Privacy Policy

1. Information We Collect

Dreamwell Technologies Private Limited collects the following categories of personal information when you use our services or visit our website:

• Identity Data: Your name, email address, phone number, and company name provided during registration, checkout, or contact forms.
• Payment Data: After the invoice is shared with you over WhatsApp, you can pay by bank transfer to our bank account, or by card, UPI or netbanking. Card, UPI and netbanking payments are processed by Razorpay Software Private Limited, so we do not collect or store your card details. We keep transaction references and invoices for our accounting and tax (GST) records.
• Usage Data: Information about how you use our services, including page views, session duration, device type, browser, and IP address collected via cookies and session storage.
• Communication Data: Messages exchanged via WhatsApp, email, or our website chat widget for support and service delivery.
• Business Data: Data you input into our products (invoices, inventory, customer records) as part of using our services.

2. How We Use Your Information

• To provide, maintain, and improve our services.
• To process payments and send billing-related communications.
• To respond to your enquiries and provide customer support.
• To send service updates, security alerts, and administrative messages.
• To monitor usage patterns and optimize product performance.
• To comply with legal obligations under Indian law.

3. Parties to Whom We Disclose Information

We share your information only with the following third parties as necessary to deliver our services:

• Razorpay Software Private Limited: To process card, UPI and netbanking payments. Razorpay's privacy policy applies to the payment data it processes. (razorpay.com/privacy)
• Meta / WhatsApp Business API: For delivering WhatsApp bot services and support communications.
• Cloud Infrastructure Providers: Hetzner Online GmbH for secure server hosting in compliance with applicable data protection laws.
• AI Service Providers: To power the AI features in our products (chat, analytics, automation).
• Google Analytics (Google LLC): To measure aggregated website usage (pages visited, device, approximate location, campaign source). We do not send your name, phone number, email address, company or message text to Google Analytics. (policies.google.com/privacy)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Method of Disclosure

Your data is shared with third parties solely through encrypted API connections (HTTPS/TLS 1.2+) and secure database transfers. No data is shared via unsecured channels. Third-party providers are contractually obligated to maintain equivalent security standards.

5. Security Practices

We implement the following security measures to safeguard your information:

• Encryption: All data in transit is encrypted via TLS 1.2+ (HTTPS). Data at rest is encrypted on our servers.
• Access Control: Only authorized personnel have access to customer data, with role-based access controls in place.
• Secure Infrastructure: Hosted on Hetzner cloud servers with firewall protection, regular security updates, and monitoring.
• Payment Security: We never store card details on our servers. Card, UPI and netbanking payments are processed by Razorpay; bank transfers go directly to our bank account.
• Session Management: Website sessions use secure session storage that expires when you close your browser.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account cancellation, data is retained for 30 days to allow for reactivation, after which it is permanently deleted. You may request data export before cancellation at no cost.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, you have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for data processing.
• Nominate another person to exercise these rights on your behalf.

8. Cookies & Tracking

We use essential cookies to maintain your session and website functionality. We also collect analytics data (page views, device type, session duration) to improve our services. You can disable cookies in your browser settings, though some features may not work properly.

• Google Analytics 4: sets first-party cookies (_ga, _ga_*, up to 2 years) to count visits and measure which pages and campaigns work. Analytics storage only: advertising storage, ad personalisation and Google Signals are switched off, and we do not use this data for advertising.
• Campaign source: if you arrive through a tagged link (for example utm_source), we keep those campaign parameters, the page you first landed on and the domain of the website that referred you in your browser's session storage until you close the tab, and send them with your enquiry if you submit the contact form, so we know which channel brought you to us. This copy uses no cookie.
• No personal data in analytics: form contents (name, phone, email, company, message) are never sent to Google Analytics; we only record that an enquiry was submitted or that the WhatsApp button was clicked.
• Opting out: you can block or delete these cookies in your browser, use the Google Analytics opt-out add-on, or write to us to withdraw consent under the DPDP Act, 2023.

9. Contact