Privacy Policy

1. Who decides how information is used

The platform operator determines purposes for its own account administration, billing, security and support records. The organization running a campaign generally decides why recipient information is collected and how calls are used. We process that customer-controlled information to provide the service on its instructions.

An authorized reseller may administer customer workspaces and act as a processor for its customers, while separately deciding how its own sales, billing and support records are used. Authorized organization administrators, delegated reseller administrators and platform support personnel can access information within their permissions for administration and service delivery. Ask your seller which entity controls your records. See the Data Processing Terms for the respective responsibilities.

2. Information and purposes

• Account and organization details: names, emails, phone numbers, workspace information, authentication records and policy acceptance evidence for access, administration, security and agreement records.
• Customer content: uploaded contacts and documents, prompts, knowledge content, dialed numbers, audio where recorded, transcripts, summaries, ratings and call metadata to perform the customer’s requested communications and analysis.
• Billing records: payment references, amounts, status, billing details, tax/invoice information and wallet transactions for collection, accounting, refunds and disputes. Cashfree handles payment authorization; do not send payment passwords, PINs or full card credentials to our support or agents.
• Technical and support records: access and error logs, device/browser and network information, support messages and feature usage to operate, troubleshoot, secure and improve the service. Optional integrations receive data only as required by their enabled features.

3. Sharing, AI and international processing

Information is shared with the providers needed for enabled features, authorized workspace administrators, and authorities where legally required. We do not sell personal information. See Providers & Subprocessors for the integration inventory and types of information involved.

Telephony, AI, hosting and storage services may process data outside India depending on the selected provider, region and account configuration. We do not promise India-only residency across every integration. If you require a particular location or transfer restriction, agree it with your seller before uploading data and confirm each relevant provider arrangement.

Prompts, audio and transcripts may be sent to AI services for inference and analysis. Provider retention and model-training conditions depend on their service and account terms; this notice does not promise zero retention or no provider training across all configurations. Customer-supplied credentials, storage and external exports remain subject to those customer-selected services and their settings.

4. Retention by category

• Recordings: automatic cleanup depends on the configured platform or organization retention window. Without a positive effective window, recordings have no automatic age-based deletion. Ask your administrator for the effective setting; do not assume a default 30- or 90-day expiry. Deleting a platform recording does not necessarily remove a separate provider copy or customer export.
• Transcripts, summaries, ratings, contacts and knowledge content: retained to provide the workspace service until removed using supported controls or an approved deletion request. Recording cleanup does not delete these categories.
• Account and agreement records: retained for account administration and, where necessary after closure, to demonstrate agreements, prevent abuse and resolve disputes. No universal automatic deletion period is configured for all such records.
• Payments, invoices and audit/security records: kept for applicable accounting, legal, security and dispute requirements; the required period depends on the record and obligation. A deletion request may exclude records that must lawfully be retained.
• Backups, infrastructure logs and provider copies: follow the relevant infrastructure/provider lifecycle. Deletion from the active application may precede backup expiry. The request response should identify applicable residual copies and restrictions; no universal backup-erasure deadline is promised here.

5. Requests, withdrawal and account closure

Use the privacy contact below to request access, correction, deletion, a copy of your information, or withdrawal of consent where consent is the basis for processing. Include the workspace or business that contacted you, the affected record or call date, and a safe way to reach you. Never send passwords or unnecessary identity documents. We may request proportionate verification before disclosing or changing records.

For campaign-recipient information, contact the business that called you first; we can route requests to the responsible customer or reseller and assist within our role. An opt-out request should identify the calling business and the number contacted. If the business is unclear, contact us with the available details.

Closure or deactivation alone is not erasure. Tell us which data you want deleted, stop scheduled activity and exports through your administrator, and request confirmation of the scope, applicable retention exceptions and expected completion. Requests are assessed under applicable law; we will explain any refusal or delay and the escalation route. Where data is restored from backups, applicable deletion instructions must be reapplied before ordinary use.

6. Security and browser storage

We use access controls and protection for sensitive credentials to reduce unauthorized access. No system is completely secure. Limit workspace access, protect keys and report suspected compromise promptly.

The app uses browser storage and related session mechanisms for sign-in, preferences and workspace state. Blocking or clearing them can sign you out or reset settings. This agreement does not authorize optional marketing tracking; any purpose requiring separate consent must obtain it separately.

7. Children and education customers

Platform accounts are for adults. Education and other customers must not assume that an adult account agreement authorizes processing children’s information. Before providing a minor’s details, the customer must establish a permitted purpose and any required verified parent/guardian permission and notices, and confirm a supported arrangement with its seller. Do not use the service to profile children for prohibited targeting or behavioral monitoring. The platform does not currently provide a general parent-consent verification workflow.

8. Notice changes

We publish the version and date of notice changes and communicate material changes through an appropriate account channel. Any new purpose requiring consent needs a separate choice. The phased commencement of India’s DPDP framework does not mean every provision applies on the date of this notice; applicable rights and duties are determined by the provisions in force.

Operator, privacy requests & grievances

Platform brand: Veytrix AI
Legal operator: Contact us for the contracting entity’s confirmed details.
Business address: Hyderabad, Telangana, India. Full business address pending confirmation.
Privacy / grievance contact: Contact the support team to reach the responsible privacy / grievance representative.
contact@veytrixai.com

For a request or complaint, include your workspace or the business that contacted you, the relevant date and a description. We may need to verify authority before sharing records. If a response does not resolve your concern, reply to the same correspondence with “Grievance escalation” and the earlier reference, requesting review by the responsible representative. Applicable statutory complaint rights remain available.

White-label customers should also use the seller’s legal and grievance details on their order or invoice. These platform details do not replace the reseller’s identity.