Privacy Policy

Shivah Web Tech Pvt. Ltd. · last updated 13 October 2026

This policy explains what Shivah Web Tech Pvt. Ltd. does with information in two services it operates:

• Shivah AI Marketing — a paid marketing service. Businesses sign up, pay a monthly plan, and connect their website, social media, Google and advertising accounts so that their marketing can be researched, written, published and reported on.
• The staff console — the private tool Shivah Web Tech Pvt. Ltd.'s own employees use to run the company: clients, projects, invoices, attendance and payroll.

Information we collect

• Account details — your name, business name, email address, phone number, GST number and billing address, given when you sign up or when we take you on as a client.
• Payment records — the plan you chose, invoices, and the result of each payment. Card and bank details are entered on the payment provider's own page (PayPal, Razorpay or Stripe) and are never seen or stored by us.
• Your business's public presence — your website, Google Business Profile and public social media profiles, which we read to research your marketing each month.
• Data from accounts you connect — described permission by permission below. Nothing is read from an account you have not connected yourself.
• Content we make for you — posts, captions, images, videos and blog articles, with your approvals and change requests.
• Sign-in and activity records — when you sign in and what was changed, which keeps the service secure and the records auditable.
• Staff records (staff console only) — work contact details, role, attendance, leave and the payroll information needed to employ someone.

Facebook and Instagram (Meta)

If you connect your Facebook Page and Instagram business account, the service asks Meta for these permissions and uses each only as stated:

• pages_show_list, business_management — to list the Pages you manage so you can choose which one to connect.
• pages_read_engagement, instagram_basic — to read your Page and Instagram profile, posts and their engagement, for your monthly report.
• pages_manage_posts, instagram_content_publish — to publish the posts you have approved, at the time you approved. Nothing is published without approval.
• ads_read — to read your ad accounts' spend and results for your report, AI suggestions and spend alerts. The service does not create, change or pay for ads.

Google

• Search Console (webmasters.readonly) — read-only clicks, impressions, positions and pages for your website, for your monthly report.
• Google Ads (adwords) — used to read your campaigns' spend and results for your report, AI suggestions and alerts. The service does not create, edit or pause campaigns.
• Google Drive (drive.file, staff console only) — backups are copied into Shivah Web Tech Pvt. Ltd.'s own Drive. This permission reaches only files the application created itself.

Information received from Google APIs is used only to provide these features to you. It is never sold, never used for advertising, and we do not use it to develop or train AI models. Shivah Web Tech Pvt. Ltd.'s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

To write posts, captions, articles and suggestions, the relevant business details and figures are sent to an AI provider (currently Google's Gemini API) to generate that content for you, and for no other purpose. Login tokens, passwords and payment details are never sent to an AI provider.

How we use information

• To provide the service you pay for: research, content, publishing, reports, uptime checks and alerts.
• To bill you, send invoices and receipts, and remind you of renewals.
• To answer you when you contact us, and to tell you about changes to the service.
• To keep the service secure and to meet our legal and tax obligations.

We do not sell or rent personal information, and we do not use the data from your connected accounts for any other client or for our own advertising.

Who we share it with

Only the service providers needed to run the service: our web host (Hostinger), email delivery, the payment provider you pay through, the AI provider described above, and Meta and Google when we act on your connected accounts at your request. Within Shivah Web Tech Pvt. Ltd., staff see client records according to the permissions they have been given. We disclose information to authorities only where the law requires it.

How long we keep it

• While you are subscribed, for as long as the service needs it.
• When you cancel, publishing stops at the end of your paid month, and the Page access tokens and website passwords you gave us are deleted then. Your reports and content are kept, in case you come back, until you ask us to delete them (see below).
• Invoices and payment records are kept for as long as Indian tax law requires (currently eight years).
• Server backups are kept for about a week.

Deleting your data

You can disconnect any account at any time from your dashboard (Accounts tab). You can also remove the app's access directly: Facebook — Settings & privacy → Settings → Business integrations; Google — myaccount.google.com/permissions.

To have everything we hold about you deleted, email info@shivahwebtech.com from the address on your account with the subject "Delete my data". We will confirm, delete the data from your connected accounts and your content within 30 days, and tell you when it is done. Records the law requires us to keep (such as tax invoices) are kept only for that purpose.

Your rights

You can ask what we hold about you, have it corrected, have it deleted as above, or withdraw a permission you gave, under India's Digital Personal Data Protection Act, 2023 and any other law that applies to you. Write to us at the contact details below.

Security

Connections use HTTPS. Passwords are stored only as one-way hashes. Access tokens for your connected accounts, mail-server passwords and API keys are stored encrypted. Staff access is permission-based, sign-in attempts are rate limited and recorded, and the most sensitive actions need a second code from an authenticator app.

Children

The service is for businesses and is not directed at anyone under 18.

Changes

If this policy changes, the date at the top of this page changes with it, and subscribers are told by email of any change that affects them.

Contact