Privacy Policy

This Privacy Policy explains how Chatflare Private Limited (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use VoiceCallingAI (the “Service”). We are the Data Fiduciary for the personal data of our account holders, and we process this data in accordance with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it.

This is a standalone privacy notice. Please also read our Terms & Conditions.

1. Personal data we collect

• Account and contact data: your name, business name, email address, phone number, and login credentials.
• Payment data: billing details and transaction records. Card and bank details are collected and processed by our payment processor (Razorpay) and are not stored by us.
• Call data: audio recordings, transcripts, call metadata (numbers dialled, time, duration, outcome), and the contact lists and scripts you provide.
• Usage and device data: log data, IP address, browser type, and cookies or similar technologies used to operate and secure the Service.

2. How we use your data

We use personal data to: create and manage your account; provide, operate, and improve the Service; place and receive calls on your instruction; process payments and issue invoices; provide customer support; ensure security and prevent fraud or misuse; and comply with our legal obligations. We specify the purpose at the point of collection and limit our processing to those purposes.

3. Legal basis

We process personal data on the basis of your consent and as necessary to perform our contract with you, as permitted under the DPDP Act. You may withdraw your consent at any time (see “Your rights”); withdrawal does not affect processing already carried out.

4. Call recordings and the people you call

When you use the Service to call your contacts, you are the Data Fiduciary for those individuals’ personal data and we act as your Data Processor, processing it only on your instructions. You are responsible for having a lawful basis to contact them and for any disclosures required by law, including informing them that a call is recorded or AI-assisted where required.

5. Where your data is stored

We host data with infrastructure providers located in India (including the Mumbai region). Where any processing involves a provider outside India, we do so only as permitted by the DPDP Act and subject to any restrictions notified by the Government of India.

6. Service providers we share data with

We share personal data only with vendors that help us deliver the Service, under contractual obligations to protect it and to process it only on our instructions. These include providers of telephony, speech recognition and synthesis, AI language models, cloud hosting and storage, and payment processing (for example, Razorpay for payments). We do not sell your personal data.

7. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, to provide the Service, and to meet legal, tax, and accounting requirements. We delete or anonymise personal data when it is no longer required. You may request deletion as described below.

8. Your rights

Under the DPDP Act, you have the right to: access a summary of your personal data and how it is processed; correct or update inaccurate or outdated data; request erasure of your data; withdraw consent; and nominate another person to exercise your rights in the event of your death or incapacity. To exercise any of these rights, contact our Grievance Officer below. We will respond within the timelines required by law.

9. Grievance redressal

If you have any concern or complaint about how we handle your personal data, please contact:

Grievance Officer: Harsh Ahuja Email: harsh@voicecallingai.com

We will acknowledge and address grievances within the period required under the DPDP Act, and in any event within 90 days. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

10. Security

We use reasonable technical and organisational measures — including encryption in transit, access controls, and secure infrastructure — to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data breaches

In the event of a personal data breach, we will notify the Data Protection Board of India and the affected individuals as required under the DPDP Act and the rules made under it.

12. Children

The Service is intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect the personal data of children.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you.

14. Contact

For privacy questions, contact support@voicecallingai.com or our Grievance Officer above. See our Contact page for full details.