Legal
How Settl collects, uses and protects personal data
This Privacy Policy explains how AIVONT AI LABS, having its registered office at 559-569, Tower-B1, Gurgaon, Haryana 122018, India (“Settl”, “we”, “us”), collects, uses, stores, shares and protects personal data in connection with the Settl platform at settl.chat (the “Services”).
This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It forms an integral part of our Terms & Conditions.
Who this Policy is for
Indian data protection law distinguishes between the party that decides why and how personal data is processed (the Data Fiduciary) and the party that processes it on their behalf (the Data Processor). Settl occupies both roles depending on the data in question.
| Category of data | Settl's role | Who decides |
|---|---|---|
| Debtor Data — names, mobile numbers, invoice particulars and message history uploaded or synced by a Customer | Data Processor | The Customer is the Data Fiduciary and instructs us |
| Customer account data — business details, user names, emails, login and billing records | Data Fiduciary | Settl |
| Website and product usage data — device, log and analytics data | Data Fiduciary | Settl |
What this means in practice.When a business uses Settl to remind its buyers about unpaid invoices, that business — not Settl — decides who is contacted and why. Settl processes that data only on the business's instructions. Requests to access, correct or erase debtor information should therefore be made to the business that sent the message; we will assist them in responding.
3.1 Data you provide to us
3.2 Data generated through use of the Services
3.3 Data from third parties
3.4 What we do not collect
We do not knowingly collect sensitive personal data such as biometric data, health data, caste or religious identifiers, or financial account credentials. We do not collect data relating to children, and the Services are not directed at persons under 18. We do not store your customers' card, bank account or UPI PIN details at any time — see Section 5.
| Purpose | Data used | Basis |
|---|---|---|
| Providing the Services — sending reminders, receiving replies, tracking invoices | Debtor Data, message data, account data | Performance of contract with the Customer; Customer's instructions as Data Fiduciary |
| Account creation, authentication and access control | Account and authentication data | Performance of contract |
| Billing, invoicing and GST compliance | Billing data, GSTIN | Legal obligation; performance of contract |
| Customer support and troubleshooting | Support communications, technical logs | Legitimate use for the purpose for which data was provided |
| Security, fraud prevention and abuse detection | Technical data, activity data | Legal obligation; legitimate use |
| Improving reliability and usability of the Services | Aggregated and de-identified usage analytics | Legitimate use |
| Service communications — outage notices, plan changes, policy updates | Contact details | Performance of contract |
| Marketing communications about Settl | Contact details | Consent, withdrawable at any time |
We do not sell personal data.We do not rent, trade or sell personal data to any third party, and we do not use Debtor Data for advertising or for training generally-available AI models. AI features within the Services process message content solely to serve that Customer's own reminder workflow.
5.1Reminders sent through Settl may contain a UPI deep link generated from the Customer's own Virtual Payment Address. When a Debtor taps it, their own UPI application opens with the amount pre-filled.
5.2Funds move directly from the Debtor's bank account to the Customer's bank account through NPCI infrastructure. Settl does not receive, hold, route, escrow or settle any money, and does not process any payment transaction. We therefore never see or store UPI PINs, card numbers, CVVs, bank account numbers or net-banking credentials.
5.3The only payment-related information in our systems is the Customer's own VPA (used to build the link) and the payment status that the Customer or their accounting software records.
6.1The Services operate on the WhatsApp Business Platform. Messages sent and received through Settl are transmitted through Meta's infrastructure and are subject to Meta's own privacy practices, over which we have no control.
6.2 Messages sent through the WhatsApp Business Platform are not end-to-end encrypted in the same manner as personal WhatsApp chats, because the business (and Settl as its processor) necessarily has access to message content in order to provide the Services.
6.3 We store message content and metadata so that Customers can view conversation history, so that our AI can detect payment-related intent, and so that opt-out requests are honoured reliably.
6.4We encourage you to review Meta's WhatsApp Business Privacy Policy for information on how Meta processes data on its platform.
We share personal data only in the following circumstances, and only to the extent necessary:
8.1 Location. Personal data is primarily stored on servers located in India. Any transfer outside India will be made only to jurisdictions permitted under the DPDP Act and subject to appropriate contractual safeguards.
8.2 Security measures. We implement reasonable security safeguards appropriate to the risk, including:
8.3 No system is perfectly secure. While we take security seriously, we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for promptly notifying us at support@settl.chat of any suspected unauthorised access.
8.4 Breach notification. In the event of a personal data breach, we will notify the Data Protection Board of India and affected persons as required under the DPDP Act, and will notify affected Customers without undue delay so that they can meet their own obligations as Data Fiduciaries.
| Data | Retention period |
|---|---|
| Debtor Data and message history | For the life of the account; deleted or irreversibly anonymised within 90 days of account termination (30 days for export, then deletion) |
| Opt-out / suppression records | Retained indefinitely, in minimal form, so that a person who has opted out is never contacted again through Settl |
| Billing and tax records | As required under the Income-tax Act, 1961, the GST laws and the Companies Act, 2013 — ordinarily 8 years |
| Security and access logs | Up to 12 months, or longer where required for an ongoing investigation |
| Support communications | Up to 24 months |
| Marketing contact data | Until consent is withdrawn |
Subject to the conditions and exemptions in the DPDP Act, you have the following rights in respect of your personal data:
How to exercise these rights: write to support@settl.chat from your registered email address. We may ask for information to verify your identity. We will respond within the timelines prescribed under the DPDP Act.
If you are a Debtor exercising rights over data a business uploaded about you, please contact that business directly — they are the Data Fiduciary and control that data. If you cannot identify or reach them, write to us at support@settl.chat and we will facilitate contact and, where you request it, action your opt-out immediately.
This section is written for Debtors — individuals or businesses who received a WhatsApp payment reminder sent through Settl.
11.1 Why you received a message. A business you deal with uses Settl to follow up on its unpaid invoices. That business supplied your mobile number and invoice details. Settl sent the message on their behalf and in their name.
11.2 How to stop receiving messages. Reply STOP on the same WhatsApp thread. Your opt-out is actioned within 60 seconds and applies permanently — it survives any later re-upload of your number by that business.
11.3 If you believe the amount is wrong or already paid, reply on the same thread. Your message goes to the business, which is responsible for resolving the dispute. Settl cannot verify, waive, reduce or enforce any amount.
11.4 If a message was harassing, threatening or sent at an unreasonable hour, please tell us at support@settl.chat. Our Terms prohibit such conduct, and we investigate and act against accounts that misuse the Services, including suspension.
11.5 Payments. Any UPI link in the message pays the business directly from your own UPI app. Settl never receives your money and never asks for your UPI PIN, OTP, card number or bank credentials. Treat any request for such details as fraudulent and report it to us.
12.1 settl.chat uses cookies and similar technologies that are strictly necessary for the site and dashboard to function (session management, authentication, security), together with analytics cookies that help us understand how the site is used.
12.2 You can control or delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using the dashboard.
12.3 We do not use third-party advertising cookies or cross-site tracking for behavioural advertising.
For any question, request or complaint relating to this Policy or to the processing of personal data, contact:
| Designation | Grievance Officer / Data Protection Contact |
| Entity | AIVONT AI LABS |
| Address | 559-569, Tower-B1, Gurgaon, Haryana 122018, India |
| support@settl.chat | |
| Acknowledgement | Within 48 hours of receipt |
| Resolution | Ordinarily within 15 days; within statutory timelines under the DPDP Act |
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India in accordance with the DPDP Act.
14.1 We may update this Policy from time to time. The current version is always available at settl.chat/privacy with its effective date.
14.2 Where a change materially affects how we handle personal data, we will notify Customers by email or in-product notice at least fifteen (15) days before it takes effect.
14.3 Previous versions are archived and available on request at support@settl.chat.
