Privacy Policy

1. Who we are (data controller)

For personal data processed in connection with our marketing site, free audit experience, product accounts, demos, and pilots, Halveron International Pvt Ltd is the data controller (or the equivalent “data fiduciary” under India’s Digital Personal Data Protection Act, 2023).

When we process CRM contacts, leads, messages, or other customer content solely on behalf of a business customer inside our products, that customer is typically the controller of that data, and we act as their processor / data processor under contract. In those cases, the customer’s own privacy notice also applies to the people in their systems.

Halveron International Pvt Ltd
11th Floor, Prestige Tech Park, Platina 2
Outer Ring Rd, Kadubeesanahalli
Bengaluru, Karnataka 560087, India
Email: contact@halverongroup.com
Phone / WhatsApp: +91 80885 35238

2. Scope

This policy covers personal data processed through:

• Our public websites and content (including halverongroup.com and related pages)
• The free revenue-leak / operational audit workspace and booking flows
• AI CRM Suite accounts, trials, demos, and paid plans
• Halveron Connect and other messaging or sales tools we provide
• Pilot engagements, founder sessions, support, and sales conversations
• Marketing emails, newsletters, and event or webinar registrations where offered

It does not govern third-party platforms you connect (for example Meta WhatsApp Business Platform, Google, or payment providers), except for how we receive data from those integrations to run our services. Those platforms have their own terms and privacy policies.

3. Data we collect

The categories we collect depend on how you interact with us. We collect only what we need for the purpose at hand.

Account and business information

• Name, work email, phone number, company name, role, and team size
• Account credentials or authentication identifiers (including SSO or OAuth tokens where enabled)
• Workspace and product configuration preferences

Audit, sales, and support communications

• Information you submit in audit forms, calendars, or intake questionnaires
• Notes from founder sessions, demos, pilots, and support tickets
• Email, WhatsApp, or call content you send us in the course of sales or support

Customer content in products (processed for customers)

• CRM records such as contacts, leads, deals, notes, and activity history
• Messaging data routed through Halveron Connect (for example phone numbers, message content, delivery status, and WhatsApp Business identifiers) when a customer connects their account
• Files, transcripts, or operational data customers upload or sync for audits, CRM, or custom builds

Usage, device, and technical data

• IP address, approximate location derived from IP, browser and device type, operating system
• Pages viewed, feature usage, referral URLs, and diagnostic or error logs
• API, webhook, and authentication logs needed to operate and secure the service

Payment and billing metadata

• Billing contact details, plan selection, invoices, and payment status
• Limited payment metadata returned by our payment processors (we do not store full card numbers on Halveron servers when card payments are processed by a payment provider)

Marketing preferences

• Newsletter or update opt-in status, and unsubscribe or preference choices

4. How we use data

We use personal data to:

• Provide, configure, and improve our websites, audit workspace, CRM, messaging products, and pilots
• Authenticate users, manage accounts, and deliver customer support
• Route and display messages and CRM workflows that customers authorize
• Detect, prevent, and investigate security incidents, abuse, spam, and fraud
• Measure product performance and site analytics in aggregate or de-identified form where practical
• Send transactional messages (account, billing, security, and service notices)
• Send marketing or product updates where you have consented or where applicable law otherwise permits, with an easy way to opt out
• Comply with legal obligations and enforce our agreements

We do not sell personal data. We do not use WhatsApp message content or customer CRM records for unrelated third-party advertising. We do not use customer deal data, conversations, or CRM records to train foundation models.

5. Legal bases and India / international norms

We aim to process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors or customers outside India, in a manner consistent with commonly accepted international privacy norms.

Depending on the activity and your location, we rely on one or more of the following:

• Consent, for example marketing emails, certain cookies, or optional product features you turn on
• Contract (or steps before a contract), for example creating an account, running a paid plan, delivering a pilot, or fulfilling an audit you requested
• Legitimate interests that are not overridden by your rights, for example securing our services, understanding aggregate product usage, and responding to B2B inquiries
• Legal obligation, where we must retain or disclose information to meet applicable law

Where we process customer content as a processor, the customer’s instructions and our agreement with that customer govern the processing.

6. Sharing and processors

We share personal data only as needed to run the business, and not for sale. Typical recipients include:

• Service providers under contract, such as cloud hosting, email delivery, analytics, customer support tooling, logging, and payment processors. These providers are engaged to process data on our instructions and are expected to protect it appropriately.
• Integration partners you connect, such as Meta WhatsApp Business Platform when you use Halveron Connect. Message routing then also depends on Meta’s systems and policies.
• Professional advisors (legal, accounting) under confidentiality obligations when reasonably required
• Authorities or counterparties when required by law, legal process, or to protect rights, safety, and security
• Business transfer parties, if we explore or complete a merger, acquisition, or asset sale, subject to appropriate safeguards

We do not publish a fixed public list of every subprocessors here because vendors can change as we grow. If you are an enterprise customer and need a current processor list for diligence, contact us at contact@halverongroup.com.

7. Cross-border transfers

Halveron is based in India. Some service providers or infrastructure may process or store data in other countries. When personal data is transferred across borders, we take reasonable contractual and organizational steps consistent with applicable law (including DPDP requirements for cross-border transfers as they apply) so that data continues to receive appropriate protection.

8. Retention

We keep personal data only as long as needed for the purposes described in this policy, including:

• While your account or workspace is active, and for a reasonable period afterward for backups, disputes, and audit trails
• For audit and sales leads, for as long as needed to follow up on your request and maintain a business relationship record
• For billing and tax records, for periods required by applicable law
• For security and server logs, for shorter operational windows unless an investigation requires longer retention

When data is no longer needed, we delete or de-identify it, subject to legal retention requirements and residual copies in secure backups that are overwritten on a rolling schedule.

9. Security

We use reasonable technical and organizational measures appropriate to the nature of the data and our stage as a growing B2B company. These typically include HTTPS in transit, access controls, scoped credentials or tokens, least-privilege internal access, and monitoring for suspicious activity.

No method of transmission or storage is perfectly secure. We do not claim SOC 2, ISO 27001, or similar certifications on this page unless we have separately published them. If a security incident affecting your personal data occurs, we will take appropriate steps under applicable law, which may include notifying affected customers or individuals where required.

10. Cookies and similar technologies

We and our service providers may use cookies, local storage, pixels, or similar technologies to:

• Keep you signed in and remember preferences
• Maintain security and prevent abuse
• Understand how our sites and products are used (analytics)
• Measure marketing performance where enabled

You can control cookies through your browser settings. Blocking some cookies may limit certain features. Where consent is required for non-essential cookies, we will seek it in the manner required by applicable law.

11. Your rights

Subject to applicable law (including the DPDP Act for individuals in India), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of personal data, subject to legal or contractual retention needs
• Withdraw consent where processing is based on consent (this does not affect earlier lawful processing)
• Opt out of marketing communications at any time
• Raise a grievance regarding our handling of personal data

To exercise these rights, email contact@halverongroup.com with enough detail for us to verify your identity and locate your request. We will respond within a reasonable period consistent with applicable law.

If you are an end customer or contact of a Halveron customer (for example a lead stored in their CRM), please contact that business first. We may redirect your request to the relevant customer when they control the data.

12. Children’s data

Our services are designed for businesses and professionals. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

13. Third-party links

Our sites may link to third-party websites, tools, or documentation. We are not responsible for the privacy practices of those third parties. Review their policies before providing personal data.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we may provide additional notice (for example by email or an in-product message) where appropriate. Continued use of our services after an update means you acknowledge the revised policy, to the extent permitted by law.

15. Contact and grievance

For privacy questions, data rights requests, or grievances related to personal data, contact:

We will acknowledge privacy grievances and aim to resolve them promptly. If you remain unsatisfied after our response, you may have the right to escalate to the competent authority under applicable Indian law once such mechanisms are available for your case.