Privacy policy

Sitatu ("the service") is a task and time management platform operated by Glisto InfoTech ("we", "us"), a company based in India. This policy explains what data we collect when your team uses Sitatu, why we collect it, and the choices you have.

What we collect

• Workspace and account data — names, email addresses, WhatsApp phone numbers, roles and department or branch assignments that a workspace admin enters when setting up their team.
• Work content — tasks, comments, attachments, notes, documents, meetings and reports your team creates in the service.
• WhatsApp messages — messages exchanged between your team and the service's WhatsApp number, which are processed to run the features you use (capturing tasks, sending reminders, closing work).
• Payment records — plan, billing period and payment status. Card and UPI details are collected and processed by Razorpay; we never store them.
• Technical data — logs such as IP address, browser type and timestamps, kept for security and troubleshooting.

How we use it

• To provide the service: assigning work, delivering reminders and notifications, rendering dashboards and reports.
• To deliver WhatsApp functionality, including reminder escalation and task updates over chat.
• To process messages with the optional AI assistant, when a workspace has switched it on. The assistant is off by default and every feature works without it.
• To bill for the service and respond to support requests.
• We do not sell personal data, and we do not use your work content for advertising.

WhatsApp and Meta

WhatsApp features are delivered through the official WhatsApp Business Platform operated by Meta Platforms, Inc. Messages sent to and from the service transit Meta's infrastructure and are subject to WhatsApp's own terms and privacy policy. We message only people whose team has added them to a Sitatu workspace, and reminder frequency is controlled by each person's notification preferences. Sitatu is an independent product and is not affiliated with or endorsed by Meta.

Payments

Subscription payments are processed by Razorpay Software Private Limited. When you pay, your payment instrument details go directly to Razorpay under their privacy policy; we receive only confirmation of the payment and the subscription state we need to run your plan.

Who we share data with

We share data only with the processors needed to run the service: Meta (WhatsApp Business Platform), Razorpay (payments), our hosting provider, and — for workspaces that enable the assistant — our AI model provider, which processes message content to generate responses. Each processor receives only what its function requires. We may also disclose data where the law requires it.

Workspace isolation and retention

Every company workspace is isolated from every other one, end to end. Your data remains yours: workspace admins can export tasks and reports to CSV at any time. We retain data while your workspace is active and delete or anonymise it within a reasonable period after a workspace is closed, except where the law requires longer retention (for example, financial records).

Your rights

You can ask to access, correct or delete your personal data. If you are a member of a customer's workspace, the fastest route is your workspace admin, who controls the data your team keeps in the service; you can also reach us directly via the contact page and we will respond in line with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023.

Security

Access to production systems is restricted, uploads are re-encoded and served through access-controlled endpoints rather than public folders, and workspaces are enforced at the application's data layer. No internet service can promise perfect security, but isolation between customers is a design constraint we test against, not an afterthought.

Children

Sitatu is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 18 outside an employment context.

Changes and contact

If this policy changes materially we will update this page and its date. Questions about this policy or your data can be sent via the contact page. This policy is governed by the laws of India.