages and manage its message templates. Access tokens are stored encrypted. We do not use WhatsApp data for advertising, and we do not share it with other companies. Messages are handled in line with the WhatsApp Business Policy.
How long we keep it
Enquiries are kept as long as needed to follow up and for our business records. Nivora-SaaS data is kept while the company's account is active. When a company closes its account or asks for deletion, we delete its data within 30 days, except records we must keep by law (for example invoices for tax). Backups roll over and are deleted on their normal cycle.
Security
Data is sent over HTTPS, stored in access-controlled databases with per-company separation, and secrets such as WhatsApp tokens and API keys are encrypted. Only people who need access to support you can see your data.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask us to access, correct or delete your personal data, withdraw consent, or name someone to act for you. If you are a customer of a company that uses Nivora-SaaS, please contact that company first; we will help them answer you. To use your rights or raise a complaint, contact our grievance contact at info@shylotech.com or +91 76959 04013 (SHYLO Technologies, Hosur, Tamil Nadu, India). We reply within 7 working days. See also how to delete your data.
Children
Our services are for businesses and are not meant for anyone under 18.
Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced on this page or inside Nivora-SaaS.