Privacy Policy Techpullers Technology Solutions Pvt Ltd

1. Who we are

Techpullers Technology Solutions Pvt Ltd
10C, Trans Asia Cyber Park, Infopark SEZ, Phase II, Ambalamedu P.O., Kochi, Keralam 682303, India

Website: https://techpullers.com
Email: info@techpullers.com
Phone: +91 98951 56580

We are a full-service digital marketing agency offering search engine optimisation, Google Ads and performance marketing, social media marketing, content marketing, web design and development, mobile app development, and AI automation.

Under the DPDP Act we act as a Data Fiduciary: we determine how and why personal data is processed, and we are responsible for protecting it. When we work inside a client’s own systems, we generally act as a Data Processor on that client’s instructions.

2. Information we collect

2.1 Information you give us

When you submit an enquiry form on our website, we collect your name, email address, phone number, company name, website address, the services you are interested in, your subject line, and the content of your message.

You may also share project requirements, business details, or anything else you choose to include in forms, emails or calls.

2.2 Information collected automatically

When you visit our website, technical data is collected automatically: IP address, browser type and version, device type, operating system, referring website, pages visited, time spent on each page, and the date and time of your visit. This is used in aggregate to keep the site secure, understand how it is used, and improve it.

2.3 Job applications and recruitment

When you apply for a role through our careers pages, we collect the information you submit in the application form: your name, email address, phone number, current location, LinkedIn profile, education, work experience, portfolio links, your cover letter, your answers to the role-specific questions, and any CV or supporting file you upload.

Applications are sent to our HR mailbox and are used only to assess your suitability for the role you applied for and, where relevant, other openings at Techpullers. We do not share applications outside our hiring team, and we do not use them for marketing.

A CV often contains more than we ask for — a photograph, date of birth, home address or family details. Please include only what you are comfortable sharing; none of it is required for us to consider your application.

2.4 Client account access

If you are a client, we may access or store data relating to your website, analytics accounts, advertising platforms, search console or content — strictly to deliver the services we have agreed, under your instruction, and only for as long as our engagement requires.

If your business uses our WhatsApp, Facebook or Instagram apps, section 21 explains the data those apps handle, including the data of people who message your business.

2.5 What we do not collect

We do not ask for sensitive personal data such as financial account details, government identifiers, health information or biometric data, and we do not knowingly collect it through this website. Please do not send such information through our contact forms. If you are applying for a role, see section 2.3 — share only what you are comfortable including in your CV.

3. Cookies and tracking technologies

We keep third-party tracking on this website to a minimum. The services below are the only ones that receive data when you visit:

Managing cookies. You can control or delete cookies at any time through your browser settings. Blocking necessary cookies may stop parts of the site working — in particular, our contact forms may not submit without reCAPTCHA.

You can opt out of Google Analytics entirely using Google’s official browser add-on at tools.google.com/dlpage/gaoptout.

We do not use social media tracking pixels on this website. Our advertising measurement is limited to our own Google Ads campaigns, and we request non-personalised ads from Google on this site. We do not build advertising profiles from your browsing behaviour, and we do not share it with data brokers.

4. How we use your information

• To respond to you — answering enquiries, preparing proposals and quotes.
• To deliver our services — carrying out the work we have agreed, and reporting on it.
• To improve our website — understanding which content is useful and where visitors struggle.
• To market our own services — sending relevant updates where you have agreed to receive them. You can unsubscribe at any time.
• To consider your job application — assessing candidates and running our hiring process.
• To keep the site secure — detecting and preventing spam, abuse and attacks.
• To meet legal and accounting obligations — maintaining records required by Indian law.

We do not sell your personal data. We do not share it with third parties for their own marketing.

5. Our legal basis, your consent, and how to withdraw it

Under the DPDP Act we process personal data either with your consent, or for a “legitimate use” permitted by the Act.

• Consent — when you submit an enquiry form, apply for a role, or agree to receive marketing from us. By submitting a form you consent to us using those details to respond to you.
• Legitimate use and legal obligation — keeping our website secure, performing a contract we have with you as a client, and maintaining the accounting and statutory records Indian law requires us to keep.

Withdrawing consent. You can withdraw your consent at any time by emailing our Grievance Officer (section 15). Withdrawing is as simple as giving consent in the first place, and there is no charge. When you withdraw, we stop the processing that relied on that consent — though we may keep the minimum records we are legally obliged to keep, and withdrawal does not undo processing already carried out.

6. Who we share information with

We share personal data only with service providers who help us operate, and only to the extent needed:

• Hosting and infrastructure providers, including Cloudflare — to run, deliver and secure this website.
• Google — reCAPTCHA for form protection, and Google Analytics, Google Tag Manager and Google Ads for website measurement and campaign reporting.
• Meta Platforms (WhatsApp) — where you choose to contact us using the WhatsApp button on our site, and to run the WhatsApp, Facebook and Instagram services we provide to client businesses (section 21).
• Professional advisers — accountants and lawyers, where required.
• Authorities — where we are legally obliged to disclose.

7. How we communicate with you — email, phone and WhatsApp

We reply to enquiries by email, telephone and WhatsApp. Our website carries a WhatsApp button that opens a chat with us.

If you contact us on WhatsApp, your message and phone number are processed by WhatsApp (Meta Platforms) under their own privacy policy, in addition to this one. We use WhatsApp only to have a conversation with you — we do not add your number to advertising audiences.

If you would rather not use WhatsApp, email or phone us instead. Our details are in section 20.

8. Where your data is stored

We are based in India and keep data in India where we can. Some of the services above — notably Google and Cloudflare — process and store data on servers outside India, including in the United States and the European Union. Where data is transferred outside India we rely on the contractual protections offered by those providers, and such transfers are made in accordance with the DPDP Act.

9. How long we keep it

Data handled by our WhatsApp, Facebook and Instagram apps for client businesses has its own retention periods, set out in section 21.7.

Where we no longer have a purpose or a legal obligation to keep your data, we delete it.

10. How we protect it

We use HTTPS encryption across the site, restrict access to client systems to the team members who need it, use reputable hosting with access controls and a web application firewall, and review our security practices as our systems change. No method of transmission over the internet is completely secure, but we take reasonable and appropriate safeguards to protect your data.

11. If something goes wrong — data breach notification

Despite the safeguards in section 10, no system is completely secure. If a personal data breach affects your data, then in line with Section 8(6) of the DPDP Act we will notify the Data Protection Board of India and inform you directly, without undue delay.

Our notice to you will explain, in plain language, what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.

If you believe you have found a security weakness in our website or systems, please tell our Grievance Officer (section 15). We will investigate, and we will not pursue anyone who reports an issue to us in good faith.

12. Your rights under the DPDP Act

As a Data Principal you have the right to:

• Access — ask what personal data we hold about you and how we use it.
• Correction — have inaccurate or incomplete data corrected or updated.
• Erasure — ask us to delete your data, where we have no legal obligation to keep it.
• Withdraw consent — at any time, where our processing relies on consent.
• Grievance redressal — raise a complaint with our Grievance Officer (section 15).
• Nominate — nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, contact our Grievance Officer below. We may need to verify your identity first. There is no charge.

13. Your duties as a Data Principal

Section 15 of the DPDP Act also places a few duties on you. In short:

• Give accurate and complete information — particularly when you ask us to correct something.
• Do not impersonate another person when providing personal data.
• Do not suppress material information where the law requires you to provide it.
• Do not raise false or frivolous grievances or complaints.

We mention these only so it is clear that the rights in section 12 sit alongside them.

14. No automated decision-making or profiling

We do not make decisions about you by automated means alone, and we do not profile you to predict your behaviour or characteristics. Enquiries and job applications are read and assessed by people on our team.

The analytics described in section 3 measure how our website is used in aggregate. They are not used to make decisions about individuals.

15. Grievance Officer

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer with any question, request or complaint about your personal data:

We will acknowledge your request within 72 hours and aim to resolve it within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India.

16. Children

Our services are intended for businesses and our website is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact our Grievance Officer and we will delete it.

17. Third-party links

Our website and blog link to other websites, including our social media profiles. We are not responsible for their privacy practices, and we encourage you to read their policies before sharing information with them.

18. Governing law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Any dispute arising out of it is subject to the jurisdiction of the courts at Ernakulam, Kerala.

19. Changes to this policy

We may update this policy as our services, tools or legal obligations change. The “Last updated” date at the top always reflects the current version. Where changes are significant, we will make that clear on this page.

20. Contact us

If you have any question about this policy or your data, just ask — we are here to help.

Techpullers Technology Solutions Pvt Ltd
10C, Trans Asia Cyber Park, Infopark SEZ, Phase II, Ambalamedu P.O., Kochi, Keralam 682303
info@techpullers.com · +91 98951 56580

Privacy and data queries: Leno B Vettoor, Co-founder, COO & Technical Head — leno@techpullers.com

21. Our apps on Meta platforms — WhatsApp Business messaging, Facebook and Instagram

Techpullers operates its own software for client businesses on Meta’s platforms. Our apps are Techpullers Messaging Platform (WhatsApp Business Platform / Cloud API) and Techpullers Agency API (Facebook Pages, Instagram and Meta advertising). Client businesses use them through our dashboard. This section explains what data these apps handle and how. It applies alongside the rest of this policy, Meta’s Privacy Policy and WhatsApp’s Privacy Policy.

21.1 Our role

We provide these apps as a technology provider to businesses. When a business connects its WhatsApp Business Account, Facebook Page, Instagram account or ad account to us, that business decides why its customers’ data is processed and is responsible for it (it is the Data Fiduciary). We process that data only on the business’s behalf and on its instructions, as a Data Processor. If you are a customer of one of these businesses, the business’s own privacy policy also applies to you.

21.2 Data we receive from businesses that connect to us

• Connection details: the business’s Meta business portfolio, WhatsApp Business Account and phone number identifiers, display name and number quality rating. Also the identifiers of the Facebook Pages, Instagram accounts, ad accounts and pixels/datasets the business chooses to share.
• Access tokens: granted by the business through Facebook Login for Business or WhatsApp Embedded Signup. They let our apps act only on the assets the business selected.
• Settings and business data: the business’s message templates, automated-reply settings, office hours and the names and email addresses of staff who receive lead alerts. Also advertising campaign settings and performance reports, and lead-form responses from the business’s own Meta ads.

21.3 Data about people who message a business on WhatsApp

When you send a WhatsApp message to a business that uses our platform, we process the following on that business’s behalf:

• your WhatsApp phone number and profile name;
• the messages you send and receive, including replies you tap, and references to images, voice notes, documents or locations you share;
• delivery and read status of messages, and Meta’s pricing category for each message (used for billing);
• details you give in answer to the business’s questions, such as your name, area, what you need and a convenient time to call;
• a campaign tag (for example [MH-W]) if the link you used to start the chat included one, so the business knows which advert or page you came from;
• whether you have asked not to receive further messages.

Some businesses keep using the WhatsApp Business app on the same number (“coexistence”). For them, we also receive copies of the messages the business’s staff send from that app. When the business connects, and only if the business approves it in WhatsApp, we also receive the chat history and contact names it chooses to sync from the app.

21.4 How this data is used

• To send and receive WhatsApp messages for the business, including the automated replies the business has set up. Automated replies are limited to the business’s own questions and information; we do not run a general-purpose AI chatbot.
• To pass your enquiry to the business’s staff (by email or WhatsApp) so they can call you back, and to show the conversation in the business’s inbox.
• To manage the business’s message templates, Pages, Instagram posts, ads and lead reports, as the business asks us to.
• To keep the service secure and working, and to record message usage for billing.

We do not sell this data. We do not use it to advertise our own services, build advertising profiles or train AI models, and we do not combine one business’s data with another’s. Data obtained through Meta’s platforms is used only as permitted by Meta’s Platform Terms and Developer Policies, and by the WhatsApp Business Messaging Policy.

21.5 Who receives it

• The business you are talking to and its authorised staff.
• Meta Platforms and WhatsApp, which carry the messages and provide the platform.
• Our hosting and email providers, which run our servers and deliver lead-alert emails.

Within Techpullers, only staff assigned to that business can see its data. We do not share it with anyone else unless the law requires us to.

21.6 Where it is stored and how it is protected

This data is stored on our own dedicated servers in the European Union, with encrypted backups kept by our hosting providers, also in the EU.

• Access tokens are encrypted at rest (AES-256).
• All traffic uses HTTPS.
• Every message Meta sends us is checked against Meta’s signature before it is accepted.
• Access is limited by login and role, and staff actions are logged.

21.7 How long we keep it

• Message text and media references: 180 days by default (a business can choose a shorter or longer period), then deleted. Message status and billing records are kept for accounting.
• Raw platform notifications from Meta: 30 days, for troubleshooting.
• Leads and contact details: until the business deletes them, or until the business stops using our service.
• Access tokens: until the business disconnects our app or stops using our service.

When a business stops using our service, we delete its WhatsApp, Facebook and Instagram data, including its customers’ messages and leads, within 30 days, except records we must keep by law.

21.8 Your choices

• Stop messages: reply STOP or UNSUBSCRIBE in the chat. You will get one confirmation and no further messages from the business through our platform, and you will never receive marketing messages from it. Reply START to opt back in.
• You can also block the business in WhatsApp at any time.
• To see, correct or delete what a business holds about you, contact that business. You can also contact our Grievance Officer (section 15) and we will act on it with the business.

21.9 Data deletion instructions

If you are a customer who messaged a business on WhatsApp: email leno@techpullers.com with the subject “Data deletion request”. Include your WhatsApp number and the business you contacted. We will delete your messages, lead details and contact record from our systems within 30 days and confirm by email. We may first verify that the request comes from you.

If you are a business, or connected our app with your Facebook account:

1. Remove our app from your Facebook account under Settings & privacy → Settings → Apps and websites. Alternatively, in Meta Business Suite, go to Business settings → Integrations → Connected apps and remove “Techpullers Messaging Platform” or “Techpullers Agency API”.
2. Email leno@techpullers.com with the subject “Data deletion request” and your business name.

We will delete your access tokens and all data obtained through our apps within 30 days, and confirm when it is done.

A final word

As a Kerala-rooted team that has grown through long-term client relationships, we believe ethical business and respect for privacy go hand in hand. Whether you are a first-time visitor or a long-standing client, your trust matters to us — and we work every day to earn it.