Privacy Policy

01 Who We Are

RyzoAi ("we", "us", "our", "RyzoAi") is an AI automation SaaS platform operated by NxtGenAi Automations, based in Patna, Bihar, India. RyzoAi provides WhatsApp Business AI automation, Instagram DM automation, Google Reviews automation, appointment booking, UPI/Razorpay payment collection, and related business automation services to Indian MSMEs ("the Service").

This Privacy Policy applies to:

• Our website at https://ryzoai.in
• The RyzoAi platform and dashboard
• All WhatsApp, Instagram, and Google Reviews automation services
• All communications between you and RyzoAi

By using RyzoAi, you agree to the collection and use of information in accordance with this policy.

02 Information We Collect

2.1 — Information You Provide Directly

• Account registration: Name, email address, phone number, business name, business category, and WhatsApp Business number
• Payment information: Billing details processed securely via Razorpay (we do not store card or UPI details — Razorpay is PCI-DSS compliant)
• Business profile data: Business address, industry type, working hours, service descriptions, FAQ content, and pricing you configure in RyzoAi
• Communications: Support tickets, emails, and messages you send to RyzoAi

2.2 — Information from Your Customers (via WhatsApp/Instagram)

When your customers message your WhatsApp Business number connected to RyzoAi, we process on your behalf:

• Customer names and WhatsApp/phone numbers (as provided by Meta's WhatsApp Cloud API)
• Message content exchanged between your customers and your AI chatbot
• Appointment booking details (name, date, time, service)
• Payment transaction references (not card/UPI credentials)
• Lead qualification responses
• Language preference detected from messages

2.3 — Automatically Collected Technical Data

• IP address, browser type, device type, and operating system
• Pages visited on ryzoai.in and time spent
• Referring website
• Dashboard usage patterns (anonymised)

03 How We Use Your Information

• Service delivery: To operate your AI chatbot, book appointments, send payment links, manage leads, and reply to Google Reviews as configured
• Account management: To create and maintain your RyzoAi account and subscription
• Payments processing: To process subscription payments via Razorpay
• Daily AI reports: To send you your WhatsApp business performance report at 8AM daily
• Customer support: To respond to your queries and resolve issues
• Platform improvement: To analyse anonymised usage data to improve RyzoAi features
• Legal compliance: To comply with applicable Indian laws, Meta's policies, and respond to lawful requests
• Security: To detect fraud, abuse, and protect the platform

04 WhatsApp & Meta Data Processing

RyzoAi connects to Meta's official WhatsApp Business Cloud API and Instagram Messaging API. This means:

• RyzoAi is an authorised Meta Business Solution Provider (BSP) using official Meta APIs only — not third-party workarounds
• All WhatsApp messages are transmitted through Meta's infrastructure. Meta's own privacy policy applies to message transmission: WhatsApp Privacy Policy
• RyzoAi stores message logs only as long as necessary to deliver your automation service and generate reports
• Every AI message sent from RyzoAi on your behalf is validated against Meta's 2026 compliance policies before sending via our Compliance Shield
• RyzoAi identifies all automated messages as business communications — we never impersonate a human
• Your WhatsApp Business number remains fully under your control. RyzoAi accesses it only through the permissions you grant in your Meta Business Manager

05 Data Sharing & Third Parties

We share data only with the following trusted service providers, and only to the extent necessary to deliver RyzoAi's services:

• Meta Platforms (WhatsApp Cloud API, Instagram API): Message transmission for your automation workflows
• Google LLC (Gemini AI API, Google Calendar API, Google Business Profile API): AI response generation, appointment sync, and Google Review replies
• Razorpay: Payment processing for your customers' UPI/card payments and your RyzoAi subscription
• n8n (workflow automation engine): Backend automation workflow processing
• Hetzner / cloud infrastructure providers: Secure server hosting in EU/India data centres
• Supabase: Database services for storing your business configuration and customer contact records

We do not sell, rent, or trade your personal data or your customers' data to any third party for marketing, advertising, or any other commercial purpose.

We may disclose data if required by Indian law, court order, or government authority — and only to the extent legally required.

06 Data Storage & Security

• Your data is stored on secure cloud servers with encryption at rest and in transit (TLS 1.2+)
• Access to production data is restricted to authorised RyzoAi engineers only
• We maintain audit logs of data access for security monitoring
• Customer conversation logs are retained for up to 90 days by default to power your dashboard analytics. You may request deletion earlier
• Account data is retained for the duration of your subscription plus 30 days after cancellation, then permanently deleted unless required by law
• Razorpay handles all payment data — RyzoAi never stores your customers' card or UPI credentials

While we implement industry-standard security measures, no system is 100% secure. In the event of a data breach that affects your data, we will notify you within 72 hours as required by India's DPDP Act 2023.

07 Your Rights Under India's DPDP Act 2023

Under India's Digital Personal Data Protection Act 2023, you have the following rights regarding your personal data:

• Right to access: Request a copy of all personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data and all associated customer data
• Right to grievance redressal: File a complaint with our Grievance Officer (details in Section 11)
• Right to withdraw consent: Withdraw your consent to data processing at any time (this will terminate your RyzoAi subscription)
• Right to nominate: Nominate another person to exercise your rights in case of death or incapacity

To exercise any of these rights, email our Grievance Officer at privacy@ryzoai.in. We will respond within 30 days.

08 Cookies & Tracking

The ryzoai.in website uses minimal cookies:

• Essential cookies: Required for the dashboard to function (session authentication)
• Analytics: We may use anonymised, aggregated analytics to understand website traffic. No personal identifiers are tracked

We do not use advertising cookies, retargeting pixels, or cross-site tracking technologies.

09 Children's Privacy

RyzoAi is a B2B business automation platform intended for use by business owners and adults aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal information, please contact us immediately at privacy@ryzoai.in and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or Meta's API requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send you a notification via WhatsApp or email at least 7 days before the changes take effect

Continued use of RyzoAi after the effective date constitutes acceptance of the updated policy.

11 Contact Us / Grievance Officer

For any privacy-related questions, data requests, or complaints, contact our designated Grievance Officer as required under India's IT Act 2000 and DPDP Act 2023: