Privacy Policy

This Privacy Policy explains how Viyable Software Labs Private Limited (“Firmland”, “we”, “us”, “our”) handles information in connection with the Firmland platform (“Platform”). It covers two distinct roles we play:

• As a controller — for information about our business customers and their admin users (the people who sign in to the Firmland admin console).
• As a processor — for personal data of End Customers that flows through the Platform on behalf of our business customers (each, a “Tenant”). For that data, the Tenant is the controller and we process it only to provide the Platform.

If you are an End Customer (a shopper using a Tenant's storefront), the privacy policy that applies to you is the Tenant's policy, shown in that storefront.

A. When we are the controller (our business customers)

1. Information we collect

• Account and contact details of the Tenant business and its admin users — name, business name, email, phone, role.
• Billing information related to subscriptions.
• Usage and technical data — sign-in activity, device/IP information, and logs used for security, troubleshooting, and operating the Platform.
• Cookies and similar technologies — strictly-necessary cookies/local storage used to keep you signed in, remember preferences (such as your cookie choice), and keep the Platform secure. See “Cookies” below.
• Support communications you send us.

2. How we use it

• to provide, secure, and operate the Platform and admin console;
• to manage subscriptions, billing, and support;
• to send service and security communications, and (with consent) product updates;
• to detect and prevent fraud and abuse;
• to comply with legal, tax, and accounting obligations.

3. Sharing

We share this information only with service providers who help us run the Platform (such as hosting, communications, and payment providers), under confidentiality obligations, and where required by law. We do not sell personal data.

4. Cookies

Our marketing site and admin console use a small number of strictly-necessary cookies and browser storage to operate — for example to keep you signed in, remember your cookie preference, and protect against abuse. We do not use advertising cookies. If we add analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.

5. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), admin users may request access to, correction of, or deletion of their personal data, and may withdraw consent to non-essential communications. Contact us using Section C.

B. When we are the processor (End Customer data)

When Tenants use the Platform to run their storefronts, the Platform processes personal data of their End Customers — such as name, mobile number, email, delivery addresses, order history, device identifiers, and payment-related references.

• We process this data only to provide the Platform to the Tenant and on the Tenant's instructions. We do not use it for our own purposes and do not sell it.
• The Tenant is responsible as the controller — including for the lawful basis, notices, and consents owed to End Customers, and for handling End Customers' data-rights requests (we assist the Tenant as needed).
• We engage sub-processors to deliver Platform features — for example payment gateways (such as Razorpay), SMS/WhatsApp and email providers, maps services, file storage, and hosting. We require them to protect the data and use it only to provide their service.
• We apply reasonable security measures (encrypted transport, access controls, hashed credentials) and retain data per the Tenant's configuration and our agreement, deleting or returning it on termination subject to legal retention.

If you are an End Customer with a request about your data, please contact the Tenant whose storefront you used; we will support them in responding.

WhatsApp, SMS, and email messaging

We operate messaging capabilities — including WhatsApp (via the WhatsApp Business Platform from Meta), SMS, and email — to deliver notifications to End Customers on behalf of Tenants.

• Depending on the Tenant's configuration, WhatsApp messages are sent either through a WhatsApp Business Account operated by Viyable Software Labs Private Limited, or through the Tenant's own WhatsApp Business Account, which we may manage on the Tenant's behalf as a technology provider.
• To deliver these messages, the recipient's phone number and the message content are processed by Meta in accordance with WhatsApp's own terms and privacy policy. Similar processing applies to our SMS and email providers.
• We send transactional messages (such as order, delivery, and account updates, and one-time passwords) and, where the recipient has opted in, promotional messages. Recipients can opt out of promotional messages at any time.
• We process this messaging data only to provide the messaging service to Tenants and do not use it for our own marketing.

C. Security, retention, and contact

• Security. We use reasonable technical and organisational measures to protect personal data. No system is perfectly secure, but we work to keep data safe and to address incidents promptly.
• Retention. We keep personal data only as long as needed for the purposes above and as required by law.
• Changes. We may update this policy; we will update the version and effective date and, for material changes, provide notice.

Contact us:

Viyable Software Labs Private Limited, #C-303, Silver County, KSRP, Kudlu, Bengaluru – 560102, India

Privacy: legal@firmland.in · Support: support@firmland.in

Grievance Officer: grievance@firmland.in

See also our Terms of Service and Refund & Cancellation Policy.