This Privacy Policy explains how Mahiruho Consulting Services Private Limited (“Mahiruho,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with https://mchatbot.ai (the “Site”) and the mChatBot platform and related services (the “Service”).
It should be read together with our Terms of Service. Capitalized terms not defined here have the meaning in the Terms, where applicable.
1. Who We Are
Controller for personal information processed through the Site:
Mahiruho Consulting Services Private Limited
P-30 Purbayan, #3 Rifle Range Road, Belghoria, Kolkata-700056, India
Email: contact@mahiruho.com
When enterprise customers use the Service to process End User or other personal data, Mahiruho typically acts as a processor / service provider on the customer’s instructions, and the customer remains the controller. A data processing agreement may apply under an Order.
2. Information We Collect
2.1 Information You Provide
- Interest / consultation forms: name, email address, country-coded phone number, company, the storefront region already on screen, which work (Sales, Customers, Operations, or Not sure yet), industry, go-live timeline, message (optional), and interest type (Free consultation, Implementation Support, Enterprise, or Implementation Partner).
- Account and billing information (when registration or paid plans are available on application hosts): account credentials, business contact details, and payment-related information processed by our payment providers if used. The Site itself does not collect payment card numbers.
- Support and correspondence: content of emails or other messages you send us.
2.2 Information Collected Automatically
- Usage and device data: pages viewed, referring URLs, approximate location derived from IP address, browser and device type, and timestamps.
- Cookies and similar technologies: used for essential site operation, preferences (such as theme), analytics, and performance. See Section 10.
- Pricing / region preferences: region or geo selected for catalog display may be stored in session storage, local storage, or URL parameters. This is used to show relevant published pricing and does not include payment card data.
- Security signals: CAPTCHA tokens and related verification results when you submit forms.
2.3 Site Widget
When the Site embeds a chat widget, we may process pre-chat intake fields as configured for that channel, session and chat content for that Site widget interaction, and business or channel identifiers needed to operate the embed. Widget use on the Site is separate from bots and channels you deploy for your own End Users in the Service.
2.4 Customer Content On The Service
If you use the Service, we process Customer Content (including messages, prompts, documents, knowledge materials, channel configuration, records received via integrations such as CRM or HR systems, and call-related metadata when voice is connected) to operate the Service for you. That content may include personal data about your End Users. You are responsible for providing required notices and obtaining consents for End Users. You remain the controller for that End User data; Mahiruho typically acts as processor / service provider as described in Section 1.
2.5 Self-Serve Handoff
Signup, onboarding, and billing may occur on separate Mahiruho application or authentication hosts that present their own notices. The Site may pass a plan preference (for example via a query parameter) when you choose Get started from pricing.
3. Google Workspace (Gmail, Calendar, Drive)
When a business customer connects Google in mChatBot, that customer authorizes Google so mChatBot can access only the Google Workspace data they grant (Gmail, Calendar, and Drive files, as selected at consent).
Limited Use. The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing features that are visible in mChatBot and that the customer enables. We do not use Google user data for any other purpose.
Those user-facing features are:
- list and send email the customer initiates in mChatBot (Gmail);
- read and create calendar events the customer configures in mChatBot (Calendar);
- read or write Drive / Docs files the customer uses in mChatBot (Drive).
We do not sell Google user data. We do not transfer Google user data except as needed to provide those features (for example hosting infrastructure), for security, to comply with law, or as part of a business transfer with appropriate protections. We do not use Google user data — including Gmail, Calendar, or Drive content, or any data derived from it — for advertising, retargeting, personalized or interest-based ads, credit or lending decisions, or sale to data brokers or information resellers. We do not use Google user data to create, train, or improve generalized or non-personalized AI or machine-learning models. Tokens are stored encrypted. The customer can disconnect Google in mChatBot at any time, which stops further access. Access or deletion requests: contact@mahiruho.com.
4. Slack
When a business customer connects Slack to mChatBot, that customer authorizes Slack so mChatBot can access their Slack workspace as configured (for example via Slack OAuth and related permissions). We process Slack-related data on that customer’s behalf to operate messaging and automation features they enable.
Data We May Process On Behalf Of Customers
- Workspace and channel identifiers and related metadata
- Message content and event payloads for connected channels or apps
- User identifiers visible in those events (as provided by Slack)
- Tokens, webhook URLs, and credentials needed to operate the integration
Purpose
We process this data to receive inbound Slack events, send outbound Slack messages the customer configures, and display status in the customer’s mChatBot admin account.
We do not sell Slack message content. We do not use customers’ Slack content to advertise for Mahiruho. The customer controls the connection and can disconnect Slack in mChatBot at any time. Access or deletion requests: contact@mahiruho.com.
5. Shopify
When a business customer connects Shopify to mChatBot, that customer authorizes Shopify so mChatBot can access store data and webhooks they grant (for example via Shopify Partner / OAuth flows). We process Shopify-related data on that customer’s behalf to support orchestration features they configure.
Data We May Process On Behalf Of Customers
- Shop identifiers and connection metadata
- Order, customer, and related commerce objects delivered via API or webhooks
- Tokens and credentials needed to operate the integration
Purpose
We process this data to ingest store events into mChatBot orchestration, look up order information the customer enables, and—where the customer enables write Skills—update order notes, allowlisted status changes, or cancel orders only after human-in-the-loop (HITL) approval by the customer’s authorized operators. We do not process refunds or payment charges through this Shopify integration. This integration does not provide Shopify storefront chat.
We do not sell Shopify order or customer data. We do not use customers’ store data to advertise for Mahiruho. The customer can disconnect Shopify in mChatBot at any time. Access or deletion requests: contact@mahiruho.com.
6. WooCommerce
When a business customer connects WooCommerce to mChatBot, that customer typically provides API credentials they control and configures webhooks. We process WooCommerce-related data on that customer’s behalf to support orchestration features they configure.
Data We May Process On Behalf Of Customers
- Store identifiers and connection metadata
- Order, customer, and related commerce objects delivered via API or webhooks
- API keys / credentials needed to operate the integration (stored securely)
Purpose
We process this data to ingest store events into mChatBot orchestration, look up order information the customer enables, and—where the customer enables write Skills—update order notes, allowlisted status changes, or cancel orders only after human-in-the-loop (HITL) approval by the customer’s authorized operators. We do not process refunds or payment charges through this WooCommerce integration. This integration does not provide WooCommerce storefront chat.
We do not sell WooCommerce order or customer data. We do not use customers’ store data to advertise for Mahiruho. The customer can disconnect WooCommerce in mChatBot at any time. Access or deletion requests: contact@mahiruho.com.
7. How We Use Information
The uses in this section apply to Site, account, and other personal information that is not Google user data obtained through Google APIs. Use of Google user data is limited exclusively to Section 3 and is not used for marketing, advertising, Site analytics, or product research.
We use personal information (other than Google user data) to:
- Operate, secure, and improve the Site and Service
- Respond to Free consultation, Implementation Support, Enterprise, Implementation Partner, and other interest or support requests (typically within 24–48 hours for Site form acknowledgements)
- Send product updates and marketing where permitted; you may opt out of marketing emails
- Create and administer accounts and subscriptions
- Prevent fraud and abuse (including CAPTCHA verification)
- Analyze Site usage and performance
- Display published pricing appropriate to a selected region
- Operate the Site chat widget when enabled
- Comply with law and enforce our Terms
We do not sell your personal information. We do not use Site form submissions for unrelated third-party advertising.
8. Legal Bases (Where Applicable)
Depending on your location, we may process personal information based on: performance of a contract or steps prior to contract (for example, responding to a consultation request); legitimate interests (securing and improving the Site/Service, B2B marketing to business contacts — not using Google user data); consent where required; and legal obligations. Google user data is processed only as described in Section 3.
9. How We Share Information
We do not share Google user data obtained through Google APIs except as allowed under Limited Use (to provide the Section 3 features, for security, to comply with law, or as part of a business transfer). The sharing below otherwise applies to Site and account information.
We may share personal information with:
- Service providers who help us host, deliver email, analyze traffic, protect against bots, process payments, or provide infrastructure, under appropriate confidentiality and processing terms
- Professional advisors (legal, accounting) where needed
- Authorities when required by law or to protect rights, safety, and security
- Business transferees in connection with a merger, acquisition, or asset sale, subject to appropriate protections
Current Site-related providers may include Vercel (hosting and analytics), Google (reCAPTCHA and, if enabled, Google Analytics), and SMTP email delivery providers configured for our systems. Payment processors, when you purchase a plan, typically operate on application or checkout hosts rather than on the Site itself. Third-party platforms you connect in the Service (for example Google, Slack, Shopify, WooCommerce, Meta) receive data as needed to operate those integrations under their terms.
10. Cookies And Analytics
The Site and embedded widget may use cookies, local storage, session storage, and similar technologies. Categories:
- Essential: required for basic Site operation and security (for example form CAPTCHA / bot protection).
- Functional: preferences such as theme, and — when the Site widget is enabled — session or storage keys needed to operate that chat session.
- Analytics: Vercel Analytics and Speed Insights for performance and usage metrics; Google Analytics (GA4) when a measurement ID is configured, to understand how visitors use the Site.
You can control cookies through your browser settings. Blocking some cookies or storage may affect Site features (including theme or the widget). For Google Analytics, you may also use Google’s opt-out tools where available. This Policy does not use a separate cookie banner in the current Site release.
11. International Transfers
We are based in India. Service providers may process data in other countries. Where required, we use appropriate safeguards for cross-border transfers.
12. Retention
We retain personal information only as long as needed for the purposes described above, including to respond to inquiries, maintain accounts, meet legal obligations, resolve disputes, and enforce agreements. Interest and consultation records are kept for a reasonable business period unless you ask us to delete them earlier and we are not required to retain them. Customer Content retention on the Service follows your configuration, your Order, and our operational backups.
13. Security
We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. Please use strong unique passwords for accounts when available and notify us of suspected incidents at contact@mahiruho.com.
14. Your Rights
Depending on applicable law (including India’s Digital Personal Data Protection Act, 2023, and other regimes that may apply), you may have rights to access, correct, update, delete, or withdraw consent for certain personal information, and to complain to a supervisory authority.
To exercise rights regarding Site or account data we control, contact contact@mahiruho.com. For data processed on behalf of an enterprise customer, please contact that customer; we will assist them as required by our agreement.
15. Children
The Site and Service are directed to businesses and professionals, not to children. We do not knowingly collect personal information from children under 18 through the Site. If you believe we have, contact us and we will take appropriate steps to delete it.
16. Third-Party Links And Channels
The Site may link to third-party sites (including mahiruho.com and social networks). Channel platforms you connect to the Service have their own privacy policies. We are not responsible for those practices.
17. Changes To This Policy
We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Significant changes may also be highlighted on the Site or notified to account contacts.
18. Contact
Privacy questions or requests:
contact@mahiruho.com
Mahiruho Consulting Services Private Limited, Kolkata, India
Company page: mchatbot.ai/company