01 Introduction
Shyphan AI Solutions Pvt. Ltd. (“Shyphan”, “we”, “our”, “us”) is an Authorized Zoho Partner and custom software company. We respect your privacy and are committed to protecting the personal information you share with us through our website, sales process and engagement lifecycle.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it. It applies to shyphan.com, all regional sub-pages, and any service or communication initiated through Shyphan.
02 Information We Collect
Information you provide directly
- Contact details, name, company name, work email, phone number, country.
- Project information, brief, scope, budget, timeline and other details you share through forms, calls, email or chat.
- Account information, for portal access, support tickets and billing (when applicable).
- Communication records, emails, WhatsApp messages, call notes, support tickets and meeting transcripts.
Information collected automatically
- Usage data, pages visited, time on page, referring source, search terms, device type, browser and OS.
- IP address and approximate location (country / region only).
- Cookies and similar technologies, see section 7 below.
03 How We Use Your Information
We use the information we collect to:
- Respond to enquiries and proposals.
- Deliver Zoho implementations, custom development, AI automation and support services we agree to provide.
- Send transactional emails (invoices, status updates, support replies, security notices).
- Send marketing emails about our services, strictly on an opt-in basis, with a one-click unsubscribe.
- Improve our website, blog content and lead funnel.
- Comply with legal obligations under Indian IT Act 2000, India's Digital Personal Data Protection Act 2023, UAE PDPL, Saudi PDPL, EU GDPR (where applicable) and local tax laws.
04 Information Sharing & Disclosure
We do not sell your personal data. We share it only in these limited cases:
- Service providers, Zoho Corporation, Google Workspace, AWS, payment gateways, telephony providers (TeleCMI), e-signature tools, strictly to deliver the services you engaged us for.
- Compliance and law enforcement, when we are legally required by a competent authority.
- Business transfers, in the unlikely event of a merger, acquisition or asset sale, your data may transfer to the new entity, subject to this Privacy Policy.
- With your consent, for any other purpose disclosed at the point of collection.
05 Data Security
We use industry-standard administrative, physical and technical safeguards:
- Encryption, TLS 1.2+ in transit, AES-256 at rest where supported by the underlying platform.
- Access control, role-based access, least privilege, named users only.
- Audit trails, login, change and export logs retained on our internal Zoho stack.
- Vendor due diligence, we engage only ISO 27001 / SOC 2 / equivalent-certified processors for production data.
No method of transmission over the internet is 100% secure. We will notify you and the relevant regulator within statutory timelines in the unlikely event of a personal data breach.
06 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, subject to legal retention requirements.
- Restrict or object to processing.
- Port your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is consent-based.
- Lodge a complaint with your data protection authority.
To exercise any of these rights, write to contact@shyphan.com with the subject “Data Request”. We respond within 30 days.
07 Cookies & Tracking
Our website uses a small number of cookies for essential operation and analytics:
- Strictly necessary, session, security and form submission cookies.
- Analytics, Google Analytics (anonymised IP) to understand which pages help businesses find us.
- Marketing, Google Ads and Meta Pixel, loaded only on the first user interaction so visitors with no engagement aren't tracked.
You can disable cookies in your browser at any time. Essential cookies will continue to load to keep the site functional.
08 Third-Party Services
When we integrate your data with third-party platforms on your behalf (Zoho, Stripe, WhatsApp Cloud API, Twilio, OpenAI, Anthropic, etc.), their own privacy policies apply to data they process. Shyphan is your processor in these flows; the third party is a sub-processor. We sign Data Processing Agreements (DPAs) with these vendors where regulation requires it.
09 International Data Transfers
Shyphan operates from India, UAE, Saudi Arabia, Lebanon and Türkiye. By engaging with us, you understand that your data may be transferred and stored in any of these jurisdictions, or in the data centres of our certified sub-processors (typically India, EU, US-East / US-West, Singapore).
All international transfers are protected by standard contractual clauses or equivalent safeguards required by the applicable law.
10 Children's Privacy
Our services are designed for businesses. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with their data, please contact us and we will delete it.
11 Retention
We retain personal data only as long as needed:
- Active leads / clients, duration of the engagement plus 7 years for tax and audit requirements (India CA Act & GST).
- Marketing contacts, until you unsubscribe or 24 months of inactivity, whichever is earlier.
- Support tickets, 24 months after resolution.
12 Updates to This Policy
We may update this policy from time to time. The Last updated date at the top reflects the latest revision. For material changes, we will notify active clients by email at least 14 days in advance.
