Privacy Policy

Vypzee Privacy Policy

Last updated: 2 November 2026

1. Introduction

1.1 We respect your privacy and recognise the importance of secure transactions and information privacy. This Privacy Policy describes how IDIGIZEN PRIVATE LIMITED ("iDigizen", "we", "us") collects, uses, shares and otherwise processes personal information through Vypzee, including vypzee.com, the Vypzee apps and the WhatsApp services we provide to merchants. IDIGIZEN PRIVATE LIMITED is the registered company behind both Vypzee and retailone.ai.

1.2 By visiting Vypzee, providing your information or using our products or services, you agree to this Privacy Policy and our Terms of Service. While accessing or using our platform or services, you give explicit consent to the collection, use, sharing and other processing of your information as described in this Privacy Policy. If you do not agree, please do not access or use our platform or services.

1.3 You provide Personal Information voluntarily. Before completing any registration or using any service on our platform, you may choose not to provide Personal Information. If you do not provide information we request, registration may be incomplete and you may not be able to use our services. If you are our corporate customer, we may have a separate contract with you for non-disclosure of confidential information. This Policy does not affect that contract.

2. Application of policy

This policy applies to all contractors, suppliers, customers, users, vendors, sellers, partners and other third parties working on behalf of iDigizen or accessing or using our platforms or services.

3. Objectives of policy

iDigizen collects and uses certain information about individuals, including customers, suppliers and vendors, business contacts, employees, and third parties with whom iDigizen has a business relationship or may need to contact. This policy describes how iDigizen collects, receives, possesses, stores, deals with and handles personal information, including sensitive personal information, and makes it available for your review.

Personal information must be collected, handled and stored to meet data protection standards and legal requirements. This policy aims to comply with data protection law, follow good practice, protect the rights of the people listed above, and protect personal information from the risk of a data breach.

4. Collection of information

4.1 In carrying out its functions and activities, iDigizen collects information from individuals and third parties, and generates information, which is stored on our platform.

4.2 We collect Personal Information when you interact with us through our services, for example when you install, access or use our services, create an account, or interact with merchants through Vypzee.

4.3 When you register for or use our services, you may be asked for your name, residential address, email address, phone number and similar personal information ("Personal Information").

4.4 Information that merchants and their customers share through WhatsApp is described in Section 8.

5. Usage of information

This section does not cover information we receive through WhatsApp. Section 8 describes how we use that.

We use Personal Information:

5.1 To provide services.

5.2 To personalise our service offerings.

5.3 For operation and maintenance.

5.4 To operate, provide, improve, understand, customise, support and market our services.

5.5 Personal Information is kept confidential and used for our research, marketing, strategic client analysis and other internal business purposes only. We do not sell Personal Information.

5.6 When you transact with specific merchants on Vypzee for loyalty, coupon downloads and similar services, we share the relevant Personal Information with those merchants.

5.7 We do not use your mobile phone number or other personally identifiable information to send commercial or marketing messages without your consent, except as part of a specific programme or feature that you can opt in to or out of. We may use cookies and log file information to (a) remember information so that you do not have to re-enter it on your next visit; (b) provide custom, personalised content and information; (c) monitor pages viewed; and (d) track your entries, submissions and views.

6. Protection of Personal Information

6.1 We are committed to protecting your Personal Information. We do not sell, share or lease your Personal Information to third parties for marketing or promotional purposes without your explicit consent. If you voluntarily give your Personal Information to a third-party business through our platform, that business's privacy policies and practices may apply.

6.2 By engaging with a third-party business on our platform and giving it your Personal Information, you consent to its use of your information for marketing and promotional purposes under its privacy policy.

6.3 iDigizen cannot guarantee or control how third-party businesses use your Personal Information. If you have concerns about how a third-party business uses your Personal Information, please contact that business directly. iDigizen is not liable for how a third party uses your Personal Information.

7. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, the Grievance Officer's details are:

Mr. Amit Garg
Address: E 251A, Sushant Lok I, Opp Paras Hospital, Gurgaon, Gurugram, Haryana 122009
Email: privacy@vypzee.com
Phone: +91 98187 83337

8. WhatsApp Business messaging for merchants

8.1 Who this applies to. This section applies to merchants who connect their WhatsApp Business app number to Vypzee ("Merchants"), and to people who message those Merchants on WhatsApp ("Customers"). If you message our own WhatsApp number, we are the business you are messaging, and we use your messages only to reply to you and provide our services.

8.2 Our role. When a Customer messages a Merchant that uses Vypzee, the Merchant is responsible for that conversation. We process it on the Merchant's behalf and on its instructions, as its service provider. The Merchant's own privacy practices also apply. WhatsApp's own processing is covered by WhatsApp's Privacy Policy.

8.3 Information we receive.

From Merchants:

  • name, business name, contact email and phone number;
  • WhatsApp Business number, and the identifiers of the Merchant's Meta business portfolio and WhatsApp Business Account;
  • access tokens issued by Meta, which we store encrypted.

Merchants connect through Facebook Login for Business. We do not collect or store their Facebook profile information; we receive only the WhatsApp Business details and access tokens listed above.

About Customers, through the Merchant's WhatsApp account:

  • WhatsApp profile name and phone number;
  • messages, photos, files and other media exchanged with the Merchant, including replies the Merchant sends from the WhatsApp Business app;
  • message details such as time sent and delivery and read status;
  • with the Merchant's permission when it connects, the Merchant's WhatsApp Business app contacts and up to 6 months of past one-to-one chat history.

We do not receive group chats or calls.

8.4 How we use it. We use this information only to provide Vypzee to the Merchant whose account it came from. Until we have set up the Merchant's account on Vypzee, we only store this information and send nothing from the Merchant's number. We use it:

  • to draft and send automated replies on the Merchant's behalf using AI; when the Merchant replies personally, automated replies pause for that conversation;
  • to show conversations in the Merchant's Vypzee inbox;
  • to give the Merchant reports and insights about its own customer enquiries;
  • to send messages the Merchant chooses to send, including WhatsApp message templates;
  • to keep the service secure, prevent abuse, fix problems and meet legal obligations.

8.5 What we do not do. We do not:

  • use WhatsApp information for our own purposes, for our own marketing, or for any advertising, including Meta's advertising and measurement tools;
  • combine one Merchant's WhatsApp information with another Merchant's, or use it to build profiles of individual WhatsApp users;
  • share, sell or license it to any other merchant, mall or third party, including in anonymous, aggregated or derived form, except to the service providers in 8.6.

8.6 Service providers. We share WhatsApp information only with providers that process it on our instructions to run Vypzee:

  • Meta, which operates the WhatsApp Business Platform;
  • Amazon Web Services (AWS), which hosts our servers and stores data in Mumbai, India;
  • OpenAI, which processes message content to generate replies under terms that do not allow it to train on that content, and which may process it outside India.

If we add a service provider, we add it to this list before it receives any WhatsApp information.

8.7 Security. We encrypt information in transit, store access tokens encrypted, and limit access to staff who need it to run the service.

9. How long we keep information

  • WhatsApp information from a Merchant's account: kept until the Merchant asks us to delete it, including after the Merchant disconnects from Vypzee, so that the Merchant can reconnect without losing its history. When the Merchant asks, we delete it within 30 days, unless the law requires us to keep it longer.
  • A Customer's information: if a Customer asks us to delete their information, we delete it from the relevant Merchant's account within 30 days, working with the Merchant.
  • Backups: cleared within a further 30 days after deletion.
  • Merchant account details: kept until the Merchant asks us to delete them. We keep invoices and other records the law requires for as long as it requires.

10. Your choices and rights

  • Merchants can disconnect Vypzee at any time in the WhatsApp Business app (Settings → Account → Business Platform → Disconnect). Disconnecting does not delete data; to delete it, Merchants can ask us at any time. Merchants can also ask us to export their data.
  • Customers who messaged a Merchant can ask that Merchant, or us, to access, correct or delete their information. We act on such requests together with the Merchant. You can also block a business in WhatsApp to stop its messages.
  • Everyone can ask to access, correct or delete their Personal Information, withdraw consent, or raise a grievance by writing to the Grievance Officer in Section 7. We respond within 30 days.
  • To request deletion, follow the steps at vypzee.com/data-deletion.

11. Changes to this policy

We may update this policy from time to time. When we do, we change the "Last updated" date. For material changes, we tell Merchants by email or in the app before the changes take effect.