Yaalgo (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including integrations with Amazon, Meta (Facebook and Instagram), and other third-party services. This policy is compliant with the Information Technology Act, 2000 (India), the General Data Protection Regulation (GDPR, EU), the Amazon Developer Policy, and the Meta Platform Terms.

1. Information We Collect

• Personal identification information (Name, Email, Mobile, Aadhar, PAN, GST, Bank Account, etc.)
• Business information (Brand, GST, Bank details, etc.)
• Amazon account data (via OAuth, as authorized by you)
• Advertising content and audience criteria you supply for campaigns you ask us to run on Meta (Facebook and Instagram), and the aggregate delivery statistics Meta reports back
• Mobile numbers used to deliver WhatsApp notifications through Meta’s WhatsApp Business service
• Payment and transaction data (processed via Razorpay and wallet services)
• Usage data, device information, and cookies
• AI-generated or processed data (e.g., product/category suggestions, image analysis)

Additional Data Collection and Retention

• Personally Identifiable Information (PII) is collected and used solely for service provision and is retained for less than 31 days.
• PII used includes buyer name, address, phone, and email.
• Purpose of PII usage includes shipping labels, carrier SMS, and GST invoice generation.
• Retention duration for PII is under 31 days.
• Privacy and security controls are implemented as per our policy to protect your data.
• We collect data from non-Amazon sources including supplier ERPs and payment processors to facilitate our services.

2. How We Use Your Information

• To provide, operate, and maintain our services
• To process payments and manage wallets
• To facilitate integrations with Amazon, Meta, and other platforms
• To create, run, and bill advertising campaigns on Meta at your request
• To improve our AI-powered features and services
• To comply with legal obligations (Indian IT Act, GDPR, etc.)
• For customer support and communication

3. Data Sharing and Disclosure

• With Amazon and other third-party platforms, as authorized by you
• With Meta, where you ask us to advertise on Facebook or Instagram (your ad content and audience criteria), and where we send you or your customers a WhatsApp notification (phone number and message content) — both described in section 4
• With payment processors (e.g., Razorpay) for transaction processing
• With service providers for analytics, hosting, and AI processing
• As required by law or to protect our rights

4. Meta (Facebook, Instagram, and WhatsApp)

We use two separate Meta services, and they involve different data. Advertising is described first; WhatsApp notifications are described at the end of this section.

Advertising on Facebook and Instagram

Sellers on Yaalgo can ask us to run advertising campaigns for their products or storefront on Facebook and Instagram. We run these campaigns from an advertising account owned and operated by Yaalgo. You do not connect a Facebook, Instagram, or Meta advertising account to Yaalgo, and we never ask for, receive, or store your Meta login credentials.

What we send to Meta

• The advertising content you provide: headline, ad text, image, and the Yaalgo product or storefront page the ad links to
• The audience criteria you choose: age range, gender, cities or states within India, interest categories, and where the ad may appear (Facebook or Instagram, feed, stories, or reels)
• Your campaign schedule and daily budget

These audience criteria describe a category of people, not any individual. For advertising purposes we do not upload customer lists, email addresses, phone numbers, or any other personal information to Meta, and we do not build custom or lookalike audiences from your customer data. Personal data is shared with Meta only through WhatsApp notifications, described below, and is never used to target ads.

What we receive from Meta

• Aggregate delivery statistics for your campaigns only: amount spent, impressions, clicks, and reach, reported per day
• The status of your campaign and any policy decision Meta makes about it

We do not receive, and cannot see, any personal information about the people who viewed or clicked your ads. Meta reports counts and totals, never identities. These figures are shown to you in your Yaalgo dashboard and are used to bill your wallet for the advertising spend your campaign actually incurred.

Facebook Login

Yaalgo does not offer Facebook Login and does not request, collect, or process any Facebook or Instagram profile information about you or anyone else.

WhatsApp notifications

Where WhatsApp messaging is enabled on our platform, we use the WhatsApp Business Cloud API, which is operated by Meta. Sending a WhatsApp message necessarily discloses personal data to Meta: we transmit the recipient’s phone number and the content of the message to Meta so that it can deliver it.

• Messages we may send this way include account welcome messages when you register, order confirmations, password reset messages, and shipment and delivery updates
• The data sent is the recipient’s phone number in international format and the message text, which may include an order or shipment reference
• Recipients include partners who register on Yaalgo and customers receiving order or delivery updates

Meta processes this data as a provider of the WhatsApp Business service under its own terms. It is used only to deliver the message concerned. It is not used to target advertising, is not combined with the advertising activity described above, and is not uploaded as an audience.

Retention and deletion

Campaign records and their daily delivery statistics are retained for as long as your Yaalgo account is active, because they form part of your billing and invoicing history and we are required to keep those records. Stopping a campaign from your dashboard asks Meta to end delivery straight away; if Meta does not confirm that request, we retry it automatically until it does, and your reserved budget stays held until delivery is confirmed stopped. To request deletion of your advertising or messaging data, contact us at support@yaalgo.com and we will delete it except where retention is required by law, such as for tax and GST records.

5. International Data Transfers

Your data may be processed and stored in India, the European Union, or other jurisdictions. We ensure adequate safeguards for international transfers as required by GDPR and Indian law.

6. Your Rights

• Access, correct, or delete your personal data
• Withdraw consent for data processing (where applicable)
• Object to or restrict certain processing activities
• Data portability (EU/EEA residents)
• File a complaint with a supervisory authority (EU/India)

7. Data Security

We implement industry-standard security measures to protect your data. However, no method of transmission or storage is 100% secure.

8. Children’s Privacy

Our services are not intended for children under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated effective date.

10. Contact Us

For questions or requests regarding your privacy, contact us at support@yaalgo.com.