Privacy Policy

Retaily is operated by Oddeves Global Pvt Ltd, WZ-271, Vishnu Garden Part-1, New Delhi – 110018 (“Retaily”, “we”, “us”). This policy explains how we handle personal data when you visit our websites, create an account, or use our apps, including Retaily CMO.

For your account details and how you use Retaily, we decide how data is used (we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023). For the customer and contact data a business stores in its workspace — its leads, customers, messages and reviews — that business decides how it is used and we process it on the business’s instructions.

Account information. Your name, email address, password (stored only as a secure hash), company name, GSTIN and state, and your role in the workspace.

Workspace content. What you and your team create or upload: posts, images and videos, campaigns, brand guidelines, microsite pages, messages, contacts and notes.

Information from platforms you connect. When someone in a workspace connects Facebook, Instagram, Google (YouTube, Business Profile, Google Ads), LinkedIn, X, Pinterest or Snapchat, they sign in with that platform and choose what to share. Depending on the platform and the permissions granted, we receive:

• the connecting person’s platform user ID, name and profile picture;
• the pages, profiles, channels, boards, business locations and ad accounts they manage, and access tokens to act on them;
• posts, and their reach, engagement and other insights;
• comments, direct messages and mentions sent to those pages and profiles, including the sender’s public name or username;
• reviews of business locations, and lead form submissions from ads (for example a name, email and phone number the person entered);
• advertising campaigns, budgets, spend and results.

Usage and device information. Log data such as IP address, browser, pages visited and errors, used to run, secure and improve the service.

Cookies. We use cookies that keep you signed in and remember choices such as your selected brand or whether you have seen the product tour. We do not use advertising or cross-site tracking cookies.

• To provide the service: publishing and scheduling posts, showing results, bringing messages and reviews into one inbox, and managing ad campaigns you approve.
• To act on a platform only when you ask: we publish, reply or change an ad only after a person in your workspace creates or approves that action.
• To turn Lead Ads submissions into leads in your workspace’s CRM.
• To keep accounts secure, prevent abuse, and keep an audit log of changes in each workspace.
• To send service messages such as sign-in, approval and reconnection notices.
• To provide support and improve the product, using aggregated or de-identified usage information where possible.

Some features draft content or summarise results with the help of AI models. When you use them, only the content needed for that request is sent to the model provider. AI output is always a draft: nothing it writes is published, sent or spent until a person approves it.

We do not use your workspace content or data from connected platforms to train AI models.

We do not sell personal data. We share it only:

• With the platforms you connect, when you publish, reply or manage ads through them.
• With service providers who host and run the service for us under confidentiality and data-protection terms — cloud hosting and databases, email and messaging delivery, and AI model providers.
• Within your workspace, with the other members your workspace’s owner invites, according to their roles.
• When required by law, or to protect the rights, safety and security of our users and the public.
• In a business transfer, such as a merger or acquisition, subject to this policy.

We use data received from connected platforms only to provide the features the workspace uses, and in line with each platform’s developer terms — including the Meta Platform Terms.

Retaily’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Retaily’s access at any time from the platform’s own settings (for Facebook and Instagram: Settings → Apps and websites) or by disconnecting the account in Retaily → CMO → Integrations.

We keep account and workspace data for as long as the workspace is active. When a workspace is closed, we delete or anonymise its data within 90 days, except where the law requires us to keep records (for example tax and invoicing records) for longer.

Disconnecting a platform deletes the access tokens we held for it. Content already created in the workspace — posts, message history and leads — stays with the workspace until deleted by the workspace or closed with it.

Facebook and Instagram data deletion. To have the data we received through your Facebook login deleted, remove Retaily in Facebook Settings → Apps and websites and send a deletion request, or email us. We then delete your connections, the page and account access they gave us, and your platform profile details from every workspace, and give you a confirmation code with a page where you can check the request’s status.

To delete your Retaily account or any other personal data, write to info@retailyworkspaces.com.

• All traffic to and from Retaily is encrypted in transit (HTTPS).
• Platform access tokens are encrypted at rest (AES-256-GCM) with keys bound to your workspace.
• Each workspace’s data is isolated at the database level, and every change is written to a tamper-evident audit log.
• Access within a workspace is limited by role, and actions that publish, send or spend money require approval.

Our servers and databases are located in Singapore. Some service providers may process data in other countries. Where data leaves India, we transfer it only as permitted under Indian law and with safeguards for its protection.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how it is used;
• correct, complete or update it;
• ask us to erase it, and withdraw consent where processing is based on consent;
• nominate someone to exercise these rights on your behalf;
• raise a grievance with us, and then with the Data Protection Board of India.

If your data is held in a business’s workspace (for example you messaged or reviewed that business), please contact that business first; we will help them respond.

Retaily is a business service for people aged 18 and over. We do not knowingly collect personal data from children.

We will post any changes on this page and update the date at the top. For significant changes we will also notify workspace owners by email or in the app.

Questions or requests about privacy: info@retailyworkspaces.com, or write to Oddeves Global Pvt Ltd, WZ-271, Vishnu Garden Part-1, New Delhi – 110018.

Grievance Officer: [Grievance Officer name], info@retailyworkspaces.com. We acknowledge and resolve grievances within the time limits set by applicable law.