Legal

Privacy policy

What we collect, why, who we share it with and the choices you have. Written for the Digital Personal Data Protection Act, 2023.

Last updated 10 October 2026

What we collect

  • What you send us: name, email, WhatsApp number, company, GSTIN and the details of your brief, order or application.
  • Your account: name, email and a securely hashed password. We never store your password itself.
  • Payments: processed by our payment partner. We keep the order amount and payment reference, never your card or bank details.
  • Abuse prevention: a one-way scrambled version of your IP address, used only to stop spam and brute-force attempts and deleted within two days.
  • On your device: your theme choice, cart and saved partners are kept in your browser’s local storage, not on our servers.

Why we use it

  • To reply to your requests and introduce you to the partners you choose.
  • To set up bots, process orders and send invoices.
  • To show you the status of your requests in your account.
  • To keep the service secure and prevent misuse.

We also count page views in aggregate (which page, which website sent the visit, and phone or computer) to see what’s working. This uses no cookies and stores nothing that identifies you, and we skip it entirely if your browser sends Do Not Track or Global Privacy Control.

We don’t sell your data and we don’t use advertising or tracking cookies.

Who we share it with

  • Partners you ask to meet. Only the details in that request, and only with the partners you selected.
  • Service providers who run parts of LazyScale for us: website hosting (Vercel), our database (Neon, stored in the Singapore region), payments (Razorpay), email delivery (Resend) and, when a business switches on AI replies for its bot, AI text generation (Anthropic). They process data only on our instructions.
  • Authorities when the law requires it.

Chats with business bots

Businesses use LazyScale to run chat assistants on their own websites, chat pages and WhatsApp. When you chat with one, the business is responsible for your data and we process it on its behalf:

  • What’s stored: the messages in the chat, the page you chatted from, and any details you choose to give (such as your name, phone number or booking details), so the business can reply and follow up.
  • Who sees it: the business and the team members it invites. If the business connects a webhook or Google Sheet, the details you give are sent there too.
  • AI replies: if the business switches on AI replies, the text of your messages is sent to our AI provider (Anthropic) to write an answer. It is not used to train AI models.
  • WhatsApp: chats on WhatsApp also pass through Meta under WhatsApp’s own terms.
  • How long: chats are deleted after 12 months without activity. Details you left as a lead stay until the business deletes them or its bot.
  • Your rights: contact the business first. You can also ask us through the contact form and we’ll pass it on and help.

The chat window keeps a copy of your conversation in your browser’s local storage so it’s still there when you come back. Clearing your browser data removes it.

Cookies

We use one essential cookie to keep you signed in. It is HttpOnly, so scripts can’t read it, and it expires after 30 days or when you sign out. There are no analytics or advertising cookies; visit counts are made without any cookie.

How long we keep it

We keep requests and account details while your account is active and for as long as needed to provide the service. Payment and invoice records are kept for the period required by Indian tax law. You can ask us to delete your account and requests at any time.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights on your behalf. Send your request through the contact form and choose “Privacy or data request”. We reply within 30 days.

Children

LazyScale is a service for businesses and is not meant for anyone under 18.

Questions and complaints

Write to us through the contact form. If you’re not satisfied with our reply, you can raise it with our Grievance Officer, and after that with the Data Protection Board of India.