Privacy Policy

1. Introduction

This Privacy Policy describes how Sri Athi Mobiles, a sole proprietorship registered under the laws of India, having its registered office in Tirunelveli, Tamil Nadu, India ("Sri Athi Mobiles", "TamilDM", "we", "us", or "our"), collects, uses, stores, discloses, and protects information when you use the TamilDM platform and related services available through tamildm.com (the "Service").

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Sri Athi Mobiles acts as the Data Fiduciary with respect to personal data processed through the Service.

By accessing or using TamilDM, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Third-Party Platform Integrations

TamilDM integrates with third-party platforms including:

• Instagram Graph API
• Facebook Graph API
• YouTube Data API Services
• Google OAuth Services

TamilDM only accesses data and performs actions that you explicitly authorize through the permissions granted during account connection.

YouTube API Services Disclosure

TamilDM uses YouTube API Services.

TamilDM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

By using features that interact with YouTube, you also agree to:

• Google's Privacy Policy
• YouTube Terms of Service
• YouTube API Services Terms of Service

Users may revoke TamilDM's access to YouTube data at any time through:
https://security.google.com/settings/security/permissions

Meta Platform Disclosure

TamilDM uses Meta's APIs, including Instagram Graph API and Facebook Graph API.

Users may revoke access through their Meta account settings at any time.

TamilDM does not collect, store, or access Instagram or Facebook account passwords.

3. Permissions We Use

Depending on the features you enable, TamilDM may request permissions including:

Instagram

• instagram_basic
• instagram_manage_messages
• pages_manage_metadata
• pages_read_engagement

Facebook

• pages_manage_metadata
• pages_read_engagement
• pages_messaging

YouTube

• Read channel information
• Read comments
• Read video metadata
• Post replies
• Moderate comments
• Remove comments
• Access analytics related to connected channels

TamilDM only uses permissions required to provide features you have configured.

4. Information We Collect

We collect only the information necessary to operate the Service.

Account Information

When you register:

• Name
• Email address
• Authentication provider identifiers
• Profile image (if supplied by OAuth providers)

Social Media Data

When you connect a platform:

Instagram

• Instagram account ID
• Username
• Message content
• Comment content
• User identifiers provided by Meta

Facebook

• Page identifiers
• Messaging content
• Comment content
• User identifiers provided by Meta

YouTube

• Channel ID
• Channel metadata
• Video metadata
• Comments
• Comment authors
• Moderation actions
• Reply history

Usage Data

We may automatically collect:

• IP address
• Browser information
• Device information
• Operating system
• Access timestamps
• Error reports
• Activity logs

Cookies, Pixels and Analytics

With your consent, we load the Meta Pixel on our public website to understand how visitors find TamilDM and which pages are useful. When it is active it collects and shares the following with Meta Platforms, Inc.:

• IP address
• Browser and device information
• Pages viewed and the time of the visit
• Cookies set by Meta on your browser

The Meta Pixel is not required to operate the Service. It is off by default and never loads until you affirmatively accept it. If you decline, or have not yet chosen, the pixel script is not placed on the page at all and no advertising identifier is set. You can change your decision at any time in section 10 below.

TamilDM is intended for adults. We do not knowingly apply analytics or advertising tracking to anyone under 18, and our consent notice asks you to confirm your age before analytics is enabled.

Cookies that are strictly necessary — such as those that keep you signed in — are always active, as the Service cannot function without them.

Payment Information

If you purchase a subscription:

• Billing details
• Subscription status
• Payment transaction identifiers

TamilDM does not store full payment card information.

Payment information is processed directly by our payment providers.

5. How We Use Information

We use information to:

• Provide and operate TamilDM
• Authenticate users
• Connect social media accounts
• Process automation workflows
• Send automated messages and replies configured by users
• Moderate comments when instructed by users
• Generate analytics and reporting
• Provide customer support
• Detect abuse, fraud, and security incidents
• Maintain service reliability
• Process subscription payments
• Comply with legal obligations

TamilDM does not sell user data.

TamilDM does not use data obtained from the Instagram, Facebook or YouTube APIs — your account data, messages, comments or audience information — for advertising purposes. This is separate from the website analytics described in section 4, which covers only visits to our public marketing pages and runs solely with your consent.

6. AI-Powered Features

TamilDM may offer AI-powered features including:

• Auto-reply generation
• Message classification
• Sentiment analysis
• Comment moderation assistance
• Workflow recommendations

When these features are used, relevant content may be sent to third-party AI providers solely for inference purposes.

TamilDM does not use user content to train its own AI models.

Data is processed only to provide the requested feature.

7. Data Sharing and Subprocessors

TamilDM does not sell, rent, or trade personal information.

We may share limited information with trusted service providers necessary to operate the Service.

Current subprocessors may include:

Each provider receives only the minimum data required to perform its function.

8. Data Retention Schedule

Unless a longer period is required by applicable law, personal data is retained only as long as necessary to fulfill the purposes set out in this Privacy Policy:

Automation Logs

Retained for 90 days, after which they are automatically purged by automated cron jobs.

Webhook Events

Retained for 30 days, after which incoming event payloads are automatically deleted.

Security & Anti-Abuse Identifiers

To prevent free-trial abuse and enforce safety limits, one-way cryptographic hashes of certain identifiers are retained temporarily after account deletion or expiration:

• Hashed email addresses: Retained for 180 days (auto-purged thereafter).
• Hashed WhatsApp numbers: Retained for 365 days (auto-purged thereafter).
• Free-trial usage business identifiers: Retained for up to 365 days (auto-purged thereafter).

Tax & Financial Invoices

Pursuant to Indian Goods and Services Tax (GST) Act and Income Tax Act requirements, transactional tax invoice records (excluding payment signatures and personal credentials) are archived for 8 years to meet statutory tax audit mandates.

Access Tokens

Stored in encrypted form using AES-256 encryption. Tokens are immediately deleted upon account deletion, platform disconnection, or explicit authorization revocation.

9. Security Safeguards and Data Breach Incident Management

TamilDM implements robust technical and organizational security measures including:

• TLS 1.3 / HTTPS encryption for data in transit
• AES-256 encryption for access tokens and sensitive data at rest
• Role-Based Access Controls (RBAC) and strict API authentication
• Automated audit logging and intrusion detection monitoring
• Rate limiting and Web Application Firewall (WAF) protections

Data Breach Notification Commitment

In compliance with the Indian Computer Emergency Response Team (CERT-In) Cyber Security Directions and the Digital Personal Data Protection Act, 2023:

• In the event of a confirmed personal data breach affecting your information, Sri Athi Mobiles will notify CERT-In within 6 hours of discovering the cybersecurity incident as required by law.
• We will notify affected users (Data Principals) without undue delay, outlining the nature of the breach, affected data categories, remedial actions taken, and steps users can take to protect themselves.

10. Your Rights

Subject to applicable law (including DPDP Act 2023 & GDPR where applicable), users may:

• Request access to a summary of personal data processed by us
• Request correction or updating of inaccurate data
• Request erasure/deletion of personal data
• Withdraw consent at any time without affecting prior lawful processing
• Register a grievance with our Grievance Officer

Requests may be submitted through the contact details below.

Withdraw Consent for Analytics

Withdrawing consent is as easy as giving it. Use the control below to turn website analytics on or off at any time — no email or request is needed. Turning it off takes effect immediately: the pixel stops sending data straight away and the tracking cookies Meta has already placed on this browser are cleared.

11. Account Deletion and Data Deletion

Users may delete their account through the TamilDM dashboard or by contacting support.

Upon deletion:

• Connected platform tokens are revoked at Meta and Google Graph APIs
• Future synchronization stops instantly
• Personal information is removed from active production databases

Data Deletion Requests

Users may request deletion of their data by contacting:
support [at] tamildm.com

A dedicated deletion instruction page is available at:
https://tamildm.com/data-deletion

12. International Data Transfers

Your information may be processed on secure servers located outside your country of residence.

We implement standard contractual safeguards and security measures to ensure data remains protected regardless of where it is processed.

13. Children's Privacy

TamilDM is intended strictly for individuals who are 18 years of age or older.

We do not knowingly collect or process personal data of minors. Our registration process requires users to confirm they are 18 years of age or older.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Material changes will be posted on this page with an updated "Last Updated" date and notified via email.

15. Statutory Grievance Redressal Mechanism