Privacy Policy
This policy explains what personal data RNR VENTURES ("RNR", "we", "us"), GSTIN 06AOHPC7110C1ZO, B054, AIPL The Peaceful Homes, Sector 70A, Gurgaon, Haryana 122101, India, collects through NavDoot, why, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1. Who this applies to
- Website visitors of navdoot.com.
- NavDoot businesses ("merchants"): businesses that use NavDoot to message their customers, and their staff.
- Customers of NavDoot businesses: people who receive WhatsApp messages from a business through NavDoot.
2. Data we collect
| Who | Data | Why |
|---|---|---|
| Website visitors | None beyond standard server logs (IP address, browser, time). We use no advertising or tracking cookies. | Security and keeping the site running |
| NavDoot businesses and their staff | Name, business name, phone number, email, WhatsApp Business account details, billing details, subscription and payment records (we do not store card or bank account numbers; Razorpay handles them) | Providing the service, login, billing, invoicing, support |
| Customers of NavDoot businesses | Name and phone number provided by the business or by the customer, WhatsApp profile name, opt-in and opt-out records (including where they joined), messages sent and received, delivery and read status, discount codes issued and used | Sending the business's messages, honouring opt-outs, join offers, reports for the business |
3. Our role for customer data
When a business uses NavDoot, the business decides whom to message and why, and is the Data Fiduciary for its customers' data. RNR processes that data only on the business's instructions, as a Data Processor. Each business's customer data is kept separate and is never shared with or used for any other business.
Businesses must message only customers who have agreed to receive messages from them. Every recipient can stop messages at any time by replying STOP, or by using the opt-out option in the message.
4. Legal basis
We process personal data on the basis of your consent, or for legitimate uses permitted by the DPDP Act, such as providing a service you asked for, complying with law (for example GST records), and preventing fraud.
5. Service providers we use
We share data only with providers needed to run NavDoot, under their own security and privacy terms:
- Meta Platforms (WhatsApp Business Platform) — to send and receive WhatsApp messages.
- Supabase — database, login and file storage.
- Google (Google Cloud and AI Studio hosting; Gemini for optional document import and report writing in industry tools) — app hosting and processing.
- Netlify — hosting of this website.
- MSG91 — SMS one-time passwords for login.
- Razorpay and other payment providers — to collect payments, including auto-pay for NavDoot plans.
We do not sell personal data. We may disclose data when required by law or a lawful order.
Requests from public authorities. If a government body, court or law-enforcement agency asks us for personal data, we check that the request is in writing, has a valid legal basis and comes from an authority entitled to make it. We challenge or refuse requests that are unlawful or too broad, disclose only the minimum data the request requires, and keep a record of every request and our response. Unless the law or the order prohibits it, we inform the affected business (and, through the business, the customer) before disclosing.
6. Where data is stored
Data is stored with the cloud providers above on servers in India and in other countries, including Singapore. Where data is transferred outside India, we do so as permitted under the DPDP Act.
7. How long we keep it
- Account and billing records: while your account is active, and invoices and tax records for the period required by law.
- Message content: 12 months by default, or as the business sets.
- Opt-in and opt-out records: as long as needed to prove consent and honour opt-outs.
8. Your rights
You can ask us to access, correct, update or erase your personal data, withdraw consent, or nominate someone to act for you. Withdrawing consent does not affect processing already done. If you are a customer of a NavDoot business, you may contact the business directly or write to us and we will pass your request to the business.
9. Data deletion
To delete your data:
- Email ops@rikshalogistics.in with the subject "Data deletion request".
- Include your name, the phone number linked to your data, and the business name if you are a customer of a NavDoot business.
- We will confirm the request and complete it within 30 days, except records we must keep by law (such as tax invoices).
To stop messages only, reply STOP to any message.
After a customer's data is deleted, we keep only a one-way coded form of the phone number (not the number itself) so that the business cannot message that number again by mistake. The customer can rejoin at any time by messaging the business on WhatsApp.
10. Security
We use access controls, encrypted connections, private storage, and separation of each business's data. No system is completely secure; we will notify affected users and authorities of a personal data breach as required by law.
11. Children
NavDoot is for businesses and adults. We do not knowingly collect data from anyone under 18, except where a business such as a therapy centre records information about a child with a parent's recorded consent, as that business's Data Processor.
12. Grievance Officer
For questions or complaints about your data, contact our Grievance Officer:
Grievance Officer, RNR VENTURES
B054, AIPL The Peaceful Homes, Sector 70A, Gurgaon, Haryana 122101
Email: ops@rikshalogistics.in · Phone: +91 91679 17437
We aim to respond within 7 days and resolve within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
13. Changes
We will post any changes on this page with a new effective date, and notify active users of significant changes.