Privacy Policy

1. Information We Collect

Dreamwell Technologies Private Limited collects the following categories of personal information when you use our services or visit our website:

• Identity Data: Your name, email address, phone number, and company name provided during registration, checkout, or contact forms.
• Payment Data: Payment processing is handled by Stripe. We do not store your credit card or bank details. Stripe collects and processes payment information in accordance with PCI-DSS standards.
• Usage Data: Information about how you use our services, including page views, session duration, device type, browser, and IP address collected via cookies and session storage.
• Communication Data: Messages exchanged via WhatsApp, email, or our website chat widget for support and service delivery.
• Business Data: Data you input into our products (invoices, inventory, customer records) as part of using our services.

2. How We Use Your Information

• To provide, maintain, and improve our services.
• To process payments and send billing-related communications.
• To respond to your enquiries and provide customer support.
• To send service updates, security alerts, and administrative messages.
• To monitor usage patterns and optimize product performance.
• To comply with legal obligations under Indian law.

3. Parties to Whom We Disclose Information

We share your information only with the following third parties as necessary to deliver our services:

• Stripe: For secure payment processing. Stripe's privacy policy applies to payment data. (stripe.com/privacy)
• Meta / WhatsApp Business API: For delivering WhatsApp bot services and support communications.
• Cloud Infrastructure Providers: Hetzner Online GmbH for secure server hosting in compliance with applicable data protection laws.
• AI Service Providers: To power the AI features in our products (chat, analytics, automation).

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Method of Disclosure

Your data is shared with third parties solely through encrypted API connections (HTTPS/TLS 1.2+) and secure database transfers. No data is shared via unsecured channels. Third-party providers are contractually obligated to maintain equivalent security standards.

5. Security Practices

We implement the following security measures to safeguard your information:

• Encryption: All data in transit is encrypted via TLS 1.2+ (HTTPS). Data at rest is encrypted on our servers.
• Access Control: Only authorized personnel have access to customer data, with role-based access controls in place.
• Secure Infrastructure: Hosted on Hetzner cloud servers with firewall protection, regular security updates, and monitoring.
• Payment Security: All payment processing is PCI-DSS compliant via Stripe. We never store card details on our servers.
• Session Management: Website sessions use secure session storage that expires when you close your browser.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account cancellation, data is retained for 30 days to allow for reactivation, after which it is permanently deleted. You may request data export before cancellation at no cost.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, you have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for data processing.
• Nominate another person to exercise these rights on your behalf.

8. Cookies & Tracking

We use essential cookies to maintain your session and website functionality. We also collect anonymous analytics data (page views, device type, session duration) to improve our services. You can disable cookies in your browser settings, though some features may not work properly.

9. Contact