Last updated: 4 November 2026
This Privacy Policy explains how Tanvik AI Solutions Private Limited ("Tanvik", "we", "us") collects, uses and protects information when you use the Tanvik website (tanvik.io), platform, and the Tanvik CRM mobile app.
When you connect a Facebook or Instagram account, you choose which permissions to grant. Tanvik uses them only to give you the features you asked for:
Ad accounts and campaigns (ads_management, ads_read, business_management) — to create, pause and report on your Click-to-WhatsApp ads.
Pages (pages_show_list, pages_read_engagement, pages_manage_ads) — to let you pick the Page an ad runs from.
Instagram — to publish content and read insights and comments for the account you connect.
We use this data only to provide these features to you. We do not sell it, use it to advertise to other people, or share it except with service providers that host and run the platform for us. We follow the Meta Platform Terms. We keep it while your account is active or until you ask us to delete it. To remove it, follow the steps on our Data Deletion page or email admin@tanvik.io.
Connecting Google Ads is optional. If you connect it, you sign in with Google and Google asks you to allow Tanvik access to your Google Ads accounts. With that access, Tanvik reads:
How we use it. Only to show your Google and YouTube ad results to you and your team inside Tanvik. Tanvik only reads: it does not create, change, pause or delete anything in your Google Ads account.
What we don't do. We do not sell this data, use it for advertising, or use it to train AI models. We do not share it with anyone except the service providers that host and run Tanvik for us. Tanvik staff do not look at it unless you ask us for help, or it is needed for security or to comply with the law.
Tanvik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we store. The access token Google gives us (stored encrypted), your Google account email, and the ID, name, currency and time zone of the Google Ads account you chose. Your campaigns and results are fetched from Google each time you open the page; we do not store them.
Disconnecting. You can disconnect at any time in Tanvik under Ads → Google & YouTube → Disconnect. Tanvik then asks Google to remove its access and deletes the stored token and connection details straight away; anything else we hold about the connection is deleted within 30 days. You can also remove Tanvik's access in your Google account at myaccount.google.com/permissions. That stops Tanvik reading your Google Ads data at once; to have the stored connection details deleted too, click Disconnect in Tanvik or email us. To ask us to delete any data received from Google, email admin@tanvik.io.
If you install Tanvik from the Shopify App Store, you let us read data from your store. You, the store owner, decide why this data is used, and we process it on your behalf.
What we access. Your store's products, orders, customers, inventory, fulfilments and locations, and your store's domain. From customers and orders we use names, email addresses, phone numbers and order details. We do not request customers' address fields. Shopify gives us an access token for your store; we store it securely and use it only to read your store. The permission to write orders is used only to record or cancel orders you place through Tanvik.
Why we use it. Only to give you the app: to show each customer's order history next to their conversation in your Tanvik inbox; to let your team answer customer questions; to send the messages you choose to send, such as order updates, follow-ups and campaigns, on WhatsApp and other channels; and to keep your catalogue and order records in step, using Shopify's webhooks and a sync every 15 minutes. We do not use it for anything else.
What we don't do. We do not sell Shopify store or customer data, use it to advertise to your customers, or share it with anyone except the service providers that host and run Tanvik for us and the messaging providers that deliver the messages you send.
Customers' consent. Tanvik records each customer's opt-in and opt-out status, imports the SMS and WhatsApp marketing consent that customers give in your Shopify store, and honours opt-outs, including STOP replies and a do-not-disturb setting. You remain responsible for having consent to message your customers (see Messaging & compliance below).
How long we keep it. While Tanvik is installed. When you uninstall, we delete the access token straight away. Shopify then tells us to erase the store's data (this arrives about 48 hours after uninstall) and we automatically delete the imported orders, products and contacts. Orders tied to invoices or payments are anonymised rather than deleted, because tax and accounting rules require us to keep those financial records. We also act on Shopify's customer data requests and customer erasure requests.
Your rights. A customer of a store can ask that store to access, correct or delete their data, and can also write to admin@tanvik.io. We handle requests under applicable law, including India's Digital Personal Data Protection Act, 2023.
Messages sent via WhatsApp, SMS and RCS are subject to the policies of the respective providers and applicable Indian regulations (including TRAI/DLT rules for SMS). Customers are responsible for obtaining consent from their own recipients.
We use industry-standard measures to protect your information, including access controls, encryption in transit and at rest, separation of each workspace's data from other workspaces' data, encrypted daily backups, and logging of staff access to workspaces and data exports. No method of transmission is 100% secure, but we work to protect your data.
You can request access to, correction of, or deletion of your personal information by contacting us. If you are a customer of a store that uses Tanvik, you can also contact that store.
Agents using the Tanvik CRM mobile app can request deletion of their account and associated personal data at any time.
How to request deletion. Email admin@tanvik.io with the subject line "Account Deletion Request," from the email address linked to your Tanvik account. Include your registered email and the business (client) account you're associated with. We process requests within 7 business days and confirm by email once complete.
What gets deleted. Your agent login credentials and profile information, your device push notification token, and your personal access to the app.
What may be retained. Lead, conversation and message data belongs to the business account you work under, not to you individually, and may be retained for legitimate operational and record-keeping purposes even after your personal account is deleted. If you'd like specific conversation data removed, note that in your request and we'll coordinate with the account owner.
Questions about this policy? Email admin@tanvik.io or see our contact page.