Privacy Policy

At Infriva Solutions ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, process, and safeguard the data you provide to us when you visit our website, use our AI chatbot, interact with our Meta (WhatsApp/Messenger) integrations, or engage our digital architecture services.

1. Information We Collect

We collect information that you voluntarily provide to us, as well as data gathered automatically when you interact with our digital systems:

• Personal Identification Data: Name, email address, phone number, and company details provided via our contact forms.
• Conversational Data: Transcripts of interactions with our Gemini-powered AI chatbot and Meta webhooks (WhatsApp/Messenger) to improve response quality and context.
• Usage & Analytics Data: IP addresses, browser types, device information, and interaction events tracked via PostHog to optimize UI/UX performance.

2. How We Use Your Data

The information we collect is strictly utilized to operate our business and deliver premium digital services. Specifically, we use your data to:

• Design, develop, and deploy your custom CRM systems and web architectures.
• Respond to your inquiries via our automated AI systems and human sales representatives.
• Analyze website traffic and identify UI/UX bottlenecks using PostHog analytics.
• Send critical project updates, legal notices, and marketing communications (which you can opt out of at any time).

3. AI and Third-Party Integrations

To provide cutting-edge automated services, we integrate with secure third-party platforms. Your data may be processed by these services strictly under our instruction:

• Google Gemini AI: Chatbot inputs are processed by Gemini AI to generate conversational responses. Sensitive personal information should not be shared with the public chatbot.
• Meta Platforms (WhatsApp/Messenger): Messages sent to our business accounts are processed via secure Meta Webhooks.
• Supabase: Our primary database infrastructure. All data is encrypted at rest and in transit using PostgreSQL industry standards.

We do not sell, rent, or trade your personal information to third-party data brokers or marketing agencies under any circumstances.

4. Data Security

We implement robust, enterprise-grade security measures to protect your data. This includes HMAC-SHA256 payload verification for all Meta webhooks, strict CORS policies, and server-side input sanitization to prevent XSS and injection attacks. However, no electronic transmission over the internet can be guaranteed to be 100% secure.

5. Your Data Rights (GDPR, DPDP & CCPA)

Depending on your location, you have specific rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Deletion: Request that we delete your data ("Right to be Forgotten").
• Right to Rectification: Request correction of inaccurate data.

To exercise any of these rights, please contact us using the information below.

6. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. Any updates will be posted on this page with a revised "Effective Date."