Privacy Policy

SevenD Mobility Solutions LLC (“we,” “us,” or “our”) operates VartaDesk, a multi-tenant, multi-channel conversational customer relationship management (CRM) platform. This Privacy Policy describes how we collect, use, share, and protect information in connection with your use of our platform.

VartaDesk is designed for businesses (“Customers” or “you”) who use our services to communicate with their own end-users (“End Users”). In most cases, we act as a data processor on behalf of our Customers, who are the data controllers of End User information.

2.1. Account and Subscription Data

When you create a VartaDesk account, we collect information such as your name, email address, phone number, company name, billing details, and password. This information is used to provide, manage, and support your account and subscription.

2.2. Customer Data (Processed on Your Behalf)

Through your use of VartaDesk, you may upload, transmit, or otherwise provide contact information, messages, conversation histories, lead data, campaign content, and related information about your End Users (“Customer Data”). We process Customer Data solely as a processor on your behalf and in accordance with your instructions. You are responsible for obtaining any necessary consents from your End Users and for complying with applicable privacy and data protection laws (including GDPR, CCPA, and messaging platform policies) in your use of VartaDesk.

2.3. Usage and Analytics Data

We automatically collect information about how you interact with the VartaDesk platform, including log data (IP address, browser type, access times, pages viewed), device information, and usage metrics (features used, messages sent, campaigns run, error logs). This helps us improve the platform, diagnose issues, and understand usage patterns.

2.4. Cookies and Similar Technologies

We use cookies, session tokens, and similar technologies to authenticate users, remember preferences, analyze usage, and secure the platform. You can control cookies through your browser settings, though some cookies are essential for the platform to function. See our Cookie Policy for details.

We use the information we collect to:

• Provide, operate, maintain, and improve the VartaDesk platform.
• Process and deliver messages via WhatsApp, SMS, RCS, Email, and other channels you configure.
• Manage your account, subscriptions, billing, and provide customer support and technical assistance.
• Analyze usage patterns, monitor performance and uptime, and detect, prevent, and address technical or security issues.
• Communicate with you about product updates, new features, promotional offers (with your consent), and service-related notices.
• Comply with legal obligations and enforce our Terms of Service.

With respect to Customer Data (information about your End Users that you process through VartaDesk), we act as a data processor and you act as the data controller. You determine what Customer Data is collected, how it is used, and how long it is retained. We process Customer Data only on your instructions and in accordance with our Data Processing Addendum (DPA).

With respect to your account and subscription data, we are the data controller.

5.1. Third-Party Service Providers (Sub-Processors)

To deliver VartaDesk's functionality, we share information with trusted third-party sub-processors, including:

• Messaging providers: Meta Platforms (WhatsApp Business Platform), AiSensy, Fast2SMS, and Twilio — used when you connect the matching channel.
• Cloud infrastructure: application compute, database, and cache operated by SevenD Mobility Solutions LLC; document and media files stored with Amazon S3.
• Document and media storage: Amazon Web Services (Amazon S3).
• AI services: OpenAI and/or Anthropic when you enable AI features with that provider.
• Payments: Razorpay and, when enabled, Stripe.
• Website analytics: Google Analytics 4 when you install and connect the Website pulse pack.

We require all sub-processors to comply with data protection obligations equivalent to those in our DPA and to process data only for the purposes we instruct. See our Sub-processors page for a structured list.

5.2. Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of VartaDesk, our Customers, or others.

5.3. Business Transfers

If VartaDesk is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

We retain your account and subscription data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements.

You control the retention of Customer Data. You may delete Customer Data at any time through the VartaDesk platform. Upon termination of your subscription, we will retain Customer Data for a limited period (typically 30–90 days) to allow recovery, after which it will be permanently deleted unless you request earlier deletion or longer retention.

We implement industry-standard technical and organizational measures to protect information from unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (TLS) and at rest, access controls, role-based permissions, regular security assessments, and monitoring. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. See our Security page for more detail.

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• Access and Portability: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct your account information at any time via your VartaDesk dashboard.
• Deletion: You may request deletion of your account and associated data.
• Restriction and Objection: You may request that we restrict or stop processing your information in certain circumstances.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time (e.g., unsubscribe from marketing emails).

To exercise these rights, contact us at info@sevendmobility.com. Note that certain rights apply only to personal information for which we are the controller; for Customer Data, please direct requests to the Customer (the controller).

VartaDesk is operated from the United States. If you access the platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries where our sub-processors operate. We implement appropriate safeguards (such as Standard Contractual Clauses) to protect information transferred internationally in accordance with applicable data protection laws.

VartaDesk is not intended for use by individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us, and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of VartaDesk after changes become effective constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: