Privacy Policy

1. Who we are and our role

VoiChat (“VoiChat”, “we”, “us”) is an AI voice platform operated by VoiChat and available at https://voichat.in/.

For your account, billing, business verification and website enquiries, we decide how personal data is used and act as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

For the content our customers add to their workspace about their own customers — for example caller phone numbers, call recordings, transcripts, campaign contact lists and knowledge base content — the customer business is the Data Fiduciary and we process that data on its behalf as a Data Processor. Requests about that data should be sent to the business you dealt with; we will help them respond.

2. Personal data we collect

Account information

Your name, business email address, password (stored only as a secure hash), the services you choose, one-time email verification codes (which expire after 10 minutes), and sign-in and last-activity times.

Business verification

Your business name and the details you submit, and one certificate — a GST certificate, or a Udyam or incorporation certificate if you do not have GST. The certificate is stored encrypted, is visible only to our platform team, and is deleted once your verification is approved or returned.

Workspace content

Knowledge base content, assistant settings, voices you choose or create (including voice samples and the consent recorded with them), voiceover scripts and audio, and contact lists you upload for campaigns.

Call and support data

Caller and recipient phone numbers, call times, duration and outcomes, transcripts of what callers said and what the assistant replied, call recordings when recording is used, and support tickets and contact records created from calls.

Billing information

Credit plan orders, wallet balance, number rentals and usage records. We do not currently collect card, UPI or bank account details on this website.

Website enquiries

The name, email, phone number, business name and message you send through our contact form.

Technical and security data

IP address, browser details and server logs, used to keep the service secure, prevent abuse (for example by limiting repeated sign-in attempts) and fix problems.

3. How we use personal data

• To create and secure your account and send sign-in and verification codes.
• To provide the services you choose — answering and placing calls, generating voices and voiceovers, running campaigns and showing call history.
• To verify your business and rent, renew or release phone numbers.
• To manage credits, orders, renewals and usage.
• To reply to enquiries and support requests.
• To detect and prevent fraud, spam, abuse and security incidents.
• To comply with law, telecom regulations and lawful requests from authorities.

4. Consent and legitimate uses

We process personal data with your consent, which you give when you create an account, submit a form or use a feature, and for legitimate uses permitted by the DPDP Act, such as providing a service you asked for, meeting legal obligations and responding to emergencies. You may withdraw consent at any time; this does not affect processing already done, and some services cannot work without the data they need.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run VoiChat, under contracts that limit their use of it:

• Cloud hosting and infrastructure providers that store and run the service.
• Our telecom carrier partner, to connect calls and to rent phone numbers — including the business verification details telecom rules require.
• Speech recognition, speech synthesis, voice cloning and AI language model providers, to understand callers and generate the assistant’s replies and voices.
• Our email delivery provider, to send verification codes and replies.

We may also disclose data when required by law, court order or a lawful request from a government authority, to protect the rights and safety of our users or the public, or as part of a merger or transfer of our business with equivalent protection.

6. Where data is processed

Our servers and service providers may store and process data in India or in other countries. We transfer data outside India only where permitted by Indian law and take reasonable steps to keep it protected wherever it is processed.

7. How long we keep data

• Account and workspace data: for as long as your account is active.
• Verification certificates: deleted once your verification is approved or returned.
• One-time codes: expire after 10 minutes and are removed afterwards.
• Enquiries: for as long as needed to respond and follow up.
• After your account is closed, we delete or anonymise your data within a reasonable period, except records we must keep by law (for example tax, accounting or telecom records).

8. How we protect data

• All traffic to VoiChat is encrypted in transit with HTTPS.
• Passwords are stored only as secure hashes; sign-in uses one-time email codes.
• Verification certificates and provider credentials are encrypted at rest, and each business works in its own isolated workspace.
• Access to personal data is limited to authorised staff who need it.
• We keep backups and monitor the service for misuse.

9. Cookies

We use only essential cookies and similar technology needed to keep you signed in and protect your account (a secure session cookie and security tokens). We do not use advertising cookies or third-party analytics trackers. You can block cookies in your browser, but you will not be able to sign in.

10. Your rights

Under the DPDP Act and other applicable law, you can ask us to:

• give you a summary of the personal data we process about you and how;
• correct, complete or update inaccurate or incomplete data;
• erase data we no longer need or that you withdraw consent for;
• nominate another person to exercise your rights in case of death or incapacity; and
• resolve a grievance about how we handle your data.

To use these rights, send a request through our contact page and choose “Privacy or grievance”. We may need to verify your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. If you use VoiChat for your business

When you upload contacts, place calls, record calls or create a voice clone, you are responsible for having a lawful basis and giving any notices and obtaining any consents required — including telling callers, where required, that they are speaking with an AI assistant and that the call may be recorded, and obtaining written consent from anyone whose voice you clone.

12. Children

VoiChat is a business service and is not meant for anyone under 18. We do not knowingly create accounts for children. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as our services or the law change. We will change the “Last updated” date above and, for significant changes, notify account holders by email or in the workspace.

14. Contact and grievance officer

For any privacy question, request or complaint, contact our Grievance Officer at VoiChat through the contact page (choose “Privacy or grievance”). We will acknowledge your request promptly and resolve it within the time required by applicable law.