Privacy

Vaylorn is operated by Darkmont Agua Private Limited, based in Hyderabad, Telangana, India. In this notice, “Vaylorn”, “we” and “us” mean that company.

This notice covers two different things, and the distinction matters. The first is this website. The second is the Vaylorn service, which businesses use to handle conversations with their own customers.

For information we collect for our own website, accounts and operations, we determine why it is processed. That responsibility is ours, directly to you.

For customer-conversation information handled through Vaylorn on behalf of a business, that business generally determines why its customers' information is used, and we process it to provide the service under that business's instructions. So if you are a customer of a business that uses Vaylorn and you have a question about your conversation, that business is usually the right first point of contact.

The exact legal role each of us holds may depend on the particular processing activity and on the law that applies to it. We describe the practical position here rather than assert a single classification across everything the service does.

This website does not use analytics, advertising pixels or tracking technologies. We do not set cookies for tracking, and we do not use browser storage to follow visitors. Fonts are served from this site rather than a third party, so simply reading these pages does not report your visit to anyone else.

As with any hosted website, the infrastructure serving these pages processes ordinary technical information — such as IP address, browser type and requested page — in order to deliver and secure the site.

The Growth Review page is the one exception to that. It loads Cloudflare Turnstile, a check that distinguishes people from automated submissions, so that page requests a script from Cloudflare and Cloudflare receives the technical information needed to run the check. It is used only to protect the form from spam, not to profile or track you, and it is not present on any other page.

If we later introduce analytics or advertising technologies, we will update this notice and this section before doing so.

If you request a Growth Review through this website, the form collects your name, your jewellery store or business name, your email address, your WhatsApp or phone number, your city, and anything optional you choose to write about what you would like help with.

We use those details to reply to you, and to arrange and prepare the review you asked for. We do not use them for anything else. We will not sell them, and we will not add you to marketing unrelated to your request.

The submission is delivered to us by email through a third-party email provider, and is not stored in a separate database on this website. You can also simply write to [email protected] instead of using the form, which reaches the same place.

Where a business uses Vaylorn, the service may process the categories below. Not every category applies to every business — what exists depends on which capabilities that business has enabled and what it has connected.

When a business connects WhatsApp, Meta sends us the information needed to handle those conversations: the customer identifiers involved, the message content, and references to any media sent. Where media is part of the conversation, we may retrieve and store it in order to provide the service.

Replies — whether generated by Vaylorn or authorised by the business's staff — are sent back to the customer through Meta, which means Meta receives that content in the ordinary course of delivering the message. We may also store delivery-status information such as whether a message was delivered or failed.

Meta operates its own platform under its own terms and privacy practices, which we do not control. If you want to understand how Meta handles information about your use of WhatsApp, please refer to Meta's own privacy materials.

Vaylorn uses external model and inference services to help draft responses. To do that, the relevant provider may receive the customer's message text, a bounded amount of recent conversation history, and the instructions and context needed to produce a reply.

Our current inference provider is DeepSeek. Our platform also supports other providers, including OpenAI and Anthropic, but these are not in use for the current pilot. If we change which provider handles this processing, we will update this notice.

We do not make promises here about how a third-party provider retains information or whether it uses information for its own model training. Those are matters governed by our agreements with each provider, and we will not represent terms we have not established.

Separately from those providers: information generated through a business's use of Vaylorn may be used to make the service more specific to that business — for example its approved preferences, its staff's corrections and its own terminology. That stays within the business's own context. We do not currently use identifiable merchant or customer content to train a general Vaylorn model, to carry learning between different businesses, or to build general training datasets, and if that changes we will update this notice and establish the appropriate basis first.

We use a small number of third parties to operate the service. Today those are Meta, as the messaging channel through which conversations reach us and replies are delivered; DeepSeek, for model inference as described above; and Cloudflare, which provides network infrastructure that carries traffic to the service.

Our platform additionally contains optional integrations that are not in use today, including other model providers and a payment provider. We will not describe them as processing your information unless and until they do.

Vaylorn is at an early stage. The current pilot runs on infrastructure operated directly by us rather than in a production cloud region, and we are not going to state a data-residency guarantee we cannot presently support.

The service providers described above operate internationally, and information may therefore be processed outside India in the course of delivering messages, providing network infrastructure or performing inference. As we move to production infrastructure we will review the appropriate handling and contractual measures for those transfers, and will update this notice to describe the position accurately.

We retain personal data only for as long as reasonably necessary for the purposes described in this notice, subject to legal, security, dispute-resolution and legitimate record-keeping requirements.

Some records may be anonymised rather than deleted, and some may be retained where we have a legitimate or legal reason to keep them — for example security and audit records that exist so that actions taken in the service can be reviewed afterwards.

We have not yet published a schedule of specific retention periods. We will do so as the service moves beyond its pilot stage.

Depending on the law that applies to you, you may have rights to ask what information is held about you, to ask for it to be corrected, to ask for it to be deleted, and to raise a grievance about how it has been handled.

Vaylorn has been built with Indian data protection requirements in mind, and the service includes mechanisms for producing a record of a customer's information and for erasing it on a business's instruction. Where erasure is carried out, personal details and content are removed; some business records may be retained in an anonymised form where that is legitimately required.

We cannot promise that every request will result in the deletion of every record, and we have not set a published response time. Where a request concerns a conversation you had with a business that uses Vaylorn, that business will usually need to be involved, as the information is theirs.

Vaylorn does not ask for children's information, health information, biometric information, government identity documents, payment card details or precise location as part of how the service works.

Conversations are free-form, however, and a person can write anything into a message or attach any image. We cannot prevent that, and we are not going to claim we never receive sensitive information. Please avoid sending information that is not needed for the enquiry you are making.

Each business's information is kept separate from every other business on the platform. Access is controlled by role, so staff see what their role permits. Credentials for connected channels are encrypted where they are stored. Actions the system can take are permission-controlled, actions that carry commitment can be held for a person to approve, and activity is recorded so that it can be reviewed afterwards.

We do not hold any security or privacy certification, and we have not completed an independent security audit or penetration test. We would rather say that plainly than imply otherwise. No system is completely secure, and we do not claim ours is.

For privacy and data-protection enquiries — including a request to access, correct or delete information, or a question about how information has been handled — write to [email protected].

For anything else, including general questions about Vaylorn, write to [email protected].

If your question concerns a conversation you had with a business that uses Vaylorn, that business will usually need to be involved, since the information is theirs.

This notice will change as the product and the company develop — particularly as we move from pilot to production infrastructure, and as retention periods and contact routes are settled. When it changes materially we will make that clear rather than quietly amending it, and the status line at the top will show the current state.