Privacy Policy

This policy describes the practices of Spontaneous Enterprise Opc Pvt Ltd ("we", "us", "our") regarding personal information processed through:

• The marketing website at shasvatm.com
• The Shasvatm CRM cloud application and APIs at crm.shasvatm.com (including use through web browsers and official mobile clients, if offered).

Spontaneous Enterprise Opc Pvt Ltd is established in India. For privacy-related requests, contact us at chirag@spontaneousenterprise.com.

Depending on how you interact with us, we may process categories such as:

• Account and contact data: name, work email address, phone number, job title, organisation or tenant name, and credentials used to authenticate you to Shasvatm CRM.
• Business and operational data: information your organisation enters into Shasvatm CRM (for example customers, tickets, leads, opportunities, contracts, inventory, attachments, and free-text fields). This may include personal data about your end customers or employees that you choose to store as part of your use of the service.
• Technical and usage data: IP address, approximate location derived from IP, device type, operating system, browser type, timestamps, pages or screens viewed, diagnostic logs, and security-related events needed to operate and protect the service.
• Support and communications: messages you send us (including email, chat, or WhatsApp if you contact us through those channels) and related metadata.
• Cookies and similar technologies: strictly necessary cookies or tokens for session, security, and preferences where applicable. We do not use third-party advertising cookies on this marketing site unless we explicitly disclose and request consent for them.

We use personal information to:

• Provide, host, operate, and improve Shasvatm CRM and related support.
• Authenticate users, enforce role-based access, and maintain audit trails as designed.
• Communicate about service updates, security notices, billing (if applicable), and inquiries you initiate.
• Detect, prevent, and investigate abuse, fraud, or technical issues.
• Meet legal obligations and respond to lawful requests from public authorities.
• Analyse aggregated or de-identified usage to improve product performance and documentation.

For users in jurisdictions that require a legal basis (such as the European Economic Area or the UK), we rely on one or more of: performance of a contract with you or your organisation; legitimate interests that are not overridden by your rights (for example securing our services); compliance with legal obligations; and consent where we expressly ask for it.

For users in India, we process personal data in line with applicable law, including the Digital Personal Data Protection Act, 2023 and rules thereunder, where they apply to our processing.

We do not sell your personal information. We share information only as needed to run the service, including with:

• Infrastructure and hosting providers (for example cloud servers, databases, backups, and content delivery) under contractual confidentiality and security obligations.
• Professional advisers (for example lawyers or accountants) where required and subject to confidentiality.
• Authorities when we believe in good faith that disclosure is required by law or to protect the rights, safety, or integrity of our users, the public, or our services.

Your organisation's administrators control many sharing decisions inside Shasvatm CRM (such as which users can see which records). Their use of the product is governed by your agreement with them, not only by this policy.

We retain personal information for as long as needed to provide the service, comply with law, resolve disputes, and enforce agreements. Retention periods may differ by data category and by what your organisation configures (for example audit or backup policies). When data is no longer required, we delete or anonymise it in line with our technical and organisational procedures.

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. This includes measures described at a high level on our Security page. No method of transmission over the Internet is completely secure; we encourage strong passwords, device security, and least-privilege access inside your organisation.

Subject to applicable law, you may have rights to access, correct, update, or delete certain personal information, to object to or restrict certain processing, to withdraw consent where processing is consent-based, and to lodge a complaint with a supervisory or regulatory authority. Many requests for Shasvatm CRM data must be routed through your organisation's administrator because we host tenant data on their behalf.

To exercise rights directly with us, email chirag@spontaneousenterprise.com. We may need to verify your identity before responding.

Shasvatm CRM is a business-to-business product and is not directed at children. We do not knowingly collect personal information from anyone under 16 (or the age required by local law). If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

Our primary operations are in India. If we transfer personal information to other countries, we do so using safeguards consistent with applicable law (such as contractual clauses or adequacy decisions, where required).

Our websites or apps may link to third-party sites or integrations (for example payment, identity, or communication tools). Those services have their own privacy policies; we are not responsible for their practices.

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Where changes are material and the law requires, we will provide additional notice (for example by email to administrators or an in-app notice).

Questions about this policy or our privacy practices:
Spontaneous Enterprise Opc Pvt Ltd
Email: chirag@spontaneousenterprise.com
Website: shasvatm.com