These terms are an agreement between you (the business that signs up for Kredoo, called "you" or "the Client") and [ElevAIte Labs, full legal entity name and registered address to be confirmed] ("ElevAIte Labs", "we", "us"), which builds and runs Kredoo at kredoo.in. By creating a workspace, or by ticking the box at signup or in the app, you accept these terms on behalf of your business. If you do not have authority to bind the business, do not accept them.
These terms work together with our Privacy Policy and our Data Processing Agreement (the "DPA"). If they conflict on how personal data is handled, the DPA wins.
1. What Kredoo is
Kredoo is a customer relationship tool for businesses. Depending on what you switch on, it lets you:
- keep a list of your leads and customers, with a pipeline, notes, follow-ups and bookings;
- connect your WhatsApp Business number (through Meta's WhatsApp Business Platform) and your Instagram professional account, and read and reply to those conversations in one inbox;
- run automated conversation flows, campaigns and reminders;
- turn on AI features that draft or send replies, answer questions from a knowledge base you provide, or summarise conversations;
- publish booking pages and capture leads from ads and forms;
- place AI voice calls, where that module is enabled.
We add, change and retire features over time. If we remove something you pay for in a way that materially reduces the service, we will tell you in advance where we reasonably can.
2. Your account
- You must give accurate signup details, including a working email address and a mobile number you can verify.
- You are responsible for everything done through your workspace, by you, your team members, or anyone using your login details or API keys. Keep passwords and API keys private and tell us at [privacy@kredoo.in] if you think they have been misused.
- You decide who joins your workspace and what role they have. Admins can accept documents like the DPA on behalf of the business; members cannot.
- You must be at least 18 and acting for a business, not as a consumer.
3. The data you put in Kredoo
You keep ownership of your data: your contacts, conversations, leads, files and settings ("Client Data"). You give us permission to store and process Client Data only to provide, secure, support and improve the service for you, as described in the DPA.
Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), for the personal data of your contacts you are the Data Fiduciary and we are your Data Processor. That means:
- You need a lawful basis for every contact. Usually this is their consent, given for a clear purpose. You are responsible for giving them notice of what you collect and why.
- You need opt-in before you message people on WhatsApp. Meta's WhatsApp Business Messaging Policy requires that people have agreed to receive messages from your business on WhatsApp, and that you honour requests to stop. Kredoo helps (for example, a contact who replies STOP is opted out), but collecting and recording opt-in is your job.
- Instagram messaging must follow Meta's Instagram and Platform policies, including the limits on when and how you can message people.
- Collect only what you need. Do not store sensitive information (health conditions, financial account details, government ID numbers, passwords, information about children) in Kredoo unless it is genuinely needed for the service you provide to that person.
- Health businesses take extra care. If you run a clinic or another health business, keep clinical details (diagnoses, test results, prescriptions) out of chat notes and custom fields unless you need them there, and do not use AI features to give diagnoses or medical advice. You remain responsible for any professional or sector rules that apply to you.
- Children. The DPDP Act requires verifiable consent from a parent or guardian before processing a child's personal data. Do not use Kredoo to process children's data unless you have that consent.
- Requests from your contacts (to see, correct or delete their data, or to withdraw consent) are yours to answer. Kredoo gives you tools to find, edit and delete a contact's data, and we will help as described in the DPA.
4. AI features
Some features send conversation text and related details (for example a contact's name, the messages in the thread, lead fields and your knowledge base content) to a third-party AI provider to generate a reply or draft. The provider used is the one configured for your workspace, for example OpenAI or Anthropic, and these providers may process data outside India. AI features are optional and you choose when to turn them on.
AI output can be wrong. You are responsible for what is sent to your contacts in your business's name, including messages an AI feature sends automatically. Review your AI settings, your knowledge base and your automations regularly.
5. Meta, WhatsApp and Instagram
WhatsApp and Instagram are run by Meta, not by us. To use them through Kredoo you must accept and follow Meta's own terms and policies, including the WhatsApp Business Terms of Service, the WhatsApp Business Messaging and Commerce Policies, and the Instagram and Meta Platform terms.
- Meta charges you directly for WhatsApp messages that Meta bills (for example template messages). You add your own payment method with Meta. Our subscription fee does not include Meta's charges.
- Meta decides template approval, message categories, messaging limits, quality ratings, account verification and whether your number or account is restricted. We cannot override those decisions, and we are not responsible for them.
- If Meta suspends or limits your account, or changes its products, prices or rules, parts of Kredoo may stop working for you. We will help where we can.
6. Acceptable use
You will not use Kredoo to:
- send spam, bulk unsolicited messages, or messages to people who have not opted in or who have opted out;
- break any law, including the DPDP Act, the Information Technology Act, 2000, consumer protection law, and telecom or advertising rules that apply to you;
- send content that is fraudulent, deceptive, harassing, hateful, sexually explicit, or that infringes someone else's rights;
- impersonate another person or business;
- try to access another workspace's data, probe or overload our systems, or get around limits or security controls;
- resell or sublicense the service without a written agreement with us.
We may suspend sending, automations or access if we reasonably believe you are breaking these rules or putting other customers, Meta's platforms or the public at risk. Where it is safe to, we will tell you first and give you a chance to fix the problem.
7. Plans, payment and trial
- New workspaces start with a free trial ([14 days], as shown at signup). When the trial ends you need a paid plan to keep sending.
- Plans are paid in advance for the period you choose. Payments are processed by our payment provider. There is no automatic renewal and no standing mandate on your card: each period is a separate payment.
- If your plan lapses, your workspace is not deleted. You can still sign in and read and export your data, but sending and automations pause until you renew.
- Refunds follow our refund policy.
- Prices exclude taxes, which are added where applicable. We may change prices for future periods with reasonable notice.
8. Availability and support
We work to keep Kredoo running and secure, but we do not promise that it will be uninterrupted or error free. The service depends on third parties (including Meta, our hosting providers and AI providers) that we do not control. Planned maintenance and outages outside our control can happen. Support is provided by email at [support email to be confirmed] during [support hours to be confirmed].
9. Security
We use reasonable technical and organisational measures to protect Client Data, described in the DPA. Connections to Kredoo are encrypted in transit (HTTPS/TLS). Access tokens and API keys you connect are stored encrypted, and passwords are stored only as one-way hashes. [We encrypt stored conversations at rest. LAWYER AND ENGINEERING TO CONFIRM BEFORE LAUNCH: include this sentence only if at-rest encryption of conversations has shipped.] If we become aware of a personal data breach affecting your Client Data, we will tell you as set out in the DPA.
10. Ending the service
- You can stop using Kredoo at any time and ask us to close your workspace by writing to [privacy@kredoo.in].
- We may end these terms if you seriously breach them and do not fix the breach after notice, or immediately where the law or Meta requires it.
- Before closing, you can export your leads and conversations. After closure we delete or anonymise Client Data as set out in the DPA, except where the law requires us to keep it (for example invoices and records of your acceptance of these terms).
11. Intellectual property
Kredoo, its software, design and brand belong to ElevAIte Labs. We give you a non-exclusive, non-transferable right to use the service during your subscription. If you send us feedback, we may use it without obligation to you.
12. Liability
[LIABILITY TERMS TO BE DRAFTED BY COUNSEL. Points to settle: a cap on our total liability (for example, the fees you paid in the 12 months before the claim), exclusion of indirect and consequential loss, and carve-outs that cannot be excluded under Indian law.]
Nothing in these terms limits liability that cannot be limited by law.
13. Changes to these terms
We may update these terms. Each version has a version string shown at the top of this page. If we make a change that affects your rights, a workspace admin will be asked to accept the new version the next time they sign in. Using Kredoo after that acceptance means the new version applies.
14. Governing law
These terms are governed by the laws of India. The courts at [city to be confirmed] have exclusive jurisdiction, subject to any dispute resolution process counsel recommends.
15. Contact
Questions about these terms: [privacy@kredoo.in].