Privacy policy

This policy explains how ChikuOS ("we", "us") handles personal data when you use chikuos.com and our services. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Who we are

ChikuOS is an India-based business providing website builds and audits, a free website score tool, WhatsApp automation and an AI phone receptionist. Contact: hello@chikuos.com or WhatsApp +91 93545 03426.

What we collect

• Contact details you give us: name, business name, email, phone or WhatsApp number, and what you tell us about your project.
• Website score tool: the public URL you enter. We fetch that public page to score it. We do not log in to your site or access anything that isn't public.
• Payment details: payments are processed by Razorpay. We receive confirmation of payment (amount, reference, status), not your full card or bank details.
• WhatsApp automation: message content, contact numbers and delivery status passing through the automation we set up for a client.
• AI phone receptionist: call audio, recordings or transcripts, caller number and details the caller shares, processed on behalf of the clinic or business using the service.
• Basic technical data: IP address, browser type and request logs kept by our hosting provider for security and reliability.

Why we use it

To reply to you, deliver and support the services you asked for, take payment, keep our site and services secure, and meet legal obligations. We use your data only for the purpose it was given for, based on your consent or to perform the service you requested. We do not sell personal data.

Clinics and healthcare clients

When a clinic or other business uses our WhatsApp automation or AI receptionist, that business is the data fiduciary for its patients' and customers' data, and ChikuOS acts as its data processor, handling the data only on its instructions. Patients and callers should contact the clinic first about their data; we will help the clinic respond. Calls may be recorded or transcribed for the clinic, and the clinic is responsible for telling callers this.

Who we share it with

We use trusted service providers (processors) to run our services, only as needed:

• Cloudflare: website hosting, security and delivery
• Razorpay: payments
• Meta (WhatsApp Business Platform): WhatsApp messaging
• Resend: sending email
• Telephony providers: phone calls for the AI receptionist
• AI model providers: understanding and answering messages and calls, and creating transcripts

Some of these providers may process data outside India. Where they do, we rely on their contractual and security commitments, and we follow any restrictions the Government of India notifies under the DPDP Act. We may also disclose data where required by law.

WhatsApp and your own Meta account

ChikuOS is a Meta Tech Provider. Each client connects its own WhatsApp number through Meta's Embedded Signup and owns its WhatsApp Business Account. Meta's own terms and privacy policy also apply to messages sent through WhatsApp.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected for, or as the law requires (for example, payment and tax records). Client service data (messages, call recordings, transcripts) is kept for the period agreed with the client and deleted or returned when the service ends, unless the law requires us to keep it longer.

Security

We use reasonable security practices, including encrypted connections (HTTPS), access controls and limiting who can see data. No system is completely secure, and we will notify affected people and authorities of a personal data breach as the law requires.

Your rights

Under the DPDP Act you can ask to access a summary of your data, correct or update it, have it erased, withdraw consent at any time, and nominate someone to exercise your rights. Withdrawing consent does not affect processing already done. Email us and we will respond within a reasonable time.

Cookies

We keep cookies to a minimum. Our site does not use advertising cookies. Our hosting provider may set strictly necessary cookies for security and performance.

Children

Our services are meant for businesses and adults. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you think a child has shared data with us, contact us and we will delete it.

Grievance contact

For questions, requests or complaints about your data, contact our grievance officer at hello@chikuos.com or WhatsApp +91 93545 03426. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Changes

We may update this policy. The date at the top shows when it last changed.

This is a general policy written in plain English. It is not legal advice to you. If you need advice on your own obligations, please speak to a qualified lawyer.