§ LEGAL · PRIVACY POLICY
Privacy Policy
Last updated · 20 May 2026
Skillies.AI ("we", "us") is operated by Ehsan Asgar P (Ehsan Asgar Parambatt), a sole proprietorship registered in Malappuram, Kerala, India (GSTIN 32FEOPP5745A2ZF). This policy explains how we collect, use, and protect the personal data you share when visiting skillies.ai, messaging our WhatsApp line, or purchasing the Skillies KDP course or AI Sales Agent service.
This policy is written to satisfy India’s Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Rules 2011.
What we collect
- When you buy a course or service: name, WhatsApp number, email, and payment metadata returned by Razorpay (transaction ID, amount, status). We do notsee your card or UPI account details — Razorpay does.
- When you message our WhatsApp line: your WhatsApp display name, phone number, and the content of the messages you send us (text, voice notes, images, documents).
- When you browse the site: IP address, device type, pages visited, and Meta Pixel events (ad conversion tracking). We do not use cross-site tracking cookies beyond Meta.
How we use it
- Deliver the product you paid for — course access, programme onboarding, or AI Sales Agent setup.
- Send you programme reminders, payment receipts, and post-purchase resources (only relating to what you bought).
- Answer your questions over WhatsApp using a combination of automated (AI) and human responses.
- Measure ad performance via Meta Pixel — aggregate, not personally identifying.
- Comply with Indian tax, GST, and Razorpay record-keeping obligations.
What we do NOT do
- We don’t sell your data.
- We don’t share your data with any third party for their own marketing or analytics. We use trusted sub-processors that act only on our behalf and instructions (listed below).
- We don’t send unsolicited marketing on WhatsApp. Any WhatsApp message from us is either a reply to something you wrote, a transactional update about a product you bought, or a follow-up to an enquiry you already started.
WhatsApp Business Cloud API · what to know
Skillies.AI operates a WhatsApp Business Cloud API line on +91 80899 41131. Inbound messages are processed through Meta’s WhatsApp Business platform and stored on our servers (Supabase, Mumbai region) so our agent can answer you, remember context across the conversation, and follow up on the Skillies KDP course or AI Sales Agent service.
- What we store: your WhatsApp display name, phone number, the messages you send us, and the messages we send back. We also store metadata such as detected language, intent, and a rolling memory note our agent uses to avoid asking you the same question twice.
- Consent model: messaging our WhatsApp line is treated as deemed consent under DPDP Act 2023 §7 for the specific purpose of replying to your enquiry. You can revoke at any time — reply STOP (or “unsubscribe” / “delete me” / “വേണ്ട”) and our system immediately stops messaging you and deletes the conversation in line with DPDP §11.
- AI assistance:most replies are drafted by an AI agent (Anthropic Claude). Voice notes you send are transcribed by OpenAI Whisper and voice replies we send are synthesised by ElevenLabs. Anything our agent can’t answer with confidence is escalated to a human (Ehsan or a Skillies operator) within minutes during business hours.
- What we never do over WhatsApp: diagnose medical conditions, give legal/tax/visa/immigration advice, promise specific earnings, store payment-card numbers, or share your phone number with third parties (other than Razorpay when you click a payment link).
- Retention:WhatsApp conversation history is retained while you are an active customer or have an open enquiry with us. You can request deletion at any time per DPDP §11; reply STOP to trigger the same deletion automatically. Purchase records and invoices are retained for 8 years to satisfy the GST Act.
- Templates and proactive messages: outside the 24-hour WhatsApp service window, Meta only permits us to send pre-approved utility templates (booking confirmations, payment reminders, course details, transactional follow-ups). We do not broadcast generic marketing messages to non-customers.
Sub-processors
We use the following sub-processors. Each acts only on our documented instructions and is bound by its own data processing agreement with us:
- Supabase(Mumbai region) — primary database for tenant data, conversation history, and customer memory.
- Vercel— application hosting and the public skillies.ai website.
- Anthropic (Claude)— large language model that drafts WhatsApp replies and customer summaries.
- OpenAI— speech-to-text transcription for voice notes you send us.
- ElevenLabs— text-to-speech synthesis when we reply to a voice note with a voice note.
- Meta (WhatsApp Business Cloud API)— message transport for the +91 80899 41131 line and ad attribution via Meta Pixel.
- Razorpay— payment processing for course and service purchases.
- Resend— transactional email delivery (receipts, daily digests, reset links).
Business clients · technology provider services
Where Skillies.AI provides WhatsApp customer-service assistants to business clients as a technology provider, each client connects their own WhatsApp Business Account and remains the controller of their customers’ data. Skillies.AI processes that data solely on the relevant client’s behalf and instructions, strictly to operate that client’s assistant. Each client’s data is isolated and is never shared with, or accessible to, any other client. Customers of a client business should refer to that business’s own privacy notice for how it controls their data.
Your rights under DPDP Act 2023
- Access— ask us what data we hold about you.
- Correction— ask us to fix anything wrong.
- Erasure— ask us to delete your data (subject to tax/payment record-keeping requirements). Replying STOP to our WhatsApp line triggers the same deletion automatically.
- Withdraw consent— unsubscribe from marketing messages at any time, or revoke WhatsApp consent by replying STOP.
Exercise any of these by emailing [email protected] . We respond within 7 working days.
Data retention
We keep purchase records and invoices for 8 years (GST Act requirement). WhatsApp conversation data is retained while you are an active customer or have an open enquiry, and deleted on request or after a STOP reply. Non-purchase data from general enquiries that go quiet is retained for up to 24 months, then deleted.
Security
Payments run through Razorpay (PCI-DSS certified). Our site and dashboard are hosted on Vercel with HTTPS enforced site-wide. Our database is hosted on Supabase in the Mumbai region with at-rest encryption and access scoped via row-level security per tenant. Your payment card data never touches our servers.
Changes
If this policy changes, the “Last updated” date at the top will change. Material changes will be announced on our Instagram and via email to active customers.
Contact
Ehsan Asgar P (Ehsan Asgar Parambatt) · Skillies.AI · Malappuram, Kerala, India
Email: [email protected]