Privacy Policy

Last updated: March 14, 2026

1. Introduction

Welcome to Vikmo. This Privacy Policy explains how Vikmo, a product of CommPlug Innovations Private Limited (“Company”, “we”, “us”, or “our”), collects, uses, and discloses information when you use our AI-powered multichannel selling platform. We respect your privacy and are committed to protecting the personal data of our users (“Users”, “you”, or “your”) and their end-customers.

The Vikmo platform is intended for business users only. We do not knowingly collect personal data from individuals under the age of 18, and the platform is not directed at or designed for use by minors.

2. Information We Collect

To provide our services, we collect the following types of information:

  • Account Data: Name, email address, business name, and contact details provided during registration.
  • Integration Data: Information from third-party platforms you connect (e.g., messaging services, e-commerce platforms, accounting software), including order history and customer contact details.
  • WhatsApp Message Data: Messages sent and received through the Vikmo platform on behalf of your business are stored on our servers for the purpose of providing the WhatsApp messaging service. This includes message content, delivery status, timestamps, and the contact details of your end-customers. Message history is used to provide AI agent context, enabling the AI to reference past conversations when responding to your dealers or customers. Messages are not shared across tenants and are deleted within 90 days of account termination.
  • AI Conversation Logs: Records of conversations handled by Vikmo's AI agents on your behalf, including messages exchanged between your AI agent and your dealers or customers. These logs are retained to enable AI quality review and dispute resolution.
  • Transactional Data: Records of inventory, sales, and invoices processed through the platform.
  • On-Premise Connector Data: Where tenants deploy Vikmo's local connector software for integration with accounting systems (such as Tally), the connector transmits transactional data (invoices, stock items, ledgers, inventory quantities) as configured by the tenant. This data is transmitted to the Vikmo platform over encrypted HTTPS. The connector does not collect or transmit data beyond what is required for the configured sync operations.
  • Accounting Integration Data: Financial and transactional data synced with third-party accounting software (including Tally) to facilitate invoicing and bookkeeping. This may include invoice values, payment statuses, tax entries, and ledger data.
  • Usage & Device Data: IP addresses, browser types, and interaction logs to improve app performance and security.
  • Field Sales & Location Data: If and when field sales functionality is enabled, the platform may collect GPS or location data associated with field sales agents' orders or check-ins. This data is used solely to support field order management and is not shared with third parties for advertising purposes.
  • Scraped or Enriched Data: Where you use data collection or enrichment features to import product catalog data or market pricing information into the platform, such data is stored and processed within your tenant environment. You represent and warrant that you have the legal right to collect and use such data.
  • Shared Knowledge Contributions: Where a tenant opts in to the Vikmo Shared Knowledge Network, structured operational metadata such as product compatibility mappings, catalog attributes, and SKU-level information may be collected and used as described in Section 7 below.

3. How We Use Your Information

The processing of personal data is carried out based on user consent, contractual necessity for providing the Vikmo platform services, and compliance with applicable legal obligations.

We use the collected data to:

  • Facilitate Multichannel Selling: Syncing inventory and managing orders across different platforms.
  • WhatsApp Messaging Services: Sending and receiving messages, notifications, and automated responses on behalf of your business through CommPlug Innovations Private Limited's authorised Business Solution Provider account.
  • AI Analysis & Agent Context: Powering our AI-powered features to provide insights, automate responses, and optimise business growth. Message history is used to provide contextual awareness to AI agents. AI processes your business data (orders, inventory, conversations) but does not share data across tenants. Your data is not used to train or fine-tune shared AI models.
  • Accounting Synchronisation: Transferring relevant transactional data to connected accounting software (e.g., Tally) as configured by you.
  • Platform Intelligence: Generating anonymised, aggregated insights from platform usage to improve service quality and, where tenants opt in, contributing to shared knowledge datasets.
  • Communication: Sending system updates, security alerts, and support responses.
  • Compliance: Meeting legal obligations and preventing fraudulent activity.

4. Data Usage and Protection

Vikmo is committed to protecting user privacy. Personal or business data collected through the platform will not be sold, rented, or used for unauthorised purposes. The data collected is used only for providing and improving the Vikmo platform services. WhatsApp message data, phone numbers, and business account information is used solely for facilitating business communications and is not shared with third parties for advertising or any purpose unrelated to service delivery.

5. Multi-Tenant Data Isolation

Vikmo operates as a multi-tenant platform. Each tenant's data (including business data, customer information, orders, inventory, and message history) is logically separated at the database level using row-level security and is not accessible by other tenants. End-customer data belonging to your business is processed solely for the purpose of your business operations and is never shared with or made visible to other tenants on the platform.

Shared AI Infrastructure: The AI models powering Vikmo's features (including Google Vertex AI / Gemini) are shared infrastructure services. However, your tenant data is processed in isolation — it is never commingled with another tenant's data during AI inference, and your data is never used to train, fine-tune, or improve AI models for the benefit of other tenants or the general public.

6. Data Sharing & Third Parties

We share information only with:

  • Service Providers (Sub-Processors): We work with a limited number of carefully selected sub-processors to deliver our services. Key sub-processors include: Google Cloud Platform (cloud infrastructure and hosting), Google Vertex AI / Gemini (AI inference and processing), Interakt (WhatsApp Business Solution Provider for message delivery), ZeptoMail (transactional email delivery), and Brevo (marketing email communications). A full and current sub-processor list is available on request by contacting support@vikmo.app.
  • Third-Party Integrations: Data is exchanged with platforms you explicitly connect (e.g., e-commerce platforms, accounting software such as Tally, payment gateways) to execute your business operations.
  • Legal Necessity: If required by law, court order, or regulatory authority, or to protect the safety and rights of our users.

7. Shared Knowledge Network & Aggregated Insights

Vikmo may provide features that allow tenants to optionally contribute certain structured business knowledge to shared platform datasets, such as product compatibility information, catalog attributes, SKU mappings, or similar operational metadata that improves platform functionality for all users.

  • Voluntary Opt-In: Participation in the Shared Knowledge Network is entirely voluntary. Tenants may choose to enable or disable participation through their platform settings. The opt-in date and participation window will be clearly displayed in the platform.
  • 12-Month Participation Commitment: Where a tenant elects to participate, participation will remain active for a minimum period of twelve (12) months from the date of opt-in. This ensures the stability and integrity of shared knowledge datasets.
  • Opt-Out After Minimum Period: After the twelve-month minimum period has elapsed, tenants may opt out of contributing additional data through platform settings.
  • Retention of Contributed Knowledge: Any compatibility information, catalog mappings, or structured knowledge entries already contributed prior to opt-out may continue to exist within Vikmo's aggregated or standardised datasets where removal would materially affect the integrity of the shared knowledge base. Individual tenant identity will not be associated with retained entries.
  • What Is and Is Not Shared: The Shared Knowledge Network involves contributing only structured operational metadata (compatibility mappings, catalog attributes, SKU-level data). Participation does not involve sharing pricing, order volumes, dealer lists, customer names, margins, financial data, WhatsApp conversations, or any other confidential business information.
  • Aggregated Insights: Vikmo may also generate anonymised and aggregated statistical insights derived from platform usage data (such as category trends, reorder cycles, and seasonal patterns) for purposes of service improvement and market intelligence features. Such aggregated insights do not identify any individual tenant, business, or end-customer.

8. Cross-Border Data Transfer

Vikmo's primary infrastructure is hosted on Google Cloud Platform in the asia-south1 region (Mumbai, India). We have structured our infrastructure to prioritise data residency within India in compliance with applicable Indian law.

However, you should be aware that:

  • AI inference and processing via Google Vertex AI / Gemini may involve Google's global AI infrastructure, which could process data outside India. Google Cloud's data processing terms and privacy commitments govern such processing.
  • Third-party integrations you connect may be hosted outside India and will be subject to their own data transfer and residency terms.

By using the Vikmo platform and connecting third-party integrations, you acknowledge and consent to the cross-border transfer of data where necessary for service delivery, subject to appropriate safeguards maintained by our sub-processors.

9. Data Security

We implement industry-standard security measures, including SSL encryption, secure API protocols, and row-level security for tenant data isolation, to protect your data. All communication with third-party APIs (including WhatsApp Business API) is conducted over encrypted channels. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

On-Premise Connector Security: Data transmitted between the Vikmo connector and the tenant's local accounting systems remains within the tenant's local network until it is synced to the Vikmo platform. The connector communicates with the Vikmo platform exclusively over encrypted HTTPS. CommPlug Innovations Private Limited does not have direct access to the tenant's accounting system and processes only the data transmitted through the connector as configured by the tenant. The security of the connector's operating environment — including the machine on which it is installed, the local network, and access controls — is the sole responsibility of the tenant.

10. Data Retention

We retain personal data only for as long as necessary to provide our services and comply with legal obligations.

  • General Business Data: Retained for the duration of your active subscription. Upon account termination, your data is available for export for 30 days. After this period, data is permanently and securely deleted within 30 days of the export window closing.
  • WhatsApp Message Data: Retained for the duration of your active subscription to facilitate ongoing business communications and AI conversation continuity. Messages are deleted within 90 days of account termination.
  • WhatsApp Media (Images, Catalogs, Documents): Media files exchanged through WhatsApp Business API may be stored separately from text message logs. Retention of such media is subject to the media retention policies of our WhatsApp Business Solution Provider (Interakt) in addition to our own retention terms.
  • On-Premise Connector Data: Transactional data transmitted from the on-premise connector to the Vikmo platform is retained in accordance with your subscription plan and general data retention terms.
  • AI Conversation Logs: Retained for the duration of your active subscription for quality, compliance, and dispute resolution purposes.
  • Shared Knowledge Contributions: Contributed compatibility and catalog data may be retained in anonymised or standardised form within shared datasets even after opt-out or account termination, where removal would materially affect shared knowledge integrity.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, CommPlug Innovations Private Limited will:

  • Notify the Data Protection Board of India within 72 hours of becoming aware of the breach, to the extent required under the Digital Personal Data Protection Act, 2023.
  • Notify affected tenants within a reasonable timeframe, providing details of the nature of the breach, the categories of data affected, likely consequences, and measures taken or proposed to address the breach.
  • Maintain internal records of all data breaches for a minimum of 5 years, regardless of whether notification to the Data Protection Board was required.

Tenants who become aware of any suspected or actual breach involving their end-customer data must notify CommPlug Innovations Private Limited at support@vikmo.app without undue delay. Data subject requests may be submitted to the same address.

12. User Rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, you have the following rights:

  • Right to Access (Section 11, DPDP Act): You have the right to obtain a summary of the personal data we hold about you and the processing activities undertaken with such data.
  • Right to Correction and Erasure (Section 12, DPDP Act): You have the right to request correction of inaccurate or incomplete personal data, and the right to request erasure of personal data that is no longer necessary for the purpose for which it was collected.
  • Right to Withdraw Consent (Section 13, DPDP Act): Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing prior to withdrawal.
  • Right to Grievance Redressal (Section 13, DPDP Act): You have the right to a readily available means of grievance redressal. See the Grievance Officer section below.
  • Right to Data Portability: You may request a copy of your business data in a standard machine-readable format (CSV/JSON) at any time during your active subscription, or within the 30-day post-termination window.

To exercise any of these rights, please contact us at support@vikmo.app. Data subject requests may be submitted to the same address. We will respond within 30 days.

13. Scraped & Enriched Data — Privacy Treatment

Where tenants use Vikmo's data collection or enrichment features to import third-party product or market data into the platform:

  • Such data is stored within the tenant's isolated environment and is not visible to or shared with other tenants.
  • If scraped or enriched data contains personal information, you are solely responsible for ensuring that the collection and use of such personal data complies with the DPDP Act, 2023 and any other applicable laws.
  • CommPlug Innovations Private Limited does not validate or verify the legality of data imported by tenants through scraping or enrichment features. Tenants indemnify CommPlug Innovations Private Limited against any claim arising from the use of such data.

14. Cookies

We use essential cookies to maintain login sessions and platform security. Vikmo does not currently use third-party advertising or tracking cookies. You can manage cookie settings through your browser, but some features of the Vikmo platform may not function correctly without essential cookies enabled.

15. Governing Law and Jurisdiction

This Privacy Policy and any disputes arising out of or related to the use of the Vikmo platform shall be governed by the laws of India. Any legal disputes shall be subject to the exclusive jurisdiction of the courts located in Goa, India, where the Company is registered.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

  • Material Changes: For material changes — including changes to data collection categories, sub-processors, data retention periods, or cross-border transfer disclosures — we will notify you via email to your registered email address at least 30 days before the changes take effect. Continued use of the platform after such notice period constitutes acceptance of the revised Policy.
  • Non-Material Changes: For non-material changes such as corrections, formatting, or clarifications that do not alter the substance of this Policy, we may update without prior notice.
  • Last Updated Date: The ‘Last Updated’ date at the top of this document will always reflect the most recent revision.

17. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, CommPlug Innovations Private Limited has designated a Grievance Officer to address concerns or complaints related to this Privacy Policy or the processing of personal data.

Name: Arbaaz Sha Muzawer
Designation: Grievance Officer & Founder, CommPlug Innovations Private Limited
Email: arbaaz@vikmo.app
Response Time: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

18. Contact Us

If you have questions about this policy or our data practices, please contact us at:

Email: support@vikmo.app
Registered Address: H.NO 403/A1, Gr Floor, Lotlikar Bldg, Layamati, Davorlim, Salcete, South Goa – 403707, Goa, India
Mailing Address: 2nd Floor, Kohinoor Towers, BDA Layout 2nd Block, BTM 4th Stage, Bengaluru, Karnataka – 560076, India
Company: CommPlug Innovations Private Limited