Last edited: 24 July 2026
Anuma is built for businesses that run bulk orders, and it runs on their data. This policy explains what we collect, why, who touches it, how long we keep it, and the rights you hold. It is written to be read, not skimmed past.
The platform at anuma.co.in and the Anuma applications (“Anuma”, the “Services”) are operated by Anuma Intelligence Pvt. Ltd. (the “Company”, “we”, “us”), a company incorporated in India. For your account data and this website, we act as the data fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). For the business data a merchant brings into their Anuma deployment (their catalog, buyers, conversations, and orders), the merchant is the fiduciary and we process that data on their documented instructions.
We use data to operate the Services: capture enquiries, build and share catalogs, draft and send quotes, negotiate within the policies a merchant sets, track production and fulfilment, collect payments, produce briefs, provide support, and bill for the Services. Every automated action runs under a merchant-configured policy and is logged with its inputs, the policy version, and the decision trace.
We do not sell personal data. We do not use it for behavioural advertising. We do not profile individuals for purposes unrelated to running the Services.
Anuma uses large language models to read enquiries, match catalog items, draft quotes, and hold conversations. Before content enters any model prompt, personal identifiers (names, phone numbers, addresses) are redacted and held in a separate, encrypted vault. Models see the deal, not the person. Our full position on training and data usage is published at Model Training & Data, and it is part of this policy.
Where a merchant connects WhatsApp, messages are delivered through Meta’s WhatsApp Business Platform and are also subject to Meta’s terms. We store message content and metadata to run the order workflow. We are not responsible for Meta’s decisions on business verification or display names. Voice telephony and email are delivered through vetted communications providers under data-processing agreements.
Payments are processed by PCI-DSS-compliant payment gateways. We store only transaction references, amounts, and order metadata. We never hold card numbers or banking credentials.
We share data only with subprocessors needed to run the Services: cloud hosting, foundation-model providers (contractually barred from training on your data), messaging and telephony providers, payment gateways, and analytics limited to service operation. Each operates under a data-processing agreement and confidentiality obligations. We may disclose data where the law requires it, and business records may transfer if the Company is acquired, under this policy’s protections. One merchant’s data is never shared with another.
Our primary infrastructure serves India. Where a subprocessor processes data outside India (for example, model inference), the transfer is made under contractual safeguards consistent with the DPDP Act and, where applicable, standard contractual clauses.
Under the DPDP Act you may request access to your personal data, correction, erasure, and grievance redressal, and you may nominate a person to exercise these rights on your behalf. Where processing rests on consent, you may withdraw it at any time. Write to hello@anuma.co.in and we will respond within the timelines the law sets. If an individual appears in a merchant’s data (for example, as a buyer contact), we will route the request to that merchant and assist them in honouring it.
Data is encrypted in transit and at rest. Access is role-based and logged. Personal identifiers are vaulted separately from working data. Rate cards and floors are enforced server-side. We test and review our controls, and we accept reports through our responsible disclosure programme. No system is perfectly secure, and if an incident affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.
This website uses essential cookies to function, and analytics to understand how the site is used: which pages are read, how far people scroll, and where they get stuck. This includes session replay, which records pointer movement, clicks and scrolling on the page so we can see where the site is confusing. It is used to improve these pages, nothing else. We do not run third-party advertising trackers, and we do not sell or share this data.
The Services are for business use. We do not knowingly collect data from anyone under 18.
When this policy changes materially, we will notify account holders by email or in-product notice, and the date above will change. Continued use after notice means acceptance.
Rupa Batavia is our Grievance Officer at Anuma Intelligence Pvt. Ltd., reachable at rupa@anuma.co.in, designated under the Information Technology Act, 2000 and the DPDP Act, 2023. We acknowledge grievances within 48 hours and aim to resolve them within 15 days.