Privacy Policy for Mergenta

Effective Date: 01.11.2025

Last Updated: 01.11.2025

1. Introduction

Welcome to Mergenta, a digital platform developed and managed by SNS Innovation Labs Pvt. Ltd. ("we", "our", or "us"). Your privacy is important to us, and we are committed to protecting it with transparency and care.

This Privacy Policy explains how we collect, use, store, and share information about users who access or use our website, applications, or related online services (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

2. Scope and Applicability

This Privacy Policy applies to all users of Mergenta and covers information collected through:

  • Our website, app, and associated digital interfaces.
  • Third-party integrations connected with Mergenta.
  • Any communication or correspondence you send to us.

It does not apply to third-party websites or services that may be linked from Mergenta.

3. Information We Collect

We collect only the information necessary to provide, improve, and secure our Services.

3.1 Information you provide

You may share the following information directly with us:

  • Contact details: Name and email address when you register or contact us.
  • Account information: Username, profile preferences, and login details (if applicable).

3.2 Information collected automatically

When you use our Services, our systems and infrastructure partners may automatically collect:

  • IP address, browser type, and operating system.
  • Device details, screen resolution, and language preferences.
  • Date, time, and duration of your visit.
  • Usage patterns such as clicks, navigation paths, and feature interaction.
  • Cookies and tracking data that help us analyse performance and improve usability.

3.3 Information from integrated services

Certain user data may also be collected or processed by third-party platforms that power Mergenta's features. These include (but are not limited to):

  • OpenAI – for AI-powered text, reasoning, and natural language responses.
  • Anthropic – for language and conversation processing.
  • Google (Gemini) – for AI models, analytics, and user insights.
  • Lovable – for frontend hosting, application interface, and workflow automation.
  • Supabase – for database, authentication, and storage management.
  • Razorpay / Stripe – for secure payment processing and billing verification.
  • Mistral – for AI-enabled interactions and NLP answers.

Each of these providers may collect or process data under their own privacy policies, which we encourage you to review.

4. How We Use Your Information

We use collected information solely for legitimate operational purposes, including:

  • To provide and maintain our Services.
  • To respond to support requests, enquiries, or feedback.
  • To personalise the user experience and optimise performance.
  • To communicate updates, feature improvements, or security notices.
  • To ensure compliance with applicable laws and resolve disputes.
  • To analyse aggregated usage trends for technical and design improvements.

We do not sell, lease, or trade personal data for marketing or advertising purposes.

5. Payments

All payments within Mergenta are securely processed by authorised third-party payment providers such as Razorpay or Stripe.

We do not store card numbers, CVV, or other sensitive financial data. We retain only essential transactional metadata such as:

  • Payment reference ID or transaction ID,
  • Amount billed,
  • Payment status,
  • Date and time of transaction.

This information is used strictly for billing reference, support, and record-keeping.

6. Data Storage and Processing

Mergenta does not operate its own servers for data storage. All data is securely processed and stored through infrastructure partners such as Supabase and Lovable, which may host servers in locations outside India.

These providers maintain their own data-protection and security standards, and we rely on their established frameworks to safeguard user data.

Where technically feasible, we adopt data minimisation — collecting and retaining only the information required to deliver our Services effectively.

7. Data Sharing and Disclosure

We may share limited information only in the following cases:

  • With third-party providers (listed above) who enable our AI, hosting, or payment functionalities.
  • With authorised personnel or contractors who require access for operational or security reasons.
  • When required by law, regulation, or valid legal process.
  • With your explicit consent or direction (for example, in case of integration with another service).

We do not disclose personal data to unauthorised external parties.

8. Default Settings and User Preferences

All service features — including analytics, performance tracking, and integration-based data sharing — are enabled by default to ensure full functionality of the Mergenta platform.

Users are encouraged to visit their personal preferences or account settings page to review and adjust their privacy, communication, and data-sharing preferences as desired.

By continuing to use Mergenta without modifying these settings, you acknowledge and accept that some data may be processed by third-party APIs and service providers.

9. Data Retention

We retain personal data only for as long as required to fulfil the purposes described in this Policy, or as mandated by law. Once data is no longer needed, it is deleted or anonymised from our systems and those of our infrastructure providers, following their respective retention schedules.

10. Security

We and our infrastructure partners apply industry-standard security measures to protect your data from unauthorised access, alteration, or loss. This includes encryption, secure communication protocols, access controls, and continuous monitoring.

Although no digital platform can guarantee absolute security, we are committed to maintaining robust safeguards and promptly addressing any identified vulnerabilities.

11. Use of AI Models and APIs

Mergenta itself does not train or modify AI models using user data. However, the third-party AI API providers that power our platform (such as OpenAI, Anthropic, and Google) may process data inputs to enhance safety, accuracy, or performance in accordance with their own privacy policies.

You can review their respective policies here:

12. Email Data Usage

When users connect Gmail, Mergenta accesses email data only to read messages and create reply drafts at the user's request. Email data is processed solely for the active user-initiated action and is not stored beyond what is necessary to provide the feature.

Email data is never used for advertising, profiling, or training AI models. Users can revoke Gmail access at any time from Mergenta or from their Google Account security settings.

13. Use of Memory and Stored Preferences

Mergenta offers optional memory and preference-related features that allow the platform to provide a more consistent and personalised experience.

When enabled by the user, Mergenta may store and reference certain information, including but not limited to:

  • Saved preferences and settings
  • User-provided identifiers such as display name or preferred form of address
  • Manually added memory entries
  • Automatically saved contextual information from interactions, where memory features are enabled
  • References to prior chats or saved memory, subject to user-selected settings

Memory data is processed and stored using Mergenta's infrastructure providers and integrated services, including database, hosting, and AI API partners. Such data may be processed outside the user's country of residence, in accordance with the providers' security and privacy practices.

All memory-related features are enabled by default to ensure full platform functionality. Users are encouraged to review and manage memory settings through their personal preferences page, where they can enable, disable, modify, or remove stored memory at any time.

Mergenta does not independently train artificial intelligence models using memory data. However, third-party AI service providers integrated with the platform may process inputs in accordance with their own privacy policies and usage terms.

Memory and stored preferences are treated as personal data where applicable and are governed by this Privacy Policy, including provisions related to data security, retention, and user rights.

14. Mergenta Agents and WhatsApp Business Messaging

Mergenta Agents Hub uses the WhatsApp Business Platform (provided by Meta) to send messages on behalf of users of our service ("Business Customers") to their own contacts.

What we collect: When a Business Customer uses our WhatsApp messaging features, we collect and store the phone numbers, names, and any other contact details they choose to upload or enter for their own recipients, along with the content and delivery status of messages sent through the platform.

How it's used: This data is used solely to deliver the messages our Business Customers configure (e.g. scheduled quote or content messages) via the WhatsApp Business API, and to provide delivery/read-status reporting back to the Business Customer.

Consent: Business Customers are responsible for ensuring they have obtained valid consent from their own contacts before adding them to our platform for WhatsApp messaging, in accordance with WhatsApp's Business Messaging Policy and applicable law. We do not independently verify consent for contacts uploaded by Business Customers.

Sharing with Meta: To deliver messages, relevant data (recipient phone number, message content, template identifiers) is transmitted to Meta/WhatsApp as the messaging infrastructure provider. Meta's own Privacy Policy governs its handling of this data as an independent data processor.

Bring Your Own Key (BYOK): Business Customers on eligible plans may connect their own WhatsApp Business Account via Meta's Embedded Signup. In this case, messages are sent using the Business Customer's own WhatsApp Business Account and credentials rather than our shared platform account; we store the resulting access credentials securely to perform sends on their behalf.

Retention and deletion: Message and contact records are retained for the current calendar month to support delivery reporting, and are purged after the monthly report is generated. Business Customers may request earlier deletion of their contact and message data at any time by emailing support@mergenta.ai.

Opt-out: Recipients may opt out at any time by replying STOP or blocking the sending number. Opt-out requests are received by the Business Customer sending the message (or by Mergenta, for messages sent via our shared number); Business Customers are responsible for honoring opt-out requests from their own recipients in future sends.

15. Cookies and Analytics

Mergenta may use cookies and analytics tools (such as Google Analytics or Supabase Insights) to collect information about how users interact with the platform.

Cookies help us:

  • Maintain session stability,
  • Measure traffic and performance,
  • Improve interface usability.

You can manage or disable cookies in your browser settings. Some features may function differently if cookies are disabled.

16. Your Rights and Choices

You have the right to:

  • Request access to the information we hold about you.
  • Request correction or deletion of inaccurate or obsolete data.
  • Adjust your communication or data-sharing preferences.
  • Withdraw consent for optional features at any time.

To exercise these rights, contact us at support@mergenta.ai. We will verify your request and respond within a reasonable timeframe.

17. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect service enhancements, legal changes, or operational adjustments.

Whenever we make significant updates, we will post the revised version on our website and update the "Last Updated" date above.

We encourage you to review this page periodically to stay informed.

18. Contact Us

For all privacy-related questions, concerns, or data requests, please contact us at:

📧 support@mergenta.ai

All communication related to privacy or personal data will take place only through this email address.

19. Summary Statement

Mergenta values user trust and transparency. We collect minimal data, process it responsibly through secure technology partners, and maintain privacy as a foundational principle of our platform's design.

By using Mergenta, you agree to this Privacy Policy and acknowledge that your data may be processed by our trusted infrastructure and AI service partners solely for operational purposes.