Privacy Policy

info Information We Collect

To provide our appointment and management services, we collect the following types of information:

• Personal Information: Name, Email Address, Phone Number.
• Company Details: Company Name, Branch Addresses, Employee Records.
• Financial Information: Bank Account Details, UPI IDs (Stored in encrypted format).

encrypted How We Protect Your Data

Security is our top priority. We employ advanced encryption standards to protect your sensitive information. Specifically, your passwords, bank account numbers, and UPI details are hashed and encrypted. This means even our internal team cannot view this information in plain text.

manage_accounts How We Use Your Information

We use the collected data solely for:

• Facilitating appointment bookings and management.
• Processing payments and tracking financial status.
• Authenticating users and securing account access.
• Improving platform performance and user experience.
• We use your email only for transaction-related notifications (appointments, invoices).

contact_support Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

share Third-Party Services

We use the following third-party services to operate our platform:

• Razorpay — for secure payment processing and recurring billing mandates.
• Amazon Web Services (AWS) and Cloudflare — for cloud hosting, data storage, and content delivery.
• ZeptoMail — for transactional email delivery.
• Firebase — for authentication and push notifications.

These services have access only to the data necessary to perform their functions and are bound by their own privacy policies.

cookie Cookies & Tracking

SuchiDesk uses essential cookies required for authentication, session management, and security. We do not use advertising or third-party tracking cookies. These essential cookies are strictly necessary for the platform to function and cannot be disabled.

schedule Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Upon account deletion or subscription cancellation, your data is retained for 30 days and then permanently deleted. Financial records may be retained longer as required by applicable Indian tax and accounting regulations. <strong>OTP / Verification Codes:</strong> Not stored after the transaction — invalidated within 10 minutes or upon use, whichever is first. <strong>WhatsApp message logs:</strong> Retained for up to 90 days for support purposes, then permanently deleted.

shield_person Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access your personal data held by us.
• Request correction of inaccurate personal data.
• Request deletion of your personal data (subject to legal retention requirements).
• Withdraw consent for non-essential data processing at any time.

To exercise any of these rights, please contact us at support@suchidesk.in.

gavel Legal Compliance

This Privacy Policy is governed by and compliant with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

admin_panel_settings Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:

The Grievance Officer shall address any discrepancies or grievances within 30 days of receipt.

chat WhatsApp & Meta — Data Processing & Controller-Processor Relationship

SuchiDesk uses the WhatsApp Business API, provided by Meta Platforms, Inc. ("Meta"), to deliver automated messages including appointment reminders, OTPs (One-Time Passwords), and transactional notifications. As a result, certain data is processed by Meta in the following manner:

• Data Shared with Meta: Phone numbers and message content (e.g., appointment reminders, OTP codes) are transmitted to Meta Platforms, Inc. solely for the purpose of delivering WhatsApp messages to the intended recipient.
• Meta as Data Processor: SuchiDesk is the data controller; Meta Platforms, Inc. acts as a data processor on our behalf pursuant to the WhatsApp Business Data Processing Terms. Your data is also subject to Meta's own Privacy Policy and WhatsApp's Terms of Service.
• No Advertising Use: SuchiDesk does not authorise Meta to use your personal data for advertising or any purpose other than message delivery as specified in the WhatsApp Business Data Processing Terms.
• OTP Data Retention: One-Time Passwords (OTPs) sent via WhatsApp or Email are ephemeral and are not stored after the authentication transaction is complete. OTP tokens are invalidated immediately upon successful verification or upon expiry (within 10 minutes), whichever occurs first.
• Chat Log Retention: Appointment confirmation and transactional message logs may be retained for up to 90 days for support and audit purposes, after which they are permanently deleted.
• International Data Transfer: By consenting to WhatsApp communications, you acknowledge and agree to the transfer of your phone number and message metadata to Meta's global infrastructure, including servers in the United States and the European Union (Meta Platforms Ireland Limited), in accordance with Meta's data protection commitments.

By using SuchiDesk's WhatsApp messaging features, you acknowledge that your phone number and message content may be transferred to and processed on servers located in the United States, Ireland, or other countries globally where Meta Platforms, Inc. and its affiliates operate. These international transfers are governed by the WhatsApp Business Data Processing Terms, which incorporate appropriate safeguards as required by applicable data protection law.

Meta's Privacy Policy: https://www.facebook.com/privacy/policy/  |  WhatsApp Business Data Processing Terms: https://www.whatsapp.com/legal/business-data-processing-terms/  |  WhatsApp Messaging Guidelines: https://www.whatsapp.com/legal/messaging-guidelines

notifications_active WhatsApp Communication Consent & Opt-Out Rights

We send WhatsApp messages only to users who have provided explicit consent at the time of account registration or appointment booking. You have the following rights regarding WhatsApp communications from SuchiDesk:

• Right to Consent: By registering an account or booking an appointment, you explicitly consent to receive automated WhatsApp messages from SuchiDesk, including OTPs, appointment reminders, and service updates.
• Right to Withdraw Consent: You may withdraw your consent for WhatsApp notifications at any time by contacting us at support@suchidesk.in or by updating your notification preferences in your account settings.
• User-Initiated OTPs Only: OTP messages via WhatsApp are sent exclusively in response to a direct action taken by you (e.g., clicking "Send OTP" or initiating account registration). We do not send unsolicited OTPs.
• No Spam: SuchiDesk strictly prohibits the sending of unsolicited, bulk, or promotional messages via WhatsApp. All automated messages are transactional in nature and directly related to your use of our services.
• Block on WhatsApp Directly: You may immediately opt out by blocking SuchiDesk on WhatsApp at any time. SuchiDesk honours all WhatsApp block and report actions — your number will be permanently removed from future automated communications upon detection. You may also report our messages as spam within WhatsApp; we treat such reports as an opt-out request and will suspend messaging to your number.