Privacy Policy
This policy explains what personal data Datasirpi Private Limited collects through the d2bsuite website and products, why we collect it, who we share it with, and the rights you have over it.
1Who we are
d2bsuite is built and operated by Datasirpi Private Limited (“Datasirpi”, “we”, “us”), headquartered in Sharjah, United Arab Emirates, with offices in India and Canada. In this policy, “d2bsuite” means the website at d2bsuite.com and the d2bsuite products: CrmD, PeopleD, LedgerD, d2b-PreownedCars, Siddham, Godesk and Velora.
For personal data we collect through the website, in sales and support conversations, and to run customer accounts, Datasirpi is the controller: we decide why and how that data is used.
2Business data in the products
Organisations that use d2bsuite put their own data into the products, such as their customers in CrmD, their employees in PeopleD or their patients in Siddham. For that data, the organisation is the controller and Datasirpi is its processor: we process it only on the organisation's instructions and under our agreement with it, to provide the service.
If your data is in d2bsuite because an organisation you deal with uses it, please send privacy requests to that organisation. We will help it respond.
3Information we collect
Information you give us
- Contact and demo requests: your name, work email, company, the product you are interested in and your message.
- Newsletter and offers: your email address.
- Your account: your name, email, company, role and sign-in details, when you or your organisation sign up.
- Billing: the billing contact and address. Card details are collected and stored by our payment processor, not by us.
- Support: what you tell us when you ask for help.
Information collected automatically
- Request logs kept by our hosting provider, such as IP address, browser type, the page requested and the time, used to deliver the website and keep it secure.
- In the products: sign-in times, device and browser details and activity logs, used for security, audit trails and support.
Information from others
- If your organisation invites you to d2bsuite, it gives us your name and work email.
- Data a customer brings into the products from its other systems, which that customer controls.
4How we use information and our legal bases
We use personal data for the purposes below. Where the GDPR or a similar law applies, the legal basis for each is shown after the dash.
- To provide and support the products you or your organisation use — performance of a contract.
- To answer contact and demo requests and follow up about d2bsuite — our legitimate interest in replying to people who contact us.
- To send newsletters and offers — your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.
- To keep d2bsuite secure, prevent fraud and fix problems — our legitimate interests.
- To bill customers, keep records and meet legal and tax obligations — legal obligation.
- To improve d2bsuite using aggregated usage information — our legitimate interests.
We do not sell personal data, and we do not use it for targeted advertising.
5AI features
Each d2bsuite product has an AI agent that works on the data in the customer's account. When you use an AI feature, the data needed for that task is sent to an AI model provider that processes it for us as a sub-processor, only to produce the result.
7International transfers
We work from the UAE, India and Canada, and our providers may process data in other countries. When personal data leaves the European Economic Area, the United Kingdom or another country that restricts transfers, we use the safeguards that law requires, such as the European Commission's Standard Contractual Clauses.
8How long we keep information
- Contact, demo and newsletter data: while we are in touch with you. We delete it when you ask or when we no longer need it.
- Account and business data: for as long as the subscription is active. When it ends, the customer has time to export its data, and we then delete it, apart from copies the law requires us to keep. Backups are overwritten on a rolling cycle.
- Billing and tax records: for as long as tax and accounting laws require.
- Logs: for a limited period, for security and troubleshooting.
9Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct it if it is wrong or incomplete;
- have it deleted;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- receive it in a portable format;
- withdraw consent you have given, without affecting what we did before;
- complain to your data protection authority.
To use these rights, email support@datasirpi.com. We may ask you to confirm your identity, and we reply within one month, or sooner if your local law requires. If your data is in d2bsuite because an organisation uses it, we will pass your request to that organisation.
10Information for specific regions
European Economic Area and United Kingdom
You have the rights listed above under the GDPR and the UK GDPR, and you can complain to the supervisory authority where you live or work. The legal bases we rely on are listed under “How we use information and our legal bases”.
California
Under the California Consumer Privacy Act (CCPA), as amended, California residents can ask what personal information we collect, use and disclose, and ask us to delete or correct it. In the last 12 months we have collected identifiers and contact details, commercial information (billing), internet activity (logs) and professional information (company and role), from the sources and for the purposes described above.
We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. We will not treat you differently for using your rights. You can make a request through an authorised agent; we may ask the agent for proof that you authorised it.
Other countries
We also honour the rights given by other laws that apply to us, including India's Digital Personal Data Protection Act 2023, the UAE Personal Data Protection Law and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
12Security
We protect personal data with encryption in transit and at rest, role-based access controls, logging, and controls aligned with SOC 2. We have not yet completed a third-party SOC 2 audit. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
13Children
d2bsuite is a business service and is not meant for children under 16, and we do not knowingly collect their personal data. Data about children that a customer keeps in the products, such as patients in Siddham, is the customer's responsibility as controller.
14Changes to this policy
We update this policy when our practices or the law change, and show the date of the latest version at the top of this page. If a change is significant, we will tell customers by email or in the product before it takes effect.
15Contact us
For questions or requests about privacy, contact:
Datasirpi Private Limited
1, Business Centre, Sharjah Publishing City, Sharjah, United Arab Emirates
Email: support@datasirpi.com
