Who we are
ResellerSuite is software for traders, dealers and distributors. It is made and run by KAPIS AI TECH PRIVATE LIMITED (“Kapis AI Tech”, “we”, “us”), Flat 601, Yasmin Heritage, Vile Parle (West), Mumbai 400056, Maharashtra, India. Email: founder@kbie.ai.
This policy covers this website (resellersuite.si), the ResellerSuite app at app.resellersuite.si, each business’s desk, shop and client portal on a resellersuite.si address or the business’s own domain, the public demo, and the Facebook and WhatsApp connections a business can switch on.
Two roles: your account, and your customers’ data
Your account. For the details of the businesses that use ResellerSuite and their team members (sign-up, sign-in, billing, support), we decide how the data is used. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for this data.
Your customers’ data. Each business keeps its own records in ResellerSuite: leads, clients, quotes, orders, invoices, payments, vendors and messages. For that data the business is the Data Fiduciary (the controller) and we process it on the business’s behalf and only on its instructions. We do not use it for our own purposes. If you are a customer of a business that uses ResellerSuite, contact that business first. Each shop has its own notice at its address/privacy/personal-data. We will help the business answer you.
What we collect
- Account and team details: name, business name, email, mobile number, country, trade, and the names and emails of team members the business adds.
- Sign-in and security records: the time of each sign-in, the network (IP) address, the approximate city and country worked out from that address, the device and browser, two-step sign-in settings, and an activity log of important actions (for example exports, deletions and setting changes). The activity log is kept for 400 days. It never contains passwords, keys or setting values.
- Demo visitors: to open the public demo you give your name, business, trade, country, mobile number and email, and confirm a six-digit code sent to that email (we store only a scrambled form of the code). We record each demo visit with the same network and device details as above. These details are removed twelve months after your last visit.
- Business content: products, photos, prices, catalogues, clients, leads, quotes, orders, invoices, payments, vendors, documents and messages that the business enters or imports. Supplier names, supplier codes and cost prices are kept private to the business and never appear on its public shop.
- Supplier PDFs: a catalogue PDF is read inside the trader’s own browser and the file itself is not uploaded. The photos and product details the trader chooses to save are stored. If the trader switches on AI reading for a page, an image of that page and its text are sent to the AI provider (see “Who processes data for us”).
- Voice notes: if a business allows them, a buyer can leave a voice note with an enquiry; it is turned into text for the business and the recording is removed on a schedule.
- Payments to us: if you pay us online, the payment is handled by Razorpay. We never see or store your card number, UPI PIN or bank login.
Data from Facebook (Meta) and WhatsApp
A business can connect its own Facebook Page and its own WhatsApp Business number to ResellerSuite. Nothing is accessed until a person with the right to do so connects it and approves the permissions on Meta’s own screen. This is the data we then access:
- Facebook Pages you choose: the name and ID of each Page you tick, your Facebook user ID, and an access token for each Page so we can receive its leads.
- Lead form answers (Lead Ads): the answers people give on that Page’s lead forms (usually name, phone, email, company and city, and any other question the form asks), with the form name, ad, campaign name and time.
- WhatsApp Business: the WhatsApp Business Account ID, phone number ID and display number, an access token, the content of the messages the business sends and receives through ResellerSuite, their delivery status, and the business’s message templates and their approval status. If the business connects the number it already uses in the WhatsApp Business app on its phone, Meta also shares that number’s contacts and up to about six months of its one-to-one chat history (never group chats), and messages the business sends from the phone app are copied into the desk so the conversation stays in one place.
Why we access it. Only to show the business its own leads in its ResellerSuite desk (leads list, alerts, follow-ups), and to send WhatsApp messages and templates when the business tells us to, and show the replies and delivery status. We do not use it for anything else.
Kept out of AI features. Data we receive through the Facebook or WhatsApp connections (from Meta’s systems) is never sent to any AI feature or AI provider: it is not translated, summarised or read by AI. ResellerSuite’s software keeps it apart from those features. This is different from a WhatsApp chat that a business exports from its own phone and uploads itself: for such an upload, the business can choose to press “Pull out the details”, and only then is that chat read by our AI provider to fill in the lead.
What we never do with it. We never sell it. We never share it with another business. We never use it for advertising, for building profiles, or to train AI models, and no AI provider receives it. One business’s Facebook or WhatsApp data is never visible to another business.
How it is protected. Access tokens are stored encrypted, with a separate key for each business. All data travels over HTTPS and is stored encrypted at rest by our hosting and database providers. Only the business’s own team members, within the roles the business gives them, can see its leads and messages.
How long it is kept. Access tokens are kept only while the connection is on. They are deleted at once when the business presses Disconnect, when you remove ResellerSuite from your Facebook settings, or when the account closes. Leads and messages that have already arrived are part of the business’s own records and stay in its desk until the business deletes them or closes its account. We also delete Facebook and WhatsApp data when Meta asks us to, when we stop offering the connection, or when it is no longer needed for the purpose it was collected for.
How to delete it. See our data deletion page.
How we use personal data
- To run the service the business has asked for: its desk, shop, client portal, quotes, orders, invoices and messages.
- To keep accounts safe: sign-in checks, two-step sign-in, spotting misuse, and the activity log.
- To send service emails: sign-in links, codes, alerts for new enquiries and order notices.
- To give support when the business asks, and to bill for the package.
- To contact demo visitors about ResellerSuite, which is why the demo asks for contact details. You can ask us to stop at any time.
- To meet legal duties, such as keeping tax records.
We do not sell personal data, and we do not show advertising inside ResellerSuite.
Who processes data for us
We use these service providers. Each one receives only what it needs for its job.
- Vercel (United States company): hosting and file storage. Servers in Singapore, files in Mumbai. Also cookieless visit counts on the app.
- Neon (United States company): the database, in Singapore.
- Resend: sending email (sign-in links, codes, alerts).
- OpenAI: AI features: reading catalogue pages, writing product text and messages, making images, and translation into Arabic. Used only when the business uses an AI feature.
- Sarvam AI (India): translation into Indian languages and turning voice notes into text, when the business has these features on.
- Anthropic and Google (Gemini): only when a business chooses one of them for AI features with its own key.
- Razorpay (India): online payments to us, when used.
- Meta: when a business connects Facebook or WhatsApp, data passes between Meta and us as described above. None of the AI providers listed here receives data that comes through the Facebook or WhatsApp connections.
- Google Fonts: this website loads its typefaces from Google, which receives your network address when the page loads.
Some providers may process data outside India. We use only providers that protect it under written terms, and we follow any limits the Government of India sets on transfers.
Cookies
This website (resellersuite.si) sets no cookies and runs no advertising or tracking scripts. The app uses cookies that are needed to keep you signed in and to remember choices such as the demo trade you picked. Visit counts on the app come from Vercel Web Analytics, which does not use cookies. If Google Analytics is switched on for a shop, it loads only after the visitor agrees.
How long we keep data
- Account and business records: while the account is open. After an account closes, the business can download its data for 30 days, and we then delete it within 90 days.
- Billing and tax records: as long as Indian tax and company law requires.
- Activity log: 400 days. Demo visitor details: twelve months after the last visit.
- Website enquiries in a business’s desk: as long as the business chooses in its settings.
- Backups: deleted data can remain in our encrypted backup copies for a limited time until those copies are removed.
Your rights
Under the DPDP Act you can ask for a summary of your personal data, ask us to correct or complete it, ask us to delete it, withdraw consent you have given, and name someone to act for you if you cannot. Write to founder@kbie.ai. We may need to check who you are before acting.
If your data is in a business’s records (for example you filled in its lead form or messaged it on WhatsApp), the business decides about it. Ask the business, and tell us if you get no answer: we will help.
Security
Every connection is encrypted (HTTPS). Keys and tokens are stored encrypted. Each business’s data is kept apart from every other business’s. Teams have roles, two-step sign-in is available and an activity log records important actions. Only a small number of our staff can reach production systems, and only to run and support the service. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
Children
ResellerSuite is a business service and is not meant for anyone under 18. We do not knowingly collect children’s data.
Grievance officer
If you have a question or complaint about your personal data, write to our Grievance Officer at founder@kbie.ai, or by post to KAPIS AI TECH PRIVATE LIMITED, Flat 601, Yasmin Heritage, Vile Parle (West), Mumbai 400056, Maharashtra, India. We will acknowledge you within 7 days and aim to resolve the matter within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Changes to this policy
We will update this page when what we do changes, and change the date at the top. If a change matters to how your data is used, we will tell account owners by email before it takes effect. Last updated 30 October 2026.