Privacy Policy

Information you give us

• Account details: name, email address, mobile number, password (stored only in hashed form), salon/business name, city, professional category.
• Billing information: billing name and address, GSTIN (if provided), invoice and transaction reference, plan and payment status. We do not collect or store your card, UPI, net-banking or bank account details; these are entered directly with our payment gateway.
• Your Content: prompts and messages, files and images you attach (and the text and data inside them), Generated Documents, AI Outputs, ratings and feedback.
• Support and grievance communications you send to us.
• Preferences: consent choices, marketing preferences and notification settings.

Information collected automatically

• Device and technical data: IP address, browser, operating system, device identifiers, language, time zone and approximate location derived from IP.
• Usage data: pages and features used, session activity, error logs, timestamps, usage volume, and security logs.
• Cookies and similar technologies (see our Cookie Policy).

Information derived by the Service

To make retrieval and personalisation work, the Service creates technical representations of your Content (such as text extracts, indexes and vector embeddings) and a history of your conversations and documents. These are linked to your Account and are treated as your personal data.

Personal data of other people inside your Content

If you upload personal data about others (for example clients, staff or candidates), you confirm you have a lawful basis, notice and any consent required to do so. In that case you decide why that data is processed, and we process it on your behalf and on your instructions only to provide the Service. Please do not upload client health records, government ID numbers, financial credentials or passwords.

We will not use your personal data for a materially different purpose without seeking fresh consent or relying on another ground permitted by law.

BOBBEE is designed to remember your history so it can generate better solutions for you in future. For that reason:

We may keep data longer where retention is required by law, a court or an authority, or is necessary to protect legal rights. If we hold data to comply with law, we use it only for that purpose.

• With your separate, optional consent, we may use your name, contact details, business details, Subscription status and general usage information to send you marketing about BOBBEE, VOCOOS and related products and services, by email, SMS, WhatsApp, push or in-app messages.
• Consent to marketing is not a condition of using the Service. You can withdraw it at any time through account settings, the unsubscribe link, or by emailing [privacy@vocoos.com]. Withdrawal does not affect service and legal notices.
• We do not use the content of your chats or files to advertise third-party products to you, and we do not disclose it to advertisers. We do not sell your personal data.

To generate responses, we send relevant parts of your prompts and Content to AI-model providers and related infrastructure providers (currently [AI MODEL PROVIDER(S)]). They process this data only to provide services to us under contractual terms [and, according to those terms, do not use your Content to train their general models]. Their servers may be located outside India. AI Outputs are generated automatically and are informational; we do not use them to make decisions about you that produce legal effects without human involvement.

• Service providers that help us run BOBBEE: cloud hosting and storage ([HOSTING PROVIDER]), AI-model providers, payment gateway ([PAYMENT GATEWAY NAME]), email/SMS/WhatsApp/OTP providers, analytics, error monitoring and customer-support tools. They may use the data only to provide services to us, under confidentiality and security obligations.
• Authorities and for legal reasons: we may disclose data where required by law, court order, summons or a lawful request from a government, regulatory or law-enforcement authority, or where we believe in good faith that it is necessary to investigate fraud, protect the safety, rights or property of the Company, our users or the public, or enforce our Terms.
• Business transfers: if the Company is involved in a merger, acquisition, restructuring, financing or sale of assets, personal data may be transferred to the successor, who must continue to honour this Policy.
• Professional advisers such as auditors, lawyers and insurers, under confidentiality.
• With your instruction: where you ask us to share or export information.

We do not sell personal data.

Our servers are located in [INDIA / REGION]. Some of our service providers (including AI-model providers) may process data outside India. We transfer personal data outside India only as permitted by the DPDP Act and any restrictions notified under it, and we require providers to apply appropriate protection. By using the Service, you consent to such transfers to the extent permitted by law.

We use reasonable technical and organisational safeguards, including encryption in transit, hashed passwords, access controls, logging, backups and vulnerability management, and we limit access to personnel who need it. No system is completely secure, and we cannot guarantee absolute security. You are responsible for choosing a strong password, protecting your devices and credentials and telling us promptly at [security@vocoos.com] about any suspected compromise. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users, and report to CERT-In, as and when the law requires.

Subject to applicable law, including the DPDP Act, you may:

• request a summary of the personal data we hold and the processing we carry out, and the identities of those with whom we have shared it;
• ask us to correct, complete or update your data;
• ask us to erase your data (subject to legal retention obligations and legitimate legal needs);
• withdraw consent at any time (this does not affect processing done before withdrawal, and some features may stop working);
• nominate another person to exercise your rights in the event of your death or incapacity; and
• raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.

To exercise these rights, write to [privacy@vocoos.com] or the Grievance Officer. We may need to verify your identity. We respond within the time prescribed by law. Account settings also let you manage many of these choices.

BOBBEE is for people aged 18 and above. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete the Account and data, subject to legal requirements. If you believe a child has used the Service, contact [privacy@vocoos.com].

We use cookies and similar technologies as explained in our Cookie Policy, including for login, security, preferences and, with your consent, analytics.

The Service may link to third-party sites and services (including payment pages and external sources). Their privacy practices are their own. Please read their policies.

We may update this Policy. We will post the revised version with a new "Last Updated" date and, where the change is significant or the law requires, notify you by email or in-app notice. Where we need fresh consent, we will ask for it.

Grievance Officer / Data Protection contact: [NAME], [DESIGNATION], VIXOM SYSCORP LLP, [FULL ADDRESS], Mumbai, Maharashtra, India. Email: [grievance@vocoos.com] | Privacy queries: [privacy@vocoos.com]. We acknowledge requests within 48 hours and aim to resolve them within the timelines the law prescribes.

Items in yellow brackets must be completed with real details before publication (vendors, hosting region, retention periods and officer details). Have this Policy reviewed by an Indian privacy lawyer against the DPDP Act and the Rules as in force on your launch date.