Privacy Policy
Effective 11 November 2026 · Last updated 12 November 2026
Ideora Technologies (“Ideora”, “we”, “our”, or “us”) is an India-based technology business that develops and operates software products, digital platforms, mobile applications, artificial intelligence solutions, and business automation services. Ideora is the parent business for Digital Gullak, Digital Mala, SI Contact, AI Designer – CorelDRAW Plugin (published on this website as AI Plugin for Designers), and Jain Gyan AI.
Ideora uses one official Meta WhatsApp Business Platform Cloud API integration for its own products and its own business communication: Digital Gullak, Digital Mala, SI Contact, AI Designer – CorelDRAW Plugin, and Jain Gyan AI. A person who uses one of those products may receive the product messages described here.
Related documents: Privacy Policy, Terms & Conditions, WhatsApp Acceptable Use Policy, and Data Deletion Policy.
Company
Business name: Ideora Technologies
Business type: Proprietorship Firm
Proprietor and grievance contact: Shikha Paras Lohade
Place of business: 1, Space Cosmos, Beside Canara Bank, Old Agra Road, Ashok Stambh, Nashik 422002, Maharashtra, India
Websites: https://ideora.in and https://ideoratechnologies.com
Privacy, support, legal, and deletion: contact@ideora.in
Use one of these subjects so the message is reviewed for the right purpose: “Privacy request”, “Support”, “Legal”, or “Data Deletion Request – Ideora Technologies”.
Ideora Technologies is a proprietorship firm. Shikha Paras Lohade is the proprietor and the grievance contact. Messages to contact@ideora.in are the channel for privacy, support, legal, and deletion requests.
1. Introduction
This Privacy Policy describes how Ideora collects, uses, processes, stores, discloses, retains, and deletes personal information.
It applies to services operated under Ideora Technologies, including:
- Digital Gullak.
- Digital Mala.
- SI Contact.
- AI Designer – CorelDRAW Plugin.
- Jain Gyan AI.
- The Ideora Technologies websites at ideora.in and ideoratechnologies.com.
- Official WhatsApp Business Platform integrations operated by Ideora.
By using our services, you acknowledge that you have had an opportunity to review this policy. Where consent is required, we obtain it separately through an appropriate mechanism.
Where a product page describes a feature as proposed, this policy describes how information will be handled if that feature is made available. A proposed feature is not a feature you can use today.
2. Products covered
2.1 Digital Gullak
A digital donation and institution-management platform. Information may include donor profiles, contact details, donation history, transaction references, receipts, and communication preferences.
2.2 Digital Mala
A digital spiritual chanting application. Information may include account details, chanting sessions, activity statistics, audio recordings where submitted, and voice-processing results.
2.3 SI Contact
A digital contact-management solution. Information may include contact names, phone numbers, email addresses, business details, and user-created contact records. The person who uploads a contact is responsible for having the authority to store it.
2.4 AI Designer – CorelDRAW Plugin
An AI-assisted graphic design automation product. Information may include design instructions, uploaded images, reference files, logos, design documents, AI prompts, and generated outputs.
2.5 Jain Gyan AI
An AI-powered Jain knowledge and learning platform. Information may include account details, questions, prompts, conversations where enabled, language preferences, and user feedback. Responses are educational. They are not a definitive religious ruling.
3. Categories of information collected
Depending on the product and the features used, we may collect the following.
3.1 Identity information
- Full name.
- Mobile number.
- Email address.
- Account identifier.
- Organisation details.
- Communication preferences.
3.2 Technical information
- IP address.
- Device type.
- Operating system.
- Browser information.
- Application version.
- Login timestamps.
- Diagnostic information.
- Error reports.
3.3 Transaction information
- Transaction reference.
- Payment amount.
- Transaction status.
- Donation or order reference.
- Payment gateway reference.
- Receipt information.
We do not intentionally collect or store UPI PINs, banking passwords, or complete payment-card authentication credentials.
3.4 User-generated information
- Uploaded documents.
- Images and logos.
- Design references.
- AI prompts.
- Voice recordings where submitted.
- Feedback and support requests.
- Generated files.
3.5 Communication information
- Email correspondence.
- Contact-form submissions.
- WhatsApp phone numbers.
- WhatsApp message identifiers.
- Message timestamps.
- Message content available to our systems.
- Delivery and read status where provided.
- Consent and opt-out records.
3.6 This website
The contact form at /contact-us.html collects your name, email address, the product or topic you select, your message, and your confirmation that we may use those details to reply. FormSubmit (formsubmit.co) delivers that message to contact@ideora.in. The host may keep technical logs. These pages do not set advertising cookies, and they do not load a third-party analytics tool.
4. WhatsApp Business Platform
This section governs WhatsApp communications initiated by Ideora through the official WhatsApp Business Platform.
4.1 Official API only
Ideora uses or may use the official Meta WhatsApp Business Platform Cloud API. Ideora does not authorise or intentionally use unofficial WhatsApp APIs, modified WhatsApp applications, reverse-engineered WhatsApp services, unauthorised browser automation, unauthorised messaging scripts, or circumvention of WhatsApp platform restrictions.
Ideora is the business responsible for operating these products and for the WhatsApp messages those products send. The integration is Ideora’s own. People who use Digital Gullak, Digital Mala, SI Contact, AI Designer, or Jain Gyan AI are users of Ideora’s products.
WhatsApp notifications for a product stay switched off until that product’s consent flow, approved message templates, opt-out handling, and retention behaviour have been tested against the production configuration.
4.2 Purpose of WhatsApp communication
WhatsApp may be used for:
- Account registration confirmation.
- OTP and authentication messages.
- Security alerts.
- Donation confirmations.
- Payment acknowledgements.
- Transaction receipts and digital receipts.
- Order and service status updates.
- Requested customer support.
- Product-related operational notifications.
- Important account notices.
The current communication model excludes promotional campaigns, unsolicited advertisements, bulk marketing, and promotional offers. Marketing messages, promotional campaigns, bulk offers, and unsolicited advertisements require an update to this policy and to the consent system before they can be enabled.
4.3 WhatsApp data collected
Depending on the communication workflow, we may process the recipient phone number, Business Account identifier, Phone Number ID, WhatsApp message ID, message template identifier, message content, message category, delivery status, read status where available, incoming message information, webhook event metadata, consent records, opt-out records, and API error information.
The information available to Ideora depends on the official API, the permissions granted, and the technical configuration.
4.4 Consent and communication permission
We contact individuals through WhatsApp only where the necessary permission has been obtained. Collection of a mobile number alone is not unrestricted permission for WhatsApp communication.
Consent mechanisms may include website registration, in-application consent, an explicit communication request, transaction-related consent or authorisation where appropriate, and other documented and lawful opt-in methods.
We may keep a record of the phone number, consent purpose, consent wording, consent timestamp, consent source, applicable product, consent status, and withdrawal status. We do not use purchased or scraped phone-number lists for unsolicited communication.
4.5 Message categories
WhatsApp communication is restricted to non-promotional purposes.
Authentication: OTP, login verification, and account security.
Transactional: donation confirmation, payment status, receipts, and order or service confirmation.
Service: customer-support responses, technical notifications, requested updates, and service-related information.
Marketing and promotional communication are excluded from the current business model.
4.6 Message templates
Where Meta requires a template, we use an approved WhatsApp message template, and only for its approved purpose. We do not intentionally misclassify promotional content as a utility message, use deceptive template wording, circumvent template approval, continue using a rejected or paused template, or send unauthorised messages outside the applicable messaging window.
4.7 Customer service window
We follow the WhatsApp Business Platform’s applicable customer-service window. Where the 24-hour customer-service window applies, a free-form response may be sent within the permitted window after a user’s message. Outside that window, an approved template is used where required.
4.8 Opt-out
You may ask Ideora to stop sending WhatsApp messages by replying STOP, replying UNSUBSCRIBE, sending a clear direct request, emailing contact@ideora.in, or using an account preference setting where one is available.
We maintain suppression controls so that further unwanted communication in the withdrawn category is blocked. An essential security or transaction message may continue only where it is separately necessary and permitted, and where it is consistent with a valid legal restriction and the applicable user request. You do not have to give a reason for withdrawing optional communication permission.
4.9 No promotional messaging
The current WhatsApp communication model excludes promotional offers, advertising campaigns, product-marketing broadcasts, unsolicited announcements, purchased-list messaging, and marketing lead generation. Any future change requires a review of consent, these legal documents, and WhatsApp platform compliance before implementation.
5. WhatsApp and Meta as third-party services
WhatsApp and Meta operate independently under their own terms and privacy policies. Ideora uses the official WhatsApp Business Platform and does not control all processing performed independently by Meta. Depending on the applicable service terms, Meta and WhatsApp may process information in different capacities.
Review:
- WhatsApp Business Data Processing Terms
- WhatsApp Business Messaging Policy
- WhatsApp Business Terms of Service
6. Artificial intelligence and automated processing
Some Ideora products may use artificial intelligence to process information you provide.
- Jain Gyan AI may process questions and generate educational responses.
- AI Designer may process design instructions and reference files.
- Digital Mala may process audio input for mantra recognition.
AI-generated results may contain errors or incomplete information. We use personal information for AI-related processing only for the product purposes disclosed here, and under applicable legal and contractual requirements. We will describe a prompt as remaining inside Ideora’s own systems only when the live configuration and the provider contract establish that.
7. Payment and financial information
Digital Gullak and other products may integrate with payment gateways. Payment providers may process sensitive payment credentials independently. Ideora may receive transaction references, payment status, amount, timestamps, and other transaction-related information necessary to operate the service.
We do not intentionally request UPI PINs, card PINs, or banking passwords through WhatsApp, email, the contact form, or customer support. A donation acknowledgement does not, by itself, establish tax deductibility or charitable registration status.
8. Hosting and international data processing
Ideora may use cloud infrastructure located in India and in other countries. Personal information may therefore be stored or processed in more than one place, depending on the product, the hosting provider, the backup configuration, and the technical requirements.
International hosting is not unrestricted international transfer. We use authorised hosting providers, assess vendor security practices, apply appropriate contractual safeguards, restrict access to authorised personnel, implement appropriate security measures, follow applicable cross-border transfer requirements, and avoid unnecessary international transfers.
We do not represent that all information is stored exclusively in India. Vendor contracts, security safeguards, applicable transfer restrictions, and data-subject rights remain part of any transfer.
9. Sharing of information
Information may be shared with authorised service providers, including Meta and WhatsApp, cloud infrastructure providers, payment gateway providers, authentication providers, email service providers (including FormSubmit for the website contact form), AI service providers, monitoring and diagnostic services, and security service providers.
Sharing is limited to legitimate operational purposes and to applicable contractual and legal requirements. We do not sell personal information. One product user’s WhatsApp thread is kept separate from another product user’s thread.
10. Data retention
We retain information for as long as it is needed for the purpose for which it was collected, or for as long as the law permits or requires. Retention may depend on account status, transaction requirements, security obligations, consent records, dispute resolution, legal retention requirements, and backup and recovery schedules.
WhatsApp message content, delivery logs, consent information, and technical metadata may have different retention periods. A documented retention schedule will name those periods as each product goes live. Retained information is limited to the purpose that requires it.
11. Security measures
We use reasonable technical and organisational measures appropriate to the service. Depending on the system, these may include HTTPS/TLS encryption, secure API communication, access restrictions, role-based permissions, credential management, token rotation, webhook signature verification, database access controls, audit logs, security monitoring, backup protection, and incident-response procedures.
Where a WhatsApp integration is switched on, access tokens are kept on the server. They are not placed in a public application or in this website. No electronic transmission or storage system can be guaranteed to be completely secure. Do not send passwords, OTPs, UPI PINs, or identity documents through the contact form or over WhatsApp.
12. Data breaches
Where a security incident involving personal information occurs, we investigate, contain, assess, and take appropriate corrective measures. We notify affected individuals and relevant authorities where required by applicable law and within the timelines that law sets.
13. User rights
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 follow a phased commencement schedule. The Government notified the Rules on 14 November 2025. Certain substantive provisions are scheduled to commence 18 months after publication. On 11 November 2026, this policy treats as already in force only those duties that have commenced, together with other laws that already apply. Ideora is preparing for the scheduled commencement.
Subject to the law that applies at the time of the request, and subject to its commencement, you may ask to:
- Access personal information.
- Correct inaccurate information.
- Erase eligible personal information.
- Withdraw consent.
- Raise a grievance.
- Receive information about the processing.
Send the request to contact@ideora.in with the subject “Privacy request”. We may ask you to show that you control the email address or mobile number on the account. We aim to answer within 30 days. If a law that is in force sets a different time, that time applies. Deletion is described in the Data Deletion & Account Removal Policy.
14. Children’s information
Our services are not intended to knowingly collect a child’s personal information without the authorisation and safeguards the applicable law requires. Where a service is intended for children, parental consent and child-protection requirements must be in place before that collection. A parent or guardian who believes we hold a child’s information may ask us to delete it.
15. Third-party links
Our website may link to third-party services, including payment pages and WhatsApp. Their privacy practices are governed by their own policies. Ideora is not responsible for independent processing performed by those websites.
16. Changes to this policy
We may update this Privacy Policy to reflect product changes, technical changes, legal requirements, or changes in our business operations. The latest version is published on this page. The date at the top is the date of the current version.
17. Grievance and privacy contact
Ideora Technologies
Proprietorship Firm
Proprietor: Shikha Paras Lohade
1, Space Cosmos, Beside Canara Bank, Old Agra Road, Ashok Stambh, Nashik 422002, Maharashtra, India
Privacy, support, legal, and deletion: contact@ideora.in
Websites: https://ideora.in and https://ideoratechnologies.com
We review privacy complaints and respond in accordance with applicable requirements. Shikha Paras Lohade, proprietor of Ideora Technologies, is the grievance contact.