# Privacy Policy · Vaakyo > How Vaakyo collects, uses and protects personal data, under India's Digital Personal Data Protection Act, 2023. Source: https://vaakyo.com/privacy # Privacy Policy Last updated: 10 October 2026 ## 1\. Who we are and what this covers Vaakyo ("we", "us"), based in Mau, Uttar Pradesh, India, provides a platform for building AI voice agents. This policy explains how we process personal data when you visit vaakyo.com, use the console (https://console.vaakyo.com), our API or MCP server, or speak with an agent that runs on our platform. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules. ## 2\. Our role and yours - **Account and billing data.** For the people who sign up and use the console, we are the data fiduciary. - **Call data.** For the people your agents speak with (callers, customers, leads), you, our customer, are the data fiduciary and decide why and how their data is processed. We process it on your behalf, as your data processor, only to run the Service and as your instructions and our [Terms](https://vaakyo.com/terms) allow. Requests from those people about their data should go to the business they spoke with; we'll help that business respond. ## 3\. What we collect Data Examples Account Name, work email, phone number, password (stored hashed), two-step verification settings, role in a workspace. Business verification (KYC) Business name and address, GSTIN or PAN, documents you upload, the authorised person's details. Billing Credit purchases, invoices, plan, payment status. Card or UPI details are handled by the payment provider, not stored by us. Call data Phone numbers, call audio and recordings, transcripts, summaries, data the agent extracts, call timing and cost. Content you add Agent prompts, knowledge files, contact lists for campaigns, webhook and tool settings. Technical IP address, browser, device, sign-in sessions, API and audit logs, error reports. Contact What you write to us by email or send through the sales form on vaakyo.com: name, work email, company, phone number if given, and your message. ## 4\. How we use it - To run the Service: place and answer calls, turn speech into text and back, run the language model, store recordings and transcripts, and show them to your workspace. - To create and secure accounts, verify businesses, prevent fraud and abuse, and enforce our [Acceptable Use Policy](https://vaakyo.com/acceptable-use) . - To bill you, issue GST invoices and meet tax and accounting duties. - To support you, send service messages (sign-in codes, invoices, low balance, changes to the Service) and, if you agree, product updates. - To keep the Service reliable: monitoring, debugging and measuring quality and latency. We do not sell personal data, and we do not use call data to train our own or third-party AI models. ## 5\. Consent and legitimate uses We process account data with your consent, given when you sign up, and for the legitimate uses the DPDP Act allows, such as performing our contract with you, meeting legal obligations and responding to emergencies. You can withdraw consent at any time by writing to us; this doesn't affect processing already done, and we may need to close the account if we can no longer run it. When you use agents to call people, you are responsible for having a valid basis and any consent needed to call and record them, and for telling them what the law requires. ## 6\. Who we share it with We share personal data only with service providers that help us run the Service, under contracts that protect it, and only as much as each needs: - Cloud hosting, storage and backups (Microsoft Azure). - Telephony (Plivo) to place and receive calls and rent phone numbers. - Speech-to-text and text-to-speech providers (Sarvam AI, Cartesia, Deepgram, ElevenLabs), as chosen in each agent's settings. - Language model providers (Google Gemini by default; OpenAI, Anthropic, AWS Bedrock, Azure OpenAI, OpenRouter or DeepSeek when an agent uses them). - Email delivery, and caller ID verification (Truecaller) when you request it. We may also disclose data when required by law, a court or a government authority, or to protect the rights and safety of our users and the public. ## 7\. Where data is processed Some providers above process data outside India. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and choose providers with appropriate security. ## 8\. How long we keep it - Account and workspace data: while the account is open, then up to 30 days after closure unless you ask for earlier deletion. - Call recordings, transcripts and content: while your workspace keeps them; deleted with the workspace. - Invoices and billing records: as long as tax and accounting laws require (generally 8 years). - Backups roll over within weeks; deleted data leaves backups as they expire. ## 9\. Security We use encryption in transit and at rest, role-based access, two-step verification, audit logs and other measures described on our[Security page](https://vaakyo.com/security) . If a personal data breach occurs, we will notify the Data Protection Board of India and affected people as the DPDP Act requires, and tell affected customers without undue delay. ## 10\. Your rights Under the DPDP Act you may: - ask for a summary of the personal data we process about you and how we process it; - ask us to correct, complete, update or erase it; - withdraw consent; - nominate another person to exercise these rights if you die or become unable to; - raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied. Write to [hello@vaakyo.com](mailto:hello@vaakyo.com) . We'll verify your identity and reply within 30 days. ## 11\. Children The Service is for businesses and is not meant for anyone under 18. We don't knowingly collect children's data for our own purposes. ## 12\. Cookies vaakyo.com uses no tracking or advertising cookies. The console uses only the cookies needed to keep you signed in and protect your session; they can't be switched off without breaking sign-in. ## 13\. Changes We'll post changes here and update the date above. For material changes we'll tell account owners by email before they take effect. ## 14\. Grievance officer For questions, requests or complaints about personal data, contact our Grievance Officer at [hello@vaakyo.com](mailto:hello@vaakyo.com?subject=Grievance) , Vaakyo, Mau, Uttar Pradesh, India. We acknowledge grievances within 48 hours and resolve them within 30 days. --- More for agents: https://vaakyo.com/llms.txt · Docs: https://docs.vaakyo.com · Sitemap: https://vaakyo.com/sitemap-index.xml