Security & trust

Your data — and your customers' — protected by design

Vyapnova handles real conversations and real money across every channel. Security, privacy, and responsible AI are built into the platform, not bolted on.

Built in

Trust pillars

The controls that keep your merchant data isolated, your access governed, and your AI answers grounded.

Data encryption

Every conversation, lead, and catalogue record is encrypted in transit (TLS 1.2+) and at rest. Secrets and access tokens are stored in a managed key vault, never in plaintext.

Access control & roles

Role-based access control (RBAC) with least-privilege defaults, short-lived JWT sessions, and tamper-evident audit logging on every sensitive action — who did what, and when.

Platform-approved integrations

Vyapnova connects only through official, Meta-approved Instagram and WhatsApp APIs. We request the minimum scopes needed, and you can revoke access from your dashboard at any time.

Tenant isolation

Your data is logically isolated per merchant. Every query is scoped to your tenant by design, so one business can never read, write, or train on another's conversations or catalogue.

Data ownership

You own your data — full stop. Export your conversations, leads, and catalogue at any time, and request erasure on demand, in line with India's DPDP Act 2023.

Responsible AI

Answers are grounded in your knowledge — catalogue, policies, FAQs and docs. Vyapnova never invents prices or availability, mirrors the customer's language, and escalates to a human whenever it is unsure.

Compliance

Compliance & data rights

Vyapnova Technologies Private Limited operates India-first and is building to the Digital Personal Data Protection (DPDP) Act 2023. You stay in control of personal data — yours and your customers'.

DPDP Act 2023 readinessData export & erasureConfigurable retentionAudit logging

Data export

Pull a complete, structured export of your conversations, captured leads, and catalogue through a self-serve endpoint — yours to keep and to move.

Erasure on request

Request deletion of a customer's personal data or your full account. We honour erasure requests and propagate them across backups within our stated SLA.

Retention controls

Configure how long conversations and lead data are retained. Set retention windows that match your obligations and your customers' expectations.

Report a vulnerability

Found a security issue? We take it seriously and will work with you in good faith. Please report it privately so we can fix it before any disclosure.

Have a security or privacy question?

Talk to our team about data handling, integrations, and compliance — or read exactly how we collect and process data.