Privacy Policy

1. Introduction

Inno Valley Works Pvt Ltd and Inno Valley Works LLC (“Inno Valley Works”, “Company”, “we”, “our”, “us”) are committed to protecting the privacy and security of Personal Data.

This Privacy Policy explains how we collect, use, disclose, transfer, and protect Personal Data in connection with:

• Our website
• Our Salesforce consulting and managed services
• Our products, including WhatsApp Business for Salesforce and related solutions
• Client engagements and business communications

This Policy applies to individuals whose Personal Data we process, including website visitors, client representatives, business contacts, and end users whose data may be processed within client Salesforce environments.

2. Scope and Role

Depending on the context, Inno Valley Works may act as:

• Data Controller – when we determine the purpose and means of processing (e.g., website inquiries, marketing communications, recruitment).
• Data Processor – when we process Personal Data strictly on behalf of our Clients under contractual agreements (e.g., Salesforce implementations, managed services).

Where we act as a Data Processor, processing activities are governed by the applicable client agreement and Data Processing Addendum (DPA).

3. Categories of Personal Data Collected

We may collect and process the following categories of Personal Data:

Information You Provide Directly

• Full name
• Business email address
• Phone number
• Company name and job title
• Billing and payment details
• Communication content (emails, forms, support requests)

Automatically Collected Information

• IP address
• Browser type and device information
• Usage data and log files
• Cookies and similar tracking technologies

Client Data (Processed as Data Processor)

• CRM records stored within client Salesforce environments
• End-customer communications (e.g., WhatsApp messages)
• Operational and transactional data as defined by the Client

We do not intentionally collect sensitive personal data unless explicitly required under a contractual engagement and with appropriate safeguards.

4. Legal Basis for Processing (Where Applicable)

Where required by applicable data protection laws (including GDPR and UK GDPR), we process Personal Data on one or more of the following legal bases:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent (for marketing communications or optional data collection)

Where processing is based on consent, individuals may withdraw consent at any time.

5. Purpose of Processing

We process Personal Data for the following purposes:

• Delivering Salesforce consulting and managed services
• Operating and maintaining our products and applications
• Client onboarding and relationship management
• Payment processing and financial compliance
• Internal administration and business operations
• Improving our website and service performance
• Marketing communications (where permitted by law)
• Compliance with legal and regulatory requirements

6. WhatsApp Business for Salesforce

Our WhatsApp Business for Salesforce solution integrates directly with Meta’s Graph API via the Salesforce platform.

Key data handling principles:

• Messages are stored within the Client’s Salesforce environment.
• We do not independently store message content outside the Client’s Salesforce instance.
• Message transmission occurs via Meta’s WhatsApp infrastructure.
• Security controls are governed by Salesforce platform security standards and the Client’s Salesforce configuration.

Clients remain responsible for determining lawful processing of their end-user data within their Salesforce environments.

7. Data Sharing and Disclosure

We do not sell or rent Personal Data.

We may disclose Personal Data to:

Service Providers and Subprocessors

• Salesforce (CRM platform infrastructure)
• Meta (WhatsApp messaging infrastructure)
• Hosting providers
• Payment processors
• Professional advisors

All third parties are contractually obligated to implement appropriate data protection safeguards.

Legal and Regulatory Authorities

Where required to comply with applicable laws, court orders, or lawful governmental requests.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or asset sale, subject to confidentiality obligations.

8. International Data Transfers

Given our global operations, Personal Data may be processed in jurisdictions outside the country of origin, including India, the United States, and other operational locations.

Where required by law, we implement appropriate safeguards for cross-border transfers, including:

• Standard Contractual Clauses (SCCs)
• Contractual data protection agreements
• Other lawful transfer mechanisms

9. Data Retention

We retain Personal Data only for as long as necessary for the purposes described in this Policy, including:

• Website inquiry data: typically up to 12–24 months
• Client engagement data: as defined in contractual agreements
• Financial records: as required by applicable laws
• Marketing data: until consent is withdrawn or opt-out is exercised

At the end of the retention period, Personal Data is securely deleted or anonymized.

10. Data Subject Rights

Subject to applicable laws, individuals may have the right to:

• Access their Personal Data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

Where we act as a Data Processor, we will assist Clients in responding to data subject requests.

Requests may be submitted to: support@innovalleyworks.com

11. Security Measures

We implement appropriate technical and organizational measures designed to protect Personal Data against:

• Unauthorized access
• Accidental loss
• Alteration
• Disclosure

These measures include access controls, contractual safeguards, secure infrastructure practices, and reliance on enterprise-grade platform security standards (e.g., Salesforce security architecture).

No system can guarantee absolute security, but we continuously evaluate and enhance our safeguards.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve website functionality
• Analyze traffic and performance
• Enhance user experience

Users may control cookies through browser settings. Disabling cookies may impact website functionality.

Our WhatsApp Business for Salesforce application does not independently deploy cookies, as it operates natively within the Salesforce platform.

13. Children’s Privacy

Our services are intended for business use. We do not knowingly collect Personal Data from individuals under 18 years of age.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The “Effective Date” at the top indicates when the Policy was last revised.

Material changes will be communicated via website updates or other appropriate channels.

15. Contact Information