1. Introduction
This Privacy Policy describes how Agent IA Vocal ("we", "our", or "the Platform") collects, uses, discloses, and protects the personal data of users of our website and services in India. By using our Platform, you consent to the practices described in this policy. We operate in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection and telecommunications laws.
2. Applicable Legal Framework
We operate in alignment with the following Indian legal frameworks:
- ●Digital Personal Data Protection Act, 2023 (DPDP Act) — India's primary data protection legislation governing the processing of digital personal data.
- ●Information Technology Act, 2000 (IT Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
- ●Telecom Regulatory Authority of India (TRAI) Telecom Commercial Communications Customer Preference Regulations (TCCCPR) governing automated communications.
- ●Sector-specific regulations from the Reserve Bank of India (RBI), SEBI, and the Ministry of Health as applicable.
3. Information We Collect
We collect the following categories of personal data:
- ●Identification information: full name, email address, phone number.
- ●Business information: company name, website, industry, voice agent usage goals.
- ●Payment information: card data is processed by Stripe and is never stored on our servers.
- ●Usage data: call logs, transcripts, voice recordings, call duration, Platform navigation data.
- ●Technical data: IP address, browser type, operating system, connection data.
4. How We Use Your Information
We use your personal data to:
- ●Provide, maintain, and improve our AI voice agent services.
- ●Process your payments and manage your subscription.
- ●Configure and customise your voice agent according to your needs.
- ●Send you communications related to your account and our services.
- ●Analyse Platform usage to improve our products.
- ●Comply with our legal and regulatory obligations under Indian law.
5. Consent Under the DPDP Act
Under the DPDP Act 2023, we process your personal data only with your free, specific, informed, and unambiguous consent. You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Where processing is based on a legitimate use recognised under the DPDP Act, your separate consent may not be required.
6. Voice Recordings and Transcripts
Our AI voice agent service may record and transcribe telephone conversations. Callers are informed at the beginning of each call that the conversation may be recorded. Recordings and transcripts are:
- ●Encrypted in transit (TLS 1.3) and at rest (AES-256).
- ●Accessible only to authorised users of your organisation through the secure dashboard.
- ●Retained for a maximum of 90 days, unless configured differently by the user.
- ●Used solely for service delivery and quality improvement.
7. Information Sharing
We never sell your personal data. We may share your data with:
- ●Stripe: for payment processing.
- ●ElevenLabs: for AI voice processing (anonymised voice data).
- ●Calendar and CRM providers when you connect them to your account.
- ●Hosting providers: our infrastructure meets internationally recognised security standards.
- ●Legal or regulatory authorities: when required by Indian law, court order, or regulatory request.
8. Cross-Border Data Transfers
Where personal data is transferred outside India, we ensure appropriate safeguards are in place as required by the DPDP Act. We maintain contractual protections with all sub-processors and will comply with any notification or restriction requirements introduced by the Data Protection Board of India.
9. Your Rights as a Data Principal
Under the DPDP Act 2023, you (as a Data Principal) have the following rights:
- ●Right to access: request information about personal data processed about you and the purposes of processing.
- ●Right to correction and erasure: request correction of inaccurate or incomplete data and erasure of data that is no longer necessary.
- ●Right to grievance redressal: raise a grievance with us and, if unresolved, escalate to the Data Protection Board of India.
- ●Right to nominate: nominate a person to exercise your rights in the event of death or incapacity.
10. Data Security
We implement reasonable security safeguards as required under the DPDP Act and the IT (SPDI) Rules to protect your personal data, including:
- ●End-to-end encryption for all communications (TLS 1.3 in transit, AES-256 at rest).
- ●Secure authentication through recognised identity providers, with optional multi-factor authentication.
- ●Continuous monitoring of access and suspicious activity, with audit logs.
- ●Role-based access controls limiting personal data access to authorised personnel.
11. Data Retention
We retain your personal data for as long as necessary to provide our services and meet our legal obligations. Account data is retained during your subscription and up to 30 days after termination. Voice recordings are retained according to the period configured in your account (default: 90 days). You may request earlier deletion at any time.
12. Cookies
We use essential cookies for Platform operation (authentication, language and theme preferences). We do not use advertising cookies or third-party trackers for marketing purposes.
13. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with the updated date. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
14. Contact & Grievance Officer
For any questions regarding this Privacy Policy, to exercise your rights under the DPDP Act, or to raise a grievance, please contact our data protection point of contact at: demo@agentiavocal.ca