Introduction
This Privacy Policy explains how Yepsta Business OS, a SaaS business management platform offered by SakuCreations India (OPC) Private Limited, collects, uses, stores, shares and protects personal data when you visit https://www.yepsta.com, create or use a Yepsta account, access the business dashboard, submit forms, or interact with Yepsta services.
Yepsta is built for Indian service businesses. Our platform may support appointments, calendar management, staff scheduling, customer CRM, GST billing and POS, estimates and invoices, products and services, inventory, packages and memberships, vouchers and rewards, QR reviews and feedback, public business profiles, storefronts, WhatsApp order flows, notifications, support and operational workflows.
Scope
This policy applies to personal data processed through the Yepsta marketing website, business dashboard, public business profile and storefront experiences, support channels, forms and related services.
- Website visitors browsing Yepsta public pages.
- Business account owners, administrators and billing contacts.
- Staff members or users added by a business account owner.
- Customers whose information is entered, uploaded or managed by a business using Yepsta.
- People submitting contact, demo, support or other enquiry forms.
- Visitors to public storefronts, business profiles, booking pages, review pages or similar customer-facing pages powered by Yepsta.
Information We Collect
The information we collect depends on how you use Yepsta, what your business configures, and which modules or third-party services are enabled.
- Account information such as name, email address, phone number, password hash, business name, role and login details.
- Business profile information such as category, address, GSTIN, billing details, locations, staff, services, products, prices, working hours and operational settings.
- Customer data entered by businesses, including customer name, phone, email, appointment history, purchases, notes, feedback, package or membership records, rewards and communication preferences where applicable.
- Billing and transaction information such as subscription plan, invoices, receipts, payment references, credits, taxes, refund records and billing status.
- Communication data such as support tickets, contact requests, demo requests, email OTP verification activity, and WhatsApp, SMS or email logs where applicable.
- Usage and technical data such as IP address, device and browser information, pages visited, feature usage, log data, cookie identifiers, approximate location inferred from technical data, performance data and analytics events.
- Uploaded files, images or documents where a feature allows the business or user to upload them.
How We Collect Information
We collect information from a few sources so that the platform can operate reliably and support business workflows.
- Directly from you when you create an account, complete onboarding, configure your business, submit forms, contact support or update account details.
- From business account activity when owners, admins or staff use modules such as appointments, billing, CRM, inventory, storefront, reviews and notifications.
- From information businesses enter about their customers, staff, products, services, invoices, memberships and operations.
- Automatically through cookies, local storage, logs, security tools and analytics technologies when you use the website or platform.
- From third-party service providers where necessary to complete payments, deliver communications, provide infrastructure, prevent abuse, measure performance or support the service.
How We Use Information
We use personal data for product, operational, support, security, billing and compliance purposes connected to Yepsta.
- Provide, operate, maintain and improve Yepsta Business OS and related website experiences.
- Create, verify, manage and secure business accounts, staff access and user permissions.
- Process subscriptions, payments, invoices, plan changes, credits, taxes and billing support.
- Send OTPs, transactional alerts, product notices, service updates, support responses and customer communication logs where configured.
- Respond to contact, support, demo, onboarding and billing requests.
- Detect, prevent and investigate fraud, abuse, unauthorized access, security incidents, policy violations and technical problems.
- Understand product usage, website performance and marketing effectiveness so we can improve Yepsta.
- Meet legal, tax, accounting, regulatory, audit, dispute resolution and record-keeping requirements.
Legal Basis and Consent
Where applicable under Indian law, we process personal data based on consent, the need to provide the requested service, legal obligations, legitimate operational requirements, security needs, and instructions from the business account that uses Yepsta.
For customer data entered by a business, the business is usually the party deciding what data is collected and how it is used. Yepsta processes that data to provide the platform, support the business, maintain records, deliver enabled workflows and comply with applicable obligations.
Business Customer Data
Businesses using Yepsta may upload, enter or generate information about their own customers, staff, products, services, appointments, invoices, packages, memberships, orders, feedback and communications.
The business is responsible for ensuring that it has the lawful permission, notice, consent or other valid basis needed to collect, store, use and communicate with its customers through Yepsta. This includes responsibility for WhatsApp, SMS, email, appointment, review, billing, GST, storefront and customer interaction workflows configured by the business.
Yepsta does not sell business customer data. We process it to provide the platform, support enabled services, maintain security, comply with law and follow the relevant business account instructions.
Payment Information
Payments for Yepsta subscriptions, credits or related charges may be processed by third-party payment gateways and payment service providers. Their processing may be governed by their own terms, privacy policies and compliance requirements.
Yepsta may store payment references, invoice details, subscription status, plan details, tax information and transaction metadata. We do not intend to store full card, bank account or sensitive payment credential details unless a permitted provider integration requires or makes such data available under applicable rules.
Data Retention
We retain information for as long as reasonably needed to provide Yepsta, maintain business records, support active and past accounts, comply with tax, accounting and legal obligations, resolve disputes, enforce agreements, prevent abuse and maintain security.
Retention periods may vary depending on account status, subscription history, invoice and GST record needs, support history, backups, logs, technical requirements and legal obligations. Backup copies and security logs may remain for a limited period after deletion from active systems.
Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal data. These may include access controls, password hashing, encryption where appropriate, restricted access, monitoring, backups, security reviews and vendor controls.
No online platform can guarantee absolute security. Businesses and users should also protect login credentials, manage staff permissions carefully and notify Yepsta if they suspect unauthorized access.
User Rights and Choices
Subject to applicable law and business, legal, tax, accounting and security constraints, you may have choices regarding personal data processed by Yepsta.
- Access, review or update account and business profile details from the dashboard where available.
- Request correction or deletion of certain information by contacting Yepsta.
- Withdraw consent where processing is based on consent and withdrawal is legally and technically possible.
- Unsubscribe from non-essential marketing communications using available unsubscribe options or by contacting us.
- Ask privacy questions or raise requests through the Contact page or listed email address.
Children
Yepsta is intended for businesses and adult users who are legally capable of using a SaaS business platform. We do not knowingly collect children's personal data directly for account ownership.
If a business user records information about minors or customers through Yepsta, that business is responsible for ensuring it has the lawful basis, permission, notice or consent required for that data and for using it appropriately.
International Transfers and Service Providers
Yepsta may use cloud infrastructure, storage, analytics, communication, security, payment or support providers that process data in India or other countries. Where applicable, we use reasonable contractual, technical and organizational safeguards for such processing.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the product, law, service providers or operating practices. The updated version will be posted on this website with a revised last updated date.
Contact and Privacy Requests
For questions or requests, contact us through the Contact page or at hello@yepsta.com, the email address listed on this website.
We do not publish a named grievance officer here unless that detail is formally designated by the company. Privacy requests should include enough information for us to identify the relevant account, business or request.