Privacy Policy

Welcome to Repdo ("we", "our", or "us"). We provide an automated customer retention and reminder service for neighborhood retail businesses and local service providers in India (such as pharmacies, salons, gyms, student hostels, tutoring centers, and vehicle repair shops).

This Privacy Policy explains how personal data is collected, processed, stored, and protected in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Roles Under the DPDP Act

In the context of the DPDP Act:

• Shop / Business Owner (Data Fiduciary): The store or business subscribing to Repdo determines the purpose of managing their recurring customer relationship and enters customer details.
• Repdo (Data Processor): We process personal data solely on behalf of, and as instructed by, the subscribing business to dispatch scheduled WhatsApp reminders and record replies.
• End-Customer (Data Principal): The individual receiving the scheduled WhatsApp refill, renewal, or service reminder.

2. What Data We Collect and Store

We believe in strict data minimization. We only collect data that is technically necessary to send polite reminder messages:

Category	Data Fields	Purpose
Shop Owner Details	Owner name, store trade name, phone number, email address, billing address, and subscription status.	Account setup, billing, customer support, and sender identification.
Customer Contact Details	Customer given name, active WhatsApp phone number (+91).	Routing scheduled reminder messages directly to the customer's WhatsApp.
Reminder & Schedule Data	Recurring cycle interval (e.g., 30 days), scheduled due date, consent timestamp.	Triggering notifications at the scheduled interval.
Internal Item Notes	Product or service label for internal shop use (e.g., "Monthly BP Medicine pack", "Haircut Routine", "Gym Renewal").	Displaying context to the shop counter and personalizing the reminder message.

What We Do NOT Collect: We never collect bank account details, UPI PINs, Aadhaar numbers, detailed patient medical records, diagnostic reports, or website tracking cookies. This marketing website contains zero analytics trackers and zero third-party advertising cookies.

3. Lawful Basis and Customer Consent

Under the DPDP Act, personal data of end-customers is processed based on explicit, informed consent:

• The merchant is required to confirm that the customer consented to receive scheduled WhatsApp reminders when registering their details at the counter.
• Repdo records the consent status timestamp.
• Instant Opt-Out / Withdrawal: Every customer can reply STOP, UNSUBSCRIBE, or NO at any time. When an opt-out keyword is received, Repdo automatically halts future reminders for that phone number.

4. Data Retention and Deletion

We retain customer reminder records only for as long as the merchant's account remains active and the reminder cycle is operational:

• If a customer opts out, their reminder schedule is permanently deactivated.
• If a business owner terminates their subscription, all associated customer records can be exported and will be securely purged within 30 days of account closure.
• Any customer or shop owner can file an expedited deletion request through our Data Deletion Request Page or by emailing hello@repdo.in.

5. Data Security Measures

We take reasonable and appropriate technical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal data:

• All communication between your browser/app and Repdo servers is encrypted using Transport Layer Security (TLS 1.3).
• All database storage volumes are encrypted at rest (AES-256).
• Role-based access controls ensure that store staff only view customers assigned to their specific business branch.
• We do not sell, rent, or trade customer contact lists to any third party for marketing or advertising purposes.

6. Best-Effort Delivery Disclaimer

WhatsApp messages and notifications are transmitted through telecom carriers and third-party messaging infrastructure (including Meta / WhatsApp Business API). While Repdo maintains automated queuing algorithms, delivery is provided on a best-effort basis and can be subject to network downtimes, recipient device status, or carrier constraints. Reminders must not be treated as a sole emergency alert system for critical, life-threatening medication schedules.

7. Rights of the Data Principal

Under the DPDP Act 2023, every individual has the right to:

• Right to Access: Request a summary of personal data being processed.
• Right to Correction & Erasure: Request correction of inaccurate information or complete deletion of contact details.
• Right of Grievance Redressal: Contact our Grievance Officer regarding any data protection concerns.
• Right to Nominate: Nominate another individual to exercise data rights in the event of death or incapacity.

8. Grievance Officer & Contact Information

In accordance with the DPDP Act 2023 and the Information Technology Rules, our designated Grievance Officer details are provided below:

9. Updates to this Policy

We may periodically update this policy to reflect enhancements in our product or changes under Indian law and DPDP Act rulemaking. The revised date will always be visible at the top of this document. Continued use of Repdo constitutes acceptance of updated terms.