Privacy Policy

Last updated: 13 November 2026

VisioNext Cloud (“we”, “us”) runs VisioNext Cloud, an AI CRM and sales-automation software for businesses. This policy explains what personal data we process, why, and your rights under India’s Digital Personal Data Protection Act, 2023 and the IT Act, 2000.

1. Two kinds of data

• Account data – name, email, phone, business details, billing and GST details, login sessions and device identifiers of our customers and their team members. We are the data fiduciary for this data.
• Customer-business data – leads, enquiries, messages, call notes, site visits, payments and property data that our customers add or receive through connected channels. We process this only on our customer’s instructions; the customer business is responsible for having the consent of its own leads.

2. Why we use it

• To provide the service: store leads, send WhatsApp / email messages the customer configures, score leads, schedule follow-ups and site visits, and show reports.
• Billing, invoices, fraud prevention and security (for example single-device login and one-time passwords).
• Support and service messages. We do not sell personal data and we do not use customer-business data for advertising.

3. Service providers

We share data only as needed with providers that run parts of the service: Meta (WhatsApp Business Platform, Facebook and Instagram APIs), Anthropic (AI text processing), Razorpay (payments), Supabase (database hosting), Resend (email), voice-call providers and our hosting provider. Each processes data under its own security and privacy terms. Some providers may store data outside India.

4. Facebook, Instagram and WhatsApp data

When a customer connects a Facebook page, Instagram account or WhatsApp number, we receive lead-form answers, comments, direct messages and message status for that account only, and use them only to create and follow up leads inside that customer’s workspace. Tokens are stored securely and can be removed any time from Integrations → Disconnect.

5. Retention

Account data is kept while the account is active and for up to 90 days after closure (longer where tax law requires invoices to be kept). Customer-business data is deleted within 30 days after the customer deletes it or closes the account.

6. Security

Encrypted connections (HTTPS), access limited by role, signed webhooks, single-device sessions and audit logs of AI actions.

7. Your rights

You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. If you are a lead of one of our customer businesses, please contact that business first – we will help them act on your request. See Data deletion.

8. Cookies

We use essential cookies only: login session, device identifier and referral code. Customer landing pages may use the Meta Pixel if that customer enables it.

9. Grievance officer & contact

Email: our support email (see the Contact page). We reply within 7 working days.