Privacy Policy

Last updated: 15 October 2026

ADORA ("we") provides ADORA, a marketing and customer-messaging platform used by businesses and marketing agencies ("our customers"). This policy explains what personal data we process, why, and your rights under India's Digital Personal Data Protection Act, 2023 and other applicable laws.

1. Who is responsible

For account data of our customers and their staff, we are the data fiduciary. For the data of people who message, call or buy from a business that uses ADORA ("end customers"), that business is the data fiduciary and we process the data on its behalf and on its instructions.

2. Data we process

• Account data: name, email, phone, role, login identifiers (via Google/Firebase sign-in).
• Connected social and business accounts: page/account IDs and names, access tokens (stored encrypted), and the content our customers publish or receive through Facebook, Instagram, Threads, WhatsApp, YouTube, Google Business Profile, LinkedIn, Pinterest, Telegram, X and TikTok.
• End-customer data: name, phone number, social handle, messages, comments, call records (number, time, duration, optional recording), bookings, payment-link status, reviews and feedback, and videos submitted with consent.
• Billing data: plan, invoices and payment status. Card/UPI details are handled by Razorpay; we do not store them.
• Technical data: IP address, device/browser details and logs for security and abuse prevention.

3. Why we use it

• To provide the service: publish posts, show and answer messages, book appointments, send payment links, reminders and reports.
• To generate AI suggestions and replies (captions, answers, insights) for our customers.
• To bill, secure, support and improve the service, and to meet legal obligations.

We do not sell personal data and do not use end-customer data for advertising of our own.

4. Service providers

We share data only as needed with: Google Cloud / Gemini API (AI processing, sign-in), Meta Platforms (Facebook, Instagram, WhatsApp, Threads), other social platforms our customers connect, Razorpay (payments), Exotel or similar telephony providers, email providers, and our hosting provider. They process data under their own terms and security commitments.

5. Google API data (Limited Use)

ADORA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data (for example YouTube uploads, Business Profile posts and reviews, Calendar availability) is used only to provide the features the user turned on, and is not used for advertising or sold.

6. Meta platform data

Data received from Facebook, Instagram, Threads and WhatsApp is used only to provide the messaging, publishing and lead features our customers enable, in line with Meta's Platform Terms. You can remove ADORA's access at any time in your Facebook/Instagram settings and request deletion as described below.

7. Storage, security and retention

Data is stored on our hosted servers and with the providers listed above. Access tokens and API keys are encrypted (AES-256-GCM). We keep data while our customer's account is active; after an account is closed, data is deleted within 90 days, and backups are overwritten within 14 days. Opt-outs ("STOP") are honoured immediately.

8. Your rights

You can ask for access, correction or erasure of your personal data, withdraw consent, and nominate another person. End customers can also contact the business directly. To ask us, use the data deletion page or write to us. We reply within 30 days.

9. Grievance officer and contact

Contact details will be published here.

10. Changes

We will post changes on this page and update the date above.