Last updated: 13 October 2026 · Effective date: 13 October 2026
This Privacy Policy explains how HYRAX COMMUNICATION PRIVATE LIMITED ("HYRAX", "we", "us"), the provider of DNDTeams AI at ai.dndteams.com and its related apps (the "Service"), collects, uses, shares and protects personal data.
Account data: name, email, mobile number, password (stored only as a secure hash), role (customer/reseller), referral source, and two-factor authentication settings. Locale data: country, currency, language and time zone. These are detected from network and browser signals, such as a country header from our network provider, browser time zone and browser language, when you sign up. Business data: your business profile, services, products, prices, FAQs, logo and branding, website content, and reseller branding (brand name, logo, colour, domain, support email). Wallet and transaction data: balance, top-ups, charges and refunds, invoice and payment references. Card or bank details are handled by our payment gateways (for example Razorpay, PayPal or Stripe, including a reseller's own gateway when configured), not stored by us as full card numbers. Communications data: chat messages and transcripts, AI-generated summaries, WhatsApp messages sent and received through your linked number, campaign recipients and delivery status, reminders, review ratings and comments, missed-call logs, and Project Agent project messages and attachments. In chats, users can Report (flag) AI replies and Block contacts. End-customer data (processed for our customers): names, phone numbers, emails, addresses, order and appointment details, and messages. Technical data: IP address, device and browser information, logs, and security events such as failed logins and rate-limit events. Developer data: API keys (stored securely), webhook URLs and delivery logs. Cookies: essential cookies for sign-in, security (CSRF) and preferences. We do not currently use separate analytics or marketing cookies on the Service; if that changes we will update this policy and, where required, show a cookie notice.
| Purpose | GDPR legal basis | DPDP basis |
|---|---|---|
| Create and secure your account (OTP, 2FA) | Contract; legitimate interests (security) | Consent / legitimate use (Sec. 7) |
| Provide the Service: AI chat, WhatsApp, tools, website, Project Agent | Contract | Consent; legitimate use |
| Wallet, billing, tax and accounting | Contract; legal obligation | Legitimate use; legal obligation |
| Country-based pricing and currency conversion | Contract | Consent |
| Fraud prevention, abuse and spam prevention, rate limiting | Legitimate interests | Legitimate use |
| Service emails (OTP, alerts, receipts) | Contract | Consent |
| Marketing messages | Consent (withdraw any time) | Consent |
| Improving the Service | Legitimate interests | Consent |
| Legal compliance and disputes | Legal obligation; legitimate interests | Legal obligation |
Chat messages, business data and Project Agent conversations may be sent to third-party AI model providers (configured by the platform, for example providers compatible with Gemini, OpenAI, Groq or similar) to generate replies and summaries. We configure providers under their API terms; you should assume messages leave our servers to the active provider. AI output can be inaccurate. In chats you can Report (flag) an AI reply that you consider inappropriate. We do not use AI to make decisions that have legal or similarly significant effects on you solely by automated means.
We share personal data only with service providers that help us run the Service, under contracts, for example:
We also share data with your reseller if you signed up through one, with authorities when required by law, and with a successor in a merger or acquisition. We do not sell personal data. If you joined through a reseller, that reseller can see your account details (name, email, phone and wallet information). A current sub-processor list can be requested at jitendrawadhwani.com@gmail.com until a public page is published.
We are based in India, and our providers may process data in other countries. For transfers from the EU/UK we rely on appropriate safeguards such as the EU Standard Contractual Clauses / UK IDTA where applicable. For transfers from India, we follow any restrictions notified by the Government of India under the DPDP Act.
We keep data while your account is active and for as long as needed for the purposes above, then delete or anonymise it, as follows:
Our safeguards include OTP sign-in, optional 2FA, hashed passwords, encryption of stored provider credentials, rate limiting, signed webhooks, access controls and a wallet ledger that cannot be edited. No system is 100% secure. If a personal data breach occurs, we will notify affected users and authorities as the law requires, including the Data Protection Board of India and, where applicable, the EU/UK supervisory authority.
Depending on where you live, you may have the right to access, correct, update, erase, restrict or object to processing, to data portability, to withdraw consent, to nominate a person to exercise your rights (DPDP), and to raise a grievance or complaint. See our GDPR and DPDP notice. To exercise these rights, email jitendrawadhwani.com@gmail.com (Grievance Officer: Jitendra Wadhwani). We will verify your identity and respond within the time the law requires. If you are an end customer of a business using DNDTeams AI, please contact that business first. We will help them respond. You can delete your account in the app at Settings → Delete account, or via the public page https://ai.dndteams.com/delete-account. You may also email jitendrawadhwani.com@gmail.com (Grievance Officer: Jitendra Wadhwani). In chats you can Report (flag) an AI reply and Block a contact.
The Service is meant for businesses and is not directed at children. You must be at least 18 years old (or the age of majority where you live) to create an account. We do not knowingly process children's data without verifiable parental consent, as the DPDP Act requires.
We do not sell or "share" (for cross-context behavioural advertising) personal information and do not use sensitive personal information for purposes requiring a right to limit. California residents may request to know, access, correct and delete personal information and will not be discriminated against for exercising these rights. Requests: jitendrawadhwani.com@gmail.com. Where we process data for a business customer, we act as its service provider.
If you use the Service to contact your own customers, you are responsible for giving them notice, obtaining opt-in consent, honouring opt-outs and DND/NCPR preferences, and complying with TRAI and WhatsApp rules, as set out in our Terms. We are not responsible for your processing choices.
We may update this policy. We will post the new version here and notify you of material changes by email or in the app.
jitendrawadhwani.com@gmail.com · +91 8827409728 · Grievance Officer: Jitendra Wadhwani (jitendrawadhwani.com@gmail.com). You may also complain to the Data Protection Board of India or to your local data protection authority. We acknowledge grievances within 24 hours and resolve them within 15 days, as required by the IT (Intermediary Guidelines) Rules, 2021.
If this policy is translated, the English version prevails.
Our Android app (com.dndteams.ai) opens the DNDTeams AI web service. In addition to the data above, it processes:
Privacy contact: jitendrawadhwani.com@gmail.com · Delete your account
Privacy Policy · Terms of Service · Refund Policy · Delete your account
© 2026 Ninja · HYRAX COMMUNICATION PVT LTD · GSTIN 23AAECH2835H1ZU · Bhopal 462030, India