1. Important Relationship Clarification (SaaS Business Model)

• dissolveX as a Data Controller: We act as a Data Controller for the personal data of our direct subscribers (businesses signing up for our services, billing contacts, and account users).

• dissolveX as a Data Processor: We act as a Data Processor for any data processed within your automated workflows, including incoming customer emails (Gmail), WhatsApp messages (Meta Cloud API), attendance logs, and payroll data. You (our client) are the Data Controller of your customers' and employees' data and are solely responsible for obtaining the necessary consents to process their information.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Name, business name, email address, phone number, physical address, and payment credentials when signing up for our subscription plans.

• Integrations Credentials: Encrypted access tokens, API keys, and connection credentials you provide to link third-party apps (e.g., Google OAuth tokens, Meta API keys, OpenAI credentials).

2.2 Workflow and Automated Data (Processed on Your Behalf)

• Communication Payloads: Inbound and outbound email contents, WhatsApp chat messages, and attachments routed through your automated workflows.

• HR & Operational Data: Attendance logs, check-in/out timestamps, employee names, and payroll transaction data managed within your HR modules.

• Variables & Metadata: Dynamic custom variables extracted from incoming chats/emails to populate invoice templates or trigger other workflow actions.

2.3 Automated Usage Data

• IP addresses, browser types, device information, system logs, and general usage analytics of our dashboard to optimize performance and prevent abuse.

3. How We Use Your Information

We use the collected data to provide, maintain, and secure our automated Services:

• Chatbot Operations (WhatsApp & Web): To manage customer support queues, automate responses, and route inbound chats.

• Marketing & Email Automation: To draft, schedule, and send transactional or promotional emails on your behalf.

• Attendance & HR Management: To log clock-in timestamps, generate attendance history, and calculate employee payroll.

• Invoice Generation: To dynamically generate B2B invoicing documents by mapping variables to your saved templates.

• System Improvements: To debug workflow engines, optimize latency, and prevent security breaches.

4. Google API Services User Data Policy (Google OAuth)

Our Services include features that allow you to connect your Google account via OAuth.

• Limited Use Compliance: Dissolvex Technologies Private Limited use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• No AI Training: We do not use Google user data to train, tune, or improve artificial intelligence or machine learning models.

• No Sharing/Selling: We do not sell or share Google user data with any third-party advertising networks or data brokers. Google data is accessed and stored strictly to run your authorized workflow automations (e.g., sending emails via your Gmail integration).

5. Data Sharing & Third-Party Sub-processors

We do not sell, trade, or lease your personal data. We only share information with trusted third-party sub-processors essential to executing your workflows:

• Meta Platforms, Inc.: Message payloads are transmitted to Meta's Cloud API servers to send and receive WhatsApp messages.

• AI Providers (OpenAI, L.L.C. & Ollama): Text prompts are processed by AI models to extract details, translate messages, or draft replies. We configure these connections to prevent the use of your workflow data for public model training.

• Cloud Infrastructure & Databases: Encrypted data is hosted on secure cloud providers (e.g., MongoDB Atlas, AWS) subject to strict confidentiality agreements.

• Legal Requirements: We may disclose information if required to do so by law, or to protect the safety and rights of our users or the public.

6. Data Security

We implement robust, industry-standard administrative, technical, and physical security measures:

• All network traffic is encrypted using Secure Socket Layer (SSL/TLS) protocols.

• Third-party API keys and OAuth refresh tokens are encrypted at rest using strong AES-256 encryption.

• Multi-tenant data segregation is enforced at the database level to prevent cross-account leaks.

7. Your Rights & Choice

Depending on your jurisdiction (such as GDPR or CCPA guidelines), you may have the right to:

• Access, correct, or update the personal information associated with your account.

• Request the complete deletion of your account and associated API integrations.

• Restrict or object to the processing of your data.

To exercise these rights, please contact us at support@dissolvex.in.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services or legal requirements. When updates are made, we will change the "Last Updated" date at the top of this page. We encourage you to review this policy regularly.