Privacy Policy

Suprlative is operated by Suprslay Technologies Private Limited (“Suprlative”, “we”, “us”). We provide an AI shopping-assistant platform that brands embed on their storefronts and connect to messaging channels including web chat, WhatsApp, and Instagram. This policy explains what data we process and why. For data processed on behalf of a brand, that brand is the data controller and Suprlative acts as a processor.

We collect only what is needed to run the assistant:

• Messages and conversation content.The text a shopper sends and the assistant's replies, so we can answer questions, make recommendations, and continue a conversation.
• Instagram and WhatsApp data.When a brand connects an Instagram or WhatsApp account, we process direct messages, comments the assistant is asked to respond to, and the sender's platform-scoped identifier and public profile name provided by Meta's APIs. We use this solely to deliver and continue the conversation on that channel.
• Contact details you provide. Such as name, email, or phone number if a shopper shares them or requests a human handoff.
• Technical and usage data. Coarse diagnostics such as timestamps, channel, request identifiers, and error logs used to operate and secure the service.

We do not sell personal data, and we do not use messaging content to serve advertising.

• Generate and deliver assistant responses to shopper questions.
• Continue a conversation across channels (for example, moving a web chat to WhatsApp, or replying to an Instagram DM or comment).
• Route conversations to a human agent when a handoff is requested.
• Provide brands with aggregated analytics about assistant performance.
• Maintain security, prevent abuse, and comply with legal obligations.

Our Instagram and WhatsApp features use Meta's APIs. Data obtained through these APIs (such as direct messages, comments, and platform-scoped user identifiers) is used only to provide the messaging features described above, in accordance with the Meta Platform Terms and Developer Policies. We request the minimum permissions required and never use Meta Platform data for advertising, resale, or any purpose unrelated to responding to the shopper's message.

We share data only with providers that help us operate the service, under contractual confidentiality and data-protection obligations:

• AI model providers (for example, OpenAI) to generate assistant responses. Message content sent for inference is not used by these providers to train their models where such controls are available.
• Messaging and infrastructure providers (for example, Meta for Instagram and WhatsApp delivery, and cloud hosting and database providers) to transmit and store conversations.
• Commerce providers (for example, Shopify) to retrieve product and catalog information a shopper asks about.

We retain conversation data for as long as needed to provide the service to the connected brand and for legitimate business and legal purposes, after which it is deleted or anonymized. Brands may configure shorter retention or request deletion on behalf of their shoppers.

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise these rights, or to request deletion of data associated with your Instagram or WhatsApp account, contact us at [email protected] with the subject line “Data Deletion Request” and the handle or identifier you used. We will verify the request and delete the associated data within 30 days. You may also revoke Suprlative's access at any time from your Instagram or WhatsApp account settings, which stops further processing.

We protect data with encryption in transit, encryption of access tokens at rest, strict access controls, and tenant isolation so one brand's data is not accessible to another. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

We operate from India and may process data on infrastructure located in other regions. Where required, we put appropriate safeguards in place for cross-border transfers.

The service is intended for use by businesses and adult shoppers. We do not knowingly collect personal data from children.

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, through additional notice.

Suprslay Technologies Private Limited
Bangalore, India
Email: [email protected]