Privacy Policy & DPDP Act Compliance
Last Updated: October 2026 • Fully Compliant with India's Digital Personal Data Protection (DPDP) Act, 2023
Welcome to QuickSeta (“Company”, “Data Fiduciary”, “we”, “our”, or “us”). We operate the QuickSeta software-as-a-service (SaaS) platform, providing automated WhatsApp AI chatbots, live chat support, bulk broadcasts, digital payment receipts, and marketing automation tools for businesses, institutes, and developers.
We are deeply committed to protecting your personal data and your customers' privacy. This Privacy Policy explains how we collect, use, store, process, and safeguard your information in strict accordance with India's Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and applicable global data protection standards.
1. Information We Collect
1.1 Account & Profile Information: When you register on QuickSeta, we collect your full name, business/institute name, business category, verified Gmail/email address, phone number, and encrypted authentication credentials.
1.2 Payment & Billing Data: To process subscriptions and facilitate peer-to-peer UPI collections, we collect your UPI ID / Virtual Payment Address (VPA), billing details, and transaction reference numbers. Payment transactions are processed through certified PCI-DSS compliant payment gateways (Razorpay / UPI networks). We do not store credit/debit card numbers or CVVs on our servers.
1.3 Customer & Live Chat Contact Data: Contact records managed by you (e.g. customer/client names, WhatsApp numbers, due dates, order amounts) are processed solely for dispatching scheduled reminders, generating PDF invoices, and operating your unified Live Chat inbox.
1.4 Official Meta WhatsApp Cloud API Integration: QuickSeta operates in strict compliance with the Meta Platform Terms and WhatsApp Business Messaging Policies. Communications are processed via the official Meta Cloud API. Messages, webhooks, and delivery statuses are processed securely without resale or unauthorized third-party sharing.
2. Compliance with India's DPDP Act, 2023 (Data Principal Rights)
Under the Digital Personal Data Protection Act, 2023 (India), you (“Data Principal”) have the following guaranteed rights regarding your digital personal data:
- Right to Notice & Explicit Consent: We collect and process personal data only after obtaining clear, informed, and affirmative consent via our signup flow and Cookie Consent Manager.
- Right to Access & Summary: You can request a complete summary of the personal data being processed by QuickSeta and the identities of all trusted Data Processors (Meta, Google Cloud, Razorpay).
- Right to Correction & Erasure: You may correct, update, or permanently erase your account and workspace records directly from Settings or by emailing our Data Protection Officer.
- Right to Withdraw Consent: You may withdraw your cookie or marketing consent at any time via our interactive Cookie Policy & Consent Manager.
- Right to Grievance Redressal: Our dedicated Indian Grievance Officer resolves all DPDP Act requests within 72 hours.
3. How We Use Your Information
- To provide, operate, and maintain your QuickSeta automation dashboard.
- To dispatch automated payment reminders, digital receipts, and broadcasts via the official Meta WhatsApp Cloud API.
- To power your 24/7 AI WhatsApp Receptionist & Google Gemini AI Agents based strictly on the knowledge base you configure.
- To verify payment transaction screenshots using AI Vision OCR for fast reconciliation.
- To send email verification OTPs from
[email protected], invoices, and security alerts. - To prevent automated bot attacks, brute-force logins, and platform abuse via Cloudflare security shields.
4. Google Workspace API Integration & User Data Policy
QuickSeta offers optional integrations with Google Workspace APIs to empower users, QuickSeta AI, and the AI Agent with automated email marketing, invoice backup storage, and spreadsheet synchronization. When you connect your Google Account, QuickSeta accesses only the specific data necessary to execute the functions you explicitly authorize.
Google API Services User Data Policy Compliance (Limited Use Disclosure)
QuickSeta's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4.1 Google Scopes Requested and Specific Purposes
Purpose: Used exclusively to allow users and AI Agent to compose and send user-initiated transactional notifications, customer proposals, and bulk marketing emails directly from the user's own connected Gmail address.
Protection: QuickSeta does NOT read, parse, index, search, or store incoming personal emails or private inbox history. We only send the exact messages you draft or instruct the AI to dispatch.
Purpose: Used to store private, user-isolated application configuration, AI Agent memory, chat context, and website project states in the user's hidden Google Drive Application Data folder.
Protection: This non-sensitive scope ensures that memory and state data stay 100% within the user's own Google cloud storage without being visible in their general Drive file list or exposed to third parties.
Purpose: Used to create and manage a dedicated application directory (e.g., “QuickSeta Documents”) within the user's Google Drive to automatically store generated PDF receipts, invoices, catalog exports, and website design backups.
Protection: By using the strict drive.file scope, QuickSeta has NO access to any other existing personal files or folders in your Google Drive. We can only access the files and folders created by QuickSeta itself.
Purpose: Enables users and the QuickSeta AI Agent to schedule business appointments, client consultations, and service bookings directly on the user's Google Calendar, automatically attaching Google Meet video conferencing links.
Protection: QuickSeta does NOT inspect or read personal calendar events. We only create, update, or cancel calendar entries that are explicitly booked through your QuickSeta website or scheduled upon your direct command.
Purpose: Functions as an automated CRM and order ledger. When customers submit lead forms, place orders, or request bookings on your QuickSeta website, the AI Agent appends row-by-row transactional data (name, contact, product, amount, payment status) directly into designated Google Spreadsheets in your Google account.
Protection: QuickSeta only writes or syncs data to spreadsheets designated by you for business tracking. We never read or access unrelated spreadsheets across your account.
Purpose: Used to verify the identity of the account holder and display the connected Gmail address and profile avatar in your QuickSeta workspace settings.
4.2 No Third-Party Transfer & No Advertising Use
Zero Commercial Sale or Sharing: QuickSeta does NOT share, transfer, sell, license, or disclose Google user data to any third-party advertisers, data brokers, commercial partners, or information aggregators under any circumstances.
No Targeted Advertising: We never use or transfer information received through Google APIs to serve personalized, re-targeted, or interest-based advertisements.
No Generalized AI/ML Training: Google user data, email contents, and spreadsheet records are NEVER used to train, retrain, or improve generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models. Any processing by QuickSeta AI or AI Agent occurs strictly within your private session context to execute the immediate instruction you gave.
4.3 Human Access Restrictions
QuickSeta enforces strict technical boundaries preventing human personnel or staff from reading Google user data. Human access is strictly prohibited except under the following narrow circumstances:
- You provide explicit affirmative written consent for technical support or troubleshooting.
- It is strictly necessary for security investigations (such as diagnosing abuse or malware).
- It is mandatory to comply with applicable law or a valid judicial order.
4.4 Secure Storage, Token Encryption & Instant Revocation
Storage & Encryption: All Google OAuth tokens (access tokens and refresh tokens) are encrypted at rest using industry-standard AES-256 encryption and transmitted exclusively over secure TLS 1.3 / SSL connections.
User Revocation & Deletion: You have complete, unconditional control to disconnect your Google Account at any time. When you click “Disconnect” in the QuickSeta dashboard or revoke permissions via the Google Third-Party Permissions Manager, all stored OAuth credentials, tokens, and cached metadata are immediately and permanently wiped from QuickSeta servers.
5. Data Protection & Security Standards
We implement industry-standard administrative, technical, and physical security measures including:
- 256-bit SSL / TLS Encryption for all data in transit and at rest.
- Brute-Force & Bot Protection: Automatic 15-minute account lockouts after 5 failed login attempts and Cloudflare Turnstile spam protection.
- Zero Third-Party Selling: We NEVER sell, rent, or trade your personal or customer data to advertisers or third-party marketing agencies.
6. Contact Us & DPDP Grievance Officer
For any questions, DPDP Act data requests, or privacy grievances, contact our designated Data Protection & Grievance Officer:
Entity Name: QuickSeta Technologies Private Limited
Official Support & DPO Email: [email protected]
Phone / WhatsApp: +91 81783 73490
Location: New Delhi, India
Operating Hours: Monday – Saturday, 9:00 AM – 7:00 PM IST