Privacy Policy

This policy explains how Srileo and Elily process personal data when you use our website or message a business that uses Elily on WhatsApp.

1. Who we are

SRILEO TECHNOLOGIES (OPC) PRIVATE LIMITED (“Srileo”) operates Elily, an AI receptionist that answers WhatsApp messages on behalf of the businesses—clinics and other small and medium-sized businesses—that subscribe to it.

For messages you send to one of those businesses, that business is the data controller; Srileo processes the data on its behalf. For data you submit on srileo.com itself, Srileo is the controller.

2. What we collect via WhatsApp

When you message a business served by Elily, we process:

• your WhatsApp phone number and profile name;
• the text of your messages;
• details you provide in the conversation, including your name, chosen service, and appointment date and time;
• message delivery and read status; and
• your language preference.

Files, photos, voice notes and locations you send are not stored by Elily. They are forwarded to the business's staff via WhatsApp. Elily retains only a reference identifier, never the file content.

3. How we use your data

We use this data to reply to your messages, book, reschedule or cancel appointments, send appointment reminders and confirmations, and let the business's staff follow up.

No advertising, no profiling and no sale of personal data—ever.

4. Who processes it with us

• Meta Platforms (WhatsApp Business Platform) carries the messages. Meta's own privacy policy also applies to WhatsApp.
• OpenAI processes message text through its API to generate replies. Under OpenAI's API terms, this data is not used to train its models.
• Google (Google Calendar) receives appointment details—name, phone number, service and time—which are written into the business's own calendar.
• Ezerhost hosts our servers in India, where conversation and booking records are stored in an access-controlled database, isolated per business, with credentials encrypted at rest.

5. Retention

We keep different records for the following periods:

• conversation logs and appointment records are kept for as long as the business subscribes, as its business record;
• technical debugging traces and message-ingress logs are deleted automatically after 30 days;
• delivery-queue records are deleted after 7 days; and
• conversation session state is deleted after about 3 days.

6. Your rights and data deletion

You can have your personal data erased at any time in either of these ways:

1. In WhatsApp: send the message delete me to the business's WhatsApp number. Elily immediately and automatically erases your stored personal data for that business—chat identity, conversation records and customer records—and sends you a confirmation. The deletion is audit-logged.
2. By email: write to contact@srileo.com with the phone number you used. We will delete your personal data within 30 days and confirm when this is complete.

You can also request a copy of your data at contact@srileo.com.

To stop proactive messages such as reminders without deleting your data, reply STOP. Reply START to resume.

7. Grievance and contact

8. Changes to this policy

We may update this policy as our service, providers or legal obligations change. We will post changes here and update the effective date shown above.