Privacy Policy

Shreeji Vedaa (“Vedaa”, “we”, “us”, “our”) is an AI knowledge platform for Microsoft Dynamics 365, SAP, Power Platform, Azure and Business Central. Vedaa answers your product and implementation questions and connects you with certified expert consultants — including one free consultation per customer. This Privacy Policy explains what personal data we collect when you use shreejivedaa.ai and the Vedaa application, how and why we use it, who we share it with, and the rights you have over it.

Vedaa is operated by Shreeji Softinfo Consultancy LLP, with its registered office in Vadodara, Gujarat, India (“Shreeji”), which is the data controller responsible for your personal data under the EU / UK General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act (DPDP). For any privacy question, to exercise your rights, or to request a Data Processing Agreement (DPA), contact our privacy team at privacy@shreejivedaa.com.

If you are in the EEA or the UK and have a concern we cannot resolve, you also have the right to complain to your local data-protection supervisory authority (see “Your rights” below).

We collect only what we need to run the service. This falls into three groups:

1. Information you give us.

• Account & profile — your name, email address, and phone number when you register or are invited.
• Single sign-on (SSO) — if you choose to sign in with Google, Microsoft, or LinkedIn, we receive your basic profile (name, email, avatar) from that provider. We never receive your password.
• Consultation bookings — the details you enter when booking, such as your name, email, guest email addresses, your agenda / notes, and time-zone.
• Payments — a payment reference, amount, and status. Card, UPI and net-banking details are entered directly with our payment processor; we never see or store your full card number.
• Support & communications — messages you send us and any newsletter sign-up.

2. Information generated when you use Vedaa.

• Conversations — the questions you ask and the answers Vedaa returns, plus any files you upload.
• Usage & account activity — token usage, booking history, and in-app actions, used for quotas, billing, and abuse prevention.

3. Information collected automatically.

• Device & connection metadata — IP address, browser/device information, and an approximate country / city derived from your IP.
• Cookies & browser storage — used to keep you signed in and remember preferences. See our Cookie Policy for details.

Under the GDPR we must have a lawful basis for every use of your data. The list below sets out what we do and why:

• Provide the service (AI answers, consultation booking, your account) — performance of our contract with you.
• Expert conversation review so a certified consultant can help you — your consent, given at sign-up and withdrawable at any time.
• Transactional emails (sign-in codes, receipts, booking notifications) — performance of our contract.
• Billing, quota enforcement, security and fraud prevention — our legitimate interests in running a safe, sustainable service, and where relevant our contract with you.
• Improving the product using aggregated, de-identified usage signals — our legitimate interests.
• Marketing & newsletters, where offered — your consent, which you can withdraw at any time via the unsubscribe link.
• Meeting legal, tax and accounting obligations — compliance with a legal obligation.

We do not sell your personal data, and we do not use your conversations to train public AI models. Your questions are processed to generate a response for you — not mined for advertising.

We share your data only where necessary, and only with parties bound by strict data-protection terms. We never sell it.

Sub-processors. Vetted service providers process data on our behalf and only for the purposes we instruct. We share with each only the data it needs:

• Amazon Web Services (AWS) — core infrastructure: application compute, the encrypted PostgreSQL database, and file storage. Production data is hosted in the EU (Ireland) region.
• Vercel — hosting and global delivery of the web application.
• Anthropic (the “Claude” family of AI models) — processes your questions to generate Vedaa's responses, under terms that prohibit using your content to train their public models.
• Razorpay — payment processing for consultations and subscriptions (PCI-DSS compliant).
• Resend — delivery of transactional email.
• Calendly — scheduling of consultation appointments.
• Microsoft Teams — hosting video calls for consultations where that option is used.
• Google Analytics & Google Tag Manager — opt-in usage analytics, loaded only after you accept analytics cookies. See our Cookie Policy for details and controls.
• Google, Microsoft, LinkedIn — only when you choose to sign in with them.

Certified Shreeji consultants. Where you have consented, our experts may read your conversations solely to deliver the consultation you asked for. Access is limited to the experts helping you and is logged.

Legal and business reasons. We may disclose data where required by law, to enforce our terms, or to protect the rights, safety and property of Vedaa, our users, or the public. If Vedaa is involved in a merger, acquisition, or asset sale, we will give notice before your data becomes subject to a different privacy policy.

Our production data is hosted in the EU (Ireland). Some of our sub-processors may process limited data outside your region or the EEA. Where that happens, we rely on appropriate safeguards recognised under the GDPR — principally the European Commission's Standard Contractual Clauses (SCCs) (and the UK equivalent), together with technical measures such as encryption — so that your data continues to receive an equivalent level of protection wherever it is processed. You may request more information about these safeguards at privacy@shreejivedaa.com.

We keep personal data only for as long as necessary for the purpose it was collected, then delete or anonymise it:

• Account & profile — for as long as your account is active. When you close your account we delete or anonymise it on a defined schedule.
• Conversations — retained until you delete them or close your account. You can delete any conversation yourself at any time.
• Billing & tax records — retained for the period required by applicable tax and accounting law (commonly up to 7–8 years), even after account closure.
• Backups & logs — purged on a rolling cycle, after which residual copies are overwritten.

Depending on where you live, you have some or all of the following rights over your personal data. Under the GDPR you can:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention duties.
• Restriction & objection — ask us to limit, or object to, certain processing, including processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where we rely on consent (e.g. expert conversation review, marketing), you can withdraw it at any time without affecting processing already carried out.

To exercise any of these, email privacy@shreejivedaa.com. We will respond within one month (extendable for complex requests, as the GDPR allows). We will not discriminate against you for exercising your rights.

You also have the right to lodge a complaint with your data-protection supervisory authority — for example your national Data Protection Authority in the EEA, the Information Commissioner's Office (ICO) in the UK, or the Data Protection Board in India — though we'd appreciate the chance to resolve your concern first.

We use cookies and browser storage to keep you signed in, remember your preferences, and integrate securely with our payment and scheduling providers. Some are strictly necessary for the service to work; others (such as analytics) are used only where permitted. You can control non-essential cookies through your browser and our cookie controls. For the full list of cookies, their purpose and lifetime, see our Cookie Policy.

We apply technical and organisational measures appropriate to the sensitivity of your data: TLS/HTTPS encryption in transit; encryption at rest for the database and uploaded files; short-lived signed session tokens with rotating refresh tokens; role-based access controls that limit who inside Shreeji can reach your data; encrypted storage of integration secrets; and audit logging of conversation access. For a fuller description of our security posture and our compliance roadmap, see our Trust Center.

Vedaa is a business tool intended for professionals and is not directed to children. It is only for people aged 18 or over, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact privacy@shreejivedaa.com and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in the service, our providers, or the law. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice (such as an email or an in-app message). Your continued use of Vedaa after an update means you accept the revised policy.

For any question about this policy, your personal data, or to exercise your rights, contact our privacy team at privacy@shreejivedaa.com. For security matters, reach security@shreejivedaa.com. We aim to respond within one business day.