Last updated: 15 June 2026
This Privacy Policy explains how Tovak ("Tovak", "we", "us", or "our") collects, uses, shares, and protects information when you and your team use our WhatsApp-native manufacturing operations service (the "Service"). We built Tovak for Indian manufacturing businesses, and we handle your data with that responsibility in mind.
This policy applies to information we process when a manufacturing business (a "Customer") subscribes to Tovak, and when that Customer's team members, their buyers, and suppliers interact with the Service over WhatsApp or through our web dashboard. It also covers visitors to our website at tovak.in.
For most of the operational data flowing through Tovak (orders, invoices, payment records, and the contact details of a factory's buyers and suppliers), the Customer is the data fiduciary (controller) and Tovak acts as a data processor, handling that data on the Customer's instructions under our service agreement. For account, billing, and website data, we act as the data fiduciary.
We use information to:
We rely on the following legal bases under India's Digital Personal Data Protection Act, 2023 and applicable law: performance of our contract with you, your consent (where required), our legitimate business interests in operating the Service, and compliance with legal obligations.
Tovak uses automated processing, including artificial intelligence, to read incoming WhatsApp messages, extract order details, and suggest repeat orders ("Same as last order?"). These suggestions are designed to be confirmed by a human in your team before action is taken. We do not use your operational data to train third-party AI models for purposes unrelated to providing the Service to you.
The Service operates over the WhatsApp Business Platform, which is provided by Meta and delivered through a WhatsApp Business Solution Provider. When you communicate through WhatsApp, your use of WhatsApp is also governed by Meta's and WhatsApp's own privacy terms.
We share information with a limited set of service providers strictly to run the Service, including:
These providers are bound to use the data only to provide services to us. We do not sell your personal data, and we do not share it with advertisers.
Tally and other exports. When you export data (for example, a Tally-compatible XML file or an invoice PDF), that file is under your control once downloaded, and its further handling is your responsibility.
We may disclose information:
We store data on cloud infrastructure and apply per-Customer logical isolation so that one factory's data is not accessible to another. We retain your data for as long as your account is active and as needed to provide the Service. After your account is closed, we retain data only for the period required to meet legal, tax, accounting, or dispute- resolution obligations, after which it is deleted or anonymised. On written request, we will return or delete your operational data subject to these legal retention requirements.
We use reasonable technical and organisational measures to protect information, including access controls, encryption in transit, and per-Customer data isolation. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affecting you occurs, we will notify you and the relevant authority as required by law.
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may have the right to:
Where Tovak processes data on behalf of a Customer (as a processor), requests from that Customer's buyers, suppliers, or staff are generally directed to the Customer, and we will assist the Customer in responding. To exercise any right, contact us at info@tovak.in.
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our grievance officer for any complaint regarding the processing of your personal data:
[Grievance Officer Name]
Tovak
Email: info@tovak.in
We aim to acknowledge complaints promptly and resolve them within the
timelines required by law.
Tovak is a business tool intended for use by businesses and is not directed at children. We do not knowingly collect personal data of children.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Continued use of the Service after changes take effect means you accept the revised policy.
For any question about this Privacy Policy or your data, email us at info@tovak.in.