Skip to content
Choukashi

Privacy Policy

Last updated: 25 September 2026

This policy explains what data Choukashi handles, why, who helps us handle it, how long we keep it, and how you can have it corrected or deleted.

1. Who we are and who this covers

Choukashi is run by intoin Works Pvt Ltd, S No 265-264, Bavdhan, Pune, Maharashtra 411021, India. You can reach us about privacy at admin@intoinworks.com.

Choukashi handles data about two kinds of people:

  • Users — business owners and staff who sign in to the Choukashi app. For your account data, intoin Works Pvt Ltd is the data fiduciary (controller).
  • Leads — members of the public who message a business's WhatsApp number. The business is the data fiduciary for its leads' data. Choukashi processes that data on the business's behalf and on its instructions, as a data processor.

2. What we collect about users

  • Your name, email address, mobile number, and role (owner/admin or staff). Accounts are created by your business's admin; the app has no public sign-up.
  • Sign-in credentials, handled by Google Firebase Authentication (email and password, or a one-time code sent by SMS to your mobile number). Choukashi never sees or stores your password.
  • A device push token (Firebase Cloud Messaging), so the app can send you notifications about leads.
  • Actions you take in the app, such as replies sent, leads reassigned and knowledge edited. These are kept as part of the business's records.

3. What the business uploads

Business details (showroom address, hours), product and offer information, brochure PDFs and photos, and frequently asked questions. The business chooses what to upload.

4. What we process about leads

We process the following on the business's behalf:

  • Your WhatsApp phone number and WhatsApp profile name.
  • The messages exchanged with the business's WhatsApp number, including replies from the assistant and from staff, and whether they were delivered and read.
  • Information worked out from the conversation: your stated needs and preferences, open questions, an interest level (Hot, Warm, Cold or Unknown) with the reason, the next step, and any showroom appointment (date and time).
  • Appointments are added to the business's own Google Calendar, if the business has connected one.

5. What we do not collect

  • Your location from your device.
  • Your contacts.
  • Camera or microphone access. When you upload a file, you choose it yourself through your phone's or computer's file picker.
  • Advertising identifiers.
  • The app contains no advertising and no third-party analytics or tracking tools.
  • This website sets no tracking cookies and does not track visitors.

6. Why we use it

  • To provide the service: answering leads, booking visits, notifying and assigning staff, and showing reports to the owner.
  • To keep accounts secure.
  • To troubleshoot problems and prevent abuse.
  • To meet legal obligations.

We do not sell personal data, and we do not use it for advertising.

7. Automated replies (AI)

Replies to leads are written by AI language models, using only the business's own uploaded information and the conversation so far. The conversation text is sent to the AI model provider to write each reply.

When the assistant cannot answer from the business's information, it hands over to a person. Leads can ask for a person at any time. Businesses are responsible for telling their leads that an automated assistant may reply.

8. Service providers (sub-processors)

  • Google Cloud and Firebase — hosting, database, sign-in, push notifications and key management. Data is stored in the Mumbai (asia-south1) region.
  • Meta Platforms (WhatsApp Business Platform) — sending and receiving WhatsApp messages. Meta's own terms and privacy policy apply to WhatsApp itself.
  • AI model providers: Google (Gemini) and Sarvam AI — they write replies and analyse conversations. The business can choose which provider is used.
  • Google Calendar — only if the business connects its calendar.
  • Vercel — hosts this website only. It receives standard web-server request logs.

9. International transfer

Stored data stays in India. However, some AI processing may take place outside India, on the AI provider's own infrastructure and under that provider's terms.

10. How long we keep data

  • Lead conversations and the details worked out from them are deleted automatically after the business's retention period. This is 90 days by default, and the business can change it.
  • Conversations with no activity are closed automatically before that.
  • Technical logs of AI requests are deleted after 90 days.
  • User account data is kept while the account is active and deleted when the account is removed (see Delete your account or data).
  • Backups roll off within the provider's standard cycle.

11. Security

  • Data is encrypted in transit (HTTPS) and at rest.
  • WhatsApp and calendar credentials are encrypted with keys held in Google Cloud Key Management.
  • Each business's data is kept separate, and staff see only the leads assigned to them.

12. Your rights

Under India's Digital Personal Data Protection Act, 2023 (and, where they apply to you, GDPR-style rights), you can:

  • Access, correct and erase your personal data.
  • Have your grievances addressed.
  • Nominate someone to exercise your rights for you.
  • Withdraw your consent.

13. How to exercise your rights

14. Children

Choukashi is a service for businesses and is not directed at anyone under 18.

15. Grievance Officer

Pankaj Sarda
Email: admin@intoinworks.com
intoin Works Pvt Ltd, S No 265-264, Bavdhan, Pune, Maharashtra 411021, India

We acknowledge grievances within 24 hours where the law requires it, and resolve them within 30 days.

16. Changes to this policy

We announce material changes in the app or by email before they take effect. The date at the top of this page shows when the policy was last updated.

Back to top