Privacy Policy

Last updated: July 22, 2026  ·  Operated by Madar Resolution Consultants Pvt Ltd

1. Information We Collect

We collect the following categories of information:

• Contact Information: Client name, phone number, and email address provided directly by the client or entered by authorised staff.
• WhatsApp Communications: Message content, timestamps, and delivery status of WhatsApp messages exchanged between our staff and clients via the WhatsApp Business API.
• Case Information: Details related to a client's debt resolution case, including loan details, lender information, and case progress notes.
• Authentication Data: Login credentials (hashed) for authorised CRM staff.
• Usage Logs: System activity logs generated by staff use of the CRM platform.

2. How We Use Your Information

We use collected information solely for the following purposes:

• Sending WhatsApp template messages and responding to client queries related to debt resolution services.
• Managing and tracking client cases, complaints, and fee schedules within our internal CRM.
• Notifying clients about case updates, document requests, and payment reminders.
• Complying with applicable legal and regulatory obligations.
• Maintaining internal audit trails and system security.

We do not use your information for advertising, profiling, or any purpose unrelated to our debt resolution services.

3. WhatsApp Business API

Our platform uses the WhatsApp Business API, provided by Meta Platforms, Inc. When you communicate with us via WhatsApp, your messages are processed through Meta's infrastructure in accordance with WhatsApp's Privacy Policy and Meta's Privacy Policy.

We are the data controller for message content stored within our CRM. Meta is an independent data controller for data processed through its platform.

4. Google Account Integration (Gmail)

With a client's explicit, opt-in consent, our platform allows the client to connect their own Gmail account via Google Sign-In (OAuth 2.0) so that correspondence with lenders (such as Letters of Intimation, legal notices, and related case documents) can be sent from the client's own mailbox rather than ours, at the client's request.

When a client connects their Gmail account, we request the following Google permissions:

• Send email on your behalf (gmail.send) — used only to send the specific case-related emails the client initiates or approves through our platform.
• View your email address / basic profile — used only to identify which Google account has been connected and display it back to the client.

We do not read, store, search, or otherwise access the content of a client's Gmail inbox, sent mail, or any other Gmail data beyond what is required to send the messages the client authorises. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OAuth tokens are stored encrypted and are used solely to authorise outbound sends on the client's behalf. A client may revoke this access at any time, either from within our platform or directly via their Google Account permissions page.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Meta Platforms, Inc.: As the provider of the WhatsApp Business API used to deliver messages.
• Google LLC: As the provider of Gmail Sign-In/send functionality, used only where a client has explicitly connected their Gmail account as described above.
• Hosting Provider: Server infrastructure (Hostinger) where our CRM is hosted, under appropriate data processing terms.
• Legal Obligations: When required by law, regulation, court order, or government authority.

6. Data Retention

WhatsApp message logs and client records are retained for a period of 5 years from the date of last interaction, in accordance with applicable financial service regulations. After this period, data is permanently deleted from our systems.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted database connections (SSL/TLS), hashed password storage, role-based access control, and activity logging. Access to client data is restricted to authorised staff only.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data (see our Data Deletion page).
• Restriction: Request that we restrict processing of your data.
• Objection: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at abhijatya@madarassociates.in.

9. Cookies

Our CRM platform uses session cookies strictly necessary for user authentication and session management. These cookies are not used for tracking or advertising and are deleted when you log out or close your browser.

10. Children's Privacy

Our platform is intended for use by adults (18+) only. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our services constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Company: Madar Resolution Consultants Pvt Ltd (operating as Solvncee)
• Email: abhijatya@madarassociates.in
• Platform: crm.solvncee.in