Privacy Policy

1. Who We Are

Quvix is operated by Exceller Management Consultancy LLP (LLPIN AAY-7300, GSTIN 27AAJFE3496P1ZM), 1001, 1002 & 1003, 10th Floor, Mohan Tribeca, Kalyan Sape Road, Gandhar Nagar, Kalyan, Thane, Maharashtra 421301, India. In this policy, "we" means that LLP.

2. Two Kinds of Data, Two Different Roles

If you are a customer of a business that uses Quvix and want your data corrected or deleted, contact that business; they control it. If you cannot reach them, write to support@exceller.tech and we will pass the request on.

3. What We Collect

When You Contact Us or Book a Demo Through This Website

• Your first and last name, work email, company, and phone number if you give it
• Your message, or what you would like to see in a demo
• For a demo, the time you booked. We put it in our team's calendar and send you an invitation with a video meeting link

When You Sign Up for and Use Quvix

• Your name, work email address and a hashed password
• Your organisation's name, and billing details you enter: legal name, address, GST number and PAN where applicable
• Credentials you connect, such as WhatsApp Business access tokens and integration credentials
• Operational records: sign-in times, IP address, actions taken in the product, and usage counts for billing

When Your Customers Message Your Agents

• The content of their messages and your agents' replies
• Their WhatsApp phone number, and their name as WhatsApp provides it
• Any name, email address or other detail they give in a conversation, or that your agent is set up to collect
• On the website widget: an anonymous visitor identifier that keeps a conversation continuous across page loads, and the mobile number if the widget asks them to verify it

We do not ask for sensitive data such as health, financial or biometric information. Because conversations are free text, a customer may volunteer it anyway, so set up your agents not to ask for it.

4. Why We Process It

• To provide the service: deliver messages, generate replies, and keep conversation history so an agent has context
• To answer your enquiry or hold the demo you booked, when you contact us through this website
• To bill you: meter AI credit usage and issue GST invoices
• To keep the service secure: rate limiting, abuse detection, and stopping runaway automated exchanges
• To support you: investigate problems you report
• To meet legal obligations: tax records and lawful requests

We do not sell personal data, and we do not use your customers' conversations to train AI models, ours or anyone else's.

If you sign up for Quvix, or ask for product news when you contact us, we may email you about Quvix, such as product updates and offers relevant to you. We do not send marketing emails to people who contact us without asking for them. Every marketing email has an unsubscribe link, and you can also opt out by writing to support@exceller.tech; service and billing emails continue while you have an account.

Our Legal Grounds

Depending on the purpose, we rely on:

• Your consent, given when you sign up, contact us or opt in, which you can withdraw at any time
• Our contract with you, to provide the service and bill you
• Legitimate uses permitted by law, such as keeping the service secure, preventing fraud and following up on an enquiry you made (under the GDPR, our legitimate interests)
• Legal obligations, such as keeping tax records

5. Who Else Processes It

Running Quvix means passing data to these kinds of service providers, each only for the purpose stated. This covers every one we use. Business customers can ask us for the names of the providers in each category.

6. Where Data Is Stored

Quvix runs on Amazon Web Services (AWS) in Mumbai, and your data is stored in India. Some processing happens outside India because of how the service works: WhatsApp messages pass through Meta's global infrastructure, and the providers marked "Global" above may process data outside India.

If you use Quvix from outside India, your data, and your customers' data, is transferred to and stored in India. Where the EU or UK General Data Protection Regulation applies, we protect that transfer with the European Commission's Standard Contractual Clauses, with the UK addendum and Swiss adjustments where relevant. They are built into our Terms of Service (section 10), and we will give you a copy on request.

7. How Long We Keep It

8. How It Is Protected

• Encrypted in transit and at rest
• Connected credentials, such as WhatsApp tokens and integration secrets, are separately encrypted with a dedicated key
• Each workspace's data is isolated, and every query is scoped to a single organisation
• Passwords are hashed and never stored in readable form

No system is perfectly secure. If a breach affects your data, we will tell you, the Data Protection Board of India, and any other authority the law requires, within the time the law sets. Our Security page summarises how we protect data, and business customers can ask us for full details.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Tell you what personal data we hold about you and how we use it
• Correct or complete anything inaccurate
• Delete your data, apart from records we must legally keep
• Withdraw consent where we rely on it
• Act on behalf of someone you nominate, if you cannot

Account holders can export their workspace data from the product. For any other request, including deletion, write to support@exceller.tech from the email address we hold for you, so we can confirm it is you. We complete deletion requests within 30 days and reply to other requests within 30 days. If you are not satisfied, you can escalate to our Grievance Officer (section 12).

If You Are in the European Union, the United Kingdom or Elsewhere

Depending on where you live, you may also have the right to restrict or object to our processing, including for direct marketing, and to receive your data in a portable format. Write to support@exceller.tech to use any of these rights; we will not treat you differently for doing so. If you are in the EU or UK, you may also complain to your local data protection authority.

If you are a customer of a business that uses Quvix, that business decides how your data is used, so send your request to them first (see section 2).

10. Cookies and Browser Storage

Our Cookie Policy lists every cookie and storage entry, with how long each lasts. In summary:

This website sets no cookies and runs no analytics or advertising. It only remembers, in your browser, that you closed the cookie notice.

When you send a message or book a demo, our bot protection provider checks, in a small frame of its own, that a person is sending the form. It may keep strictly necessary security data in your browser for this. It is not used to track you or for advertising.

In the Quvix app:

• Two cookies keep you signed in: one for 30 minutes, one for 30 days. They also protect requests from forgery. Blocking them prevents sign-in.
• Your browser remembers interface choices, such as a collapsed sidebar and dismissed notifications.
• When you connect WhatsApp, Meta's sign-up script loads from Meta and is governed by Meta's own privacy policy.
• The app's font is loaded from Google Fonts, which receives your IP address.

The website chat widget keeps an anonymous visitor identifier and the current conversation in the visitor's browser, so the chat continues across pages. It is not used for tracking or advertising.

11. Children

Quvix is a business product. Account holders, their teams, and anyone who contacts us through this website must be 18 or over, and we do not knowingly collect children's data for our own purposes.

Some businesses that use Quvix, such as schools and coaching institutes, may talk to children. That business decides what is collected and is responsible for obtaining a parent's or guardian's consent where the law requires it. We process that data only on its instructions, and never use it for tracking, profiling or advertising. If you believe a child's data has reached us without proper consent, contact us and we will work with the business to delete it.

12. Grievance Officer

Under the Digital Personal Data Protection Act, 2023, you can raise any concern about how we handle your data with our Grievance Officer:

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

13. Changes

If we change this policy materially, we will tell account holders by email or in the product before it takes effect. The effective date at the top of this page always reflects the current version.

14. Contact