Skip to main content
Last updated 13 October 2026

Privacy Policy

This policy explains what personal data Datasirpi Private Limited collects through the d2bsuite website and products, why we collect it, who we share it with, and the rights you have over it.

1Who we are

d2bsuite is built and operated by Datasirpi Private Limited (“Datasirpi”, “we”, “us”), headquartered in Sharjah, United Arab Emirates, with offices in India and Canada. In this policy, “d2bsuite” means the website at d2bsuite.com and the d2bsuite products: CrmD, PeopleD, LedgerD, d2b-PreownedCars, Siddham, Godesk and Velora.

For personal data we collect through the website, in sales and support conversations, and to run customer accounts, Datasirpi is the controller: we decide why and how that data is used.

2Business data in the products

Organisations that use d2bsuite put their own data into the products, such as their customers in CrmD, their employees in PeopleD or their patients in Siddham. For that data, the organisation is the controller and Datasirpi is its processor: we process it only on the organisation's instructions and under our agreement with it, to provide the service.

If your data is in d2bsuite because an organisation you deal with uses it, please send privacy requests to that organisation. We will help it respond.

3Information we collect

Information you give us

  • Contact and demo requests: your name, work email, company, the product you are interested in and your message.
  • Newsletter and offers: your email address.
  • Your account: your name, email, company, role and sign-in details, when you or your organisation sign up.
  • Billing: the billing contact and address. Card details are collected and stored by our payment processor, not by us.
  • Support: what you tell us when you ask for help.

Information collected automatically

  • Request logs kept by our hosting provider, such as IP address, browser type, the page requested and the time, used to deliver the website and keep it secure.
  • In the products: sign-in times, device and browser details and activity logs, used for security, audit trails and support.

Information from others

  • If your organisation invites you to d2bsuite, it gives us your name and work email.
  • Data a customer brings into the products from its other systems, which that customer controls.

4How we use information and our legal bases

We use personal data for the purposes below. Where the GDPR or a similar law applies, the legal basis for each is shown after the dash.

  • To provide and support the products you or your organisation use — performance of a contract.
  • To answer contact and demo requests and follow up about d2bsuite — our legitimate interest in replying to people who contact us.
  • To send newsletters and offers — your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.
  • To keep d2bsuite secure, prevent fraud and fix problems — our legitimate interests.
  • To bill customers, keep records and meet legal and tax obligations — legal obligation.
  • To improve d2bsuite using aggregated usage information — our legitimate interests.

We do not sell personal data, and we do not use it for targeted advertising.

5AI features

Each d2bsuite product has an AI agent that works on the data in the customer's account. When you use an AI feature, the data needed for that task is sent to an AI model provider that processes it for us as a sub-processor, only to produce the result.

6Who we share information with

We share personal data only with:

  • Service providers that process it for us (sub-processors), under contracts that limit them to providing their service and require them to protect the data. The main categories are cloud hosting and storage (Amazon Web Services), AI model providers for the AI features, and payment processing.
  • Other Datasirpi teams and platforms, including EnMarkD, which we use to handle contact forms, demo requests and newsletters.
  • Authorities, courts or others when the law requires it, or when needed to protect rights, property or safety.
  • A buyer or successor if Datasirpi or d2bsuite is reorganised, merged or sold, with this policy continuing to apply to your data.

Customers can ask for the current list of sub-processors by emailing support@datasirpi.com.

7International transfers

We work from the UAE, India and Canada, and our providers may process data in other countries. When personal data leaves the European Economic Area, the United Kingdom or another country that restricts transfers, we use the safeguards that law requires, such as the European Commission's Standard Contractual Clauses.

8How long we keep information

  • Contact, demo and newsletter data: while we are in touch with you. We delete it when you ask or when we no longer need it.
  • Account and business data: for as long as the subscription is active. When it ends, the customer has time to export its data, and we then delete it, apart from copies the law requires us to keep. Backups are overwritten on a rolling cycle.
  • Billing and tax records: for as long as tax and accounting laws require.
  • Logs: for a limited period, for security and troubleshooting.

9Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and get a copy;
  • correct it if it is wrong or incomplete;
  • have it deleted;
  • restrict or object to how we use it, including objecting to direct marketing at any time;
  • receive it in a portable format;
  • withdraw consent you have given, without affecting what we did before;
  • complain to your data protection authority.

To use these rights, email support@datasirpi.com. We may ask you to confirm your identity, and we reply within one month, or sooner if your local law requires. If your data is in d2bsuite because an organisation uses it, we will pass your request to that organisation.

10Information for specific regions

European Economic Area and United Kingdom

You have the rights listed above under the GDPR and the UK GDPR, and you can complain to the supervisory authority where you live or work. The legal bases we rely on are listed under “How we use information and our legal bases”.

California

Under the California Consumer Privacy Act (CCPA), as amended, California residents can ask what personal information we collect, use and disclose, and ask us to delete or correct it. In the last 12 months we have collected identifiers and contact details, commercial information (billing), internet activity (logs) and professional information (company and role), from the sources and for the purposes described above.

We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. We will not treat you differently for using your rights. You can make a request through an authorised agent; we may ask the agent for proof that you authorised it.

Other countries

We also honour the rights given by other laws that apply to us, including India's Digital Personal Data Protection Act 2023, the UAE Personal Data Protection Law and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

11Cookies and browser storage

The d2bsuite website does not use advertising or analytics cookies. It stores two small items in your browser:

  • the country you choose, in local storage, so prices are shown for your country;
  • whether you closed the offer pop-up, in session storage, which is cleared when you close the tab.

The products use cookies or similar storage that are needed to sign you in and keep your session secure. The WhatsApp chat button takes you to WhatsApp, which handles your data under its own privacy policy.

12Security

We protect personal data with encryption in transit and at rest, role-based access controls, logging, and controls aligned with SOC 2. We have not yet completed a third-party SOC 2 audit. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

13Children

d2bsuite is a business service and is not meant for children under 16, and we do not knowingly collect their personal data. Data about children that a customer keeps in the products, such as patients in Siddham, is the customer's responsibility as controller.

14Changes to this policy

We update this policy when our practices or the law change, and show the date of the latest version at the top of this page. If a change is significant, we will tell customers by email or in the product before it takes effect.

15Contact us

For questions or requests about privacy, contact:

Datasirpi Private Limited

1, Business Centre, Sharjah Publishing City, Sharjah, United Arab Emirates

Email: support@datasirpi.com