Who we are
Tringy (“Tringy”, “we”, “us”) is a conversational-commerce platform operated by [Registered business name], a [sole proprietorship / LLP] registered in India, with its address at [Registered address, City, State, PIN]. Tringy lets businesses manage customer conversations from WhatsApp, Instagram, Telegram and other channels in one inbox, and turn those conversations into orders, bookings, invoices and payment reminders.
This policy covers our website (https://tringy.ai), the Tringy app (https://app.tringy.ai) and our APIs (together, the “Service”).
Our two roles
We handle two different kinds of personal data, and our responsibility differs for each:
- Merchant account data. When a business owner or staff member (“Merchant”, “you”) signs up and uses Tringy, we decide why and how that data is processed. For this data we are the Data Fiduciary under the DPDP Act.
- Customer data. When your customers message your business, or you upload or import contacts, we process that data only on your instructions, to provide the Service to you. For this data you are the Data Fiduciary and we act as your Data Processor. You are responsible for having a lawful basis to message your customers, including WhatsApp opt-in, and for answering their requests. We will help you do so.
If you are a customer of a business that uses Tringy and want to access or delete your data, please contact that business first. You can also write to us at privacy@tringy.ai and we will pass your request on and help.
What we collect
From Merchants
- Account details: name, email, phone number, password (stored only as a salted hash), role and workspace name.
- Business details: business type, address, GSTIN, logo, catalogue, prices and settings you enter.
- Channel connections: WhatsApp Business phone number ID, Instagram and Facebook Page IDs, Telegram bot token, Google account email, and the access tokens those platforms issue so we can send and receive messages for you.
- Billing details: plan, invoices and payment status. Card, UPI and bank details are collected and stored by our payment processor, Razorpay, not by us.
- Usage and device data: log data such as IP address, browser type, pages used, timestamps and error reports, used to keep the Service secure and working.
About your customers (processed for you)
- Contact details: name, phone number, Instagram or Telegram handle, email, tags and notes.
- Conversations: messages, images, documents and voice notes exchanged through connected channels, with delivery and read status.
- Transactions: orders, bookings, invoices, payment links, payment status, deposits and udhar (credit) balances.
From website visitors
If you fill in a form on our website, we collect what you enter (such as name, phone, email and business type). We don't run advertising trackers on our website or app.
How we use it
We use personal data only to:
- create and secure your account, and let you sign in;
- send and receive messages on the channels you connect, and show them in your inbox;
- create orders, bookings, invoices, payment links, reminders and broadcasts that you set up or approve;
- provide AI features you turn on (see below);
- bill you for your plan and send service notices, receipts and security alerts;
- answer support requests;
- detect and prevent fraud, abuse and spam, and keep the Service secure;
- comply with law, and enforce our Terms of Service.
We process Merchant data on the basis of your consent and to perform our contract with you, and certain data where the law requires or permits it (for example, keeping tax records). We do not sell personal data, rent it, or use customer conversations for advertising or to build profiles for third parties.
AI features
Tringy uses AI to suggest replies, detect what a customer wants (for example, an order or a booking), pre-fill orders and invoices, summarise conversations, transcribe voice notes and prepare your morning briefing. To do this, the relevant message text or audio is sent to our AI providers, Anthropic (text) and OpenAI (voice transcription), through their business APIs.
- Under their API terms, these providers do not use data sent through their APIs to train their models.
- AI output is a draft. A person on your team confirms anything that touches money or is sent to a customer, unless you turn on an automation that sends it for you.
- We do not use your or your customers' data to train our own or anyone else's AI models.
WhatsApp, Instagram & Messenger data
When you connect a WhatsApp Business account, an Instagram professional account or a Facebook Page, we receive messages and related data through Meta's Platform APIs. We use this data only to provide the inbox and the features described above, in line with Meta's Platform Terms and WhatsApp Business policies. We don't share it with data brokers or use it for ads.
You can disconnect a channel at any time in Settings → Channels, and ask us to delete the data we received from it. See our Data Deletion page for how.
Google user data
If you connect a Gmail account, Tringy asks Google for permission to read and send email on your behalf so email conversations appear in your inbox. Tringy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not allow humans to read it except with your permission, for security or to comply with law, and do not use it to train AI models.
Where data is stored
Our servers and database are hosted in Singapore. Some service providers above may process data in other countries, including the United States. We transfer data outside India only as permitted under the DPDP Act and with safeguards appropriate to the data.
How long we keep it
- While your account is active, we keep your data so the Service works.
- After you close your account, we delete or anonymise your workspace data within 30 days, and remove it from backups within a further 60 days.
- Invoices and billing records are kept for 8 years where Indian tax law requires it.
- Security logs are kept for up to 180 days, as required under CERT-In directions.
Security
We use encryption in transit (HTTPS/TLS), hashed passwords, access controls that keep each workspace's data separate, role-based permissions for staff, verified webhook signatures and audit logs. No system is perfectly secure; if a personal-data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to erase it, unless we must keep it by law;
- withdraw consent at any time (this won't affect processing that already happened);
- nominate another person to exercise these rights if you die or become unable to;
- raise a grievance with us, and then with the Data Protection Board of India.
Write to privacy@tringy.ai. We reply within 7 days and resolve requests within 30 days.
Children
Tringy is a business tool for people aged 18 and over. We don't knowingly collect personal data from children for our own purposes. Merchants must not use Tringy to process children's data without verifiable parental consent as the DPDP Act requires.
Changes
If we make a material change, we'll email account owners and show a notice in the app at least 15 days before it takes effect. The date at the top shows when this policy last changed.
Grievance Officer
In line with the Information Technology Act, 2000, its rules, and the DPDP Act, 2023, our Grievance Officer is:
[Grievance Officer name]
[Registered business name], [Registered address, City, State, PIN]
Email: grievance@tringy.ai
We acknowledge grievances within 24 hours and resolve them within 15 days.