Privacy Policy

This Privacy Policy explains how Navamitra ("we") collects, uses and protects information when you use Vani (the "Service"). We comply with the Information Technology Act 2000, the SPDI Rules 2011, and the Digital Personal Data Protection Act 2023.

1. Information we collect

• From the business owner (you): name, business name, WhatsApp number, email, business address, GSTIN (optional), business hours, services / menu / inventory you load into Vani.
• From your customers when they call: phone number (CLI), call audio, AI-generated transcript, booking / order details they provide.
• Payment data: processed entirely by Razorpay. We see only the transaction ID and amount — never card or UPI credentials.
• Technical: IP address, device, dashboard usage logs.

2. How we use it

• To run the Service — answer calls, generate transcripts, send WhatsApp confirmations, bill you.
• To improve product quality — we may review anonymised transcripts to fix bugs and improve language accuracy.
• To contact you about your account, billing, outages, and important product updates.
• To comply with Indian law, telecom regulations, and lawful requests from authorities.

We do not sell your data. We do not train third-party AI models on your call content.

3. Who we share with

Service providers, strictly to operate Vani:

• Google (Gemini Live): for AI voice processing. Per Google's policy, API calls are not used to train models.
• Vobiz: Indian telephony partner — carries the calls.
• Meta (WhatsApp Cloud API): delivers confirmation messages.
• Supabase: Mumbai region — stores your dashboard data.
• Razorpay: processes payments and issues GST invoices.
• Vercel & Railway: host the application.

4. Call recordings

Calls are recorded and transcribed so you can review them in your dashboard. Where Indian law requires you to notify callers that a call is being recorded or answered by AI, that obligation is yours as the merchant. Vani may, at your option, announce "This call is answered by an AI assistant" at the start of each call.

5. Data retention

Call recordings: 90 days. Transcripts: lifetime of the account. Billing records: 8 years (as required by GST law). On account closure, you may request deletion of all data within 30 days, except records we are legally required to retain.

6. Security

Data in transit is encrypted (TLS 1.2+). Data at rest in Supabase is encrypted. Access to your dashboard is via WhatsApp magic link or admin email magic link — no shared passwords. Row-level security ensures one client cannot see another's data.

7. Your rights

Under Indian law, you have the right to access, correct, or request deletion of your personal data. Email support@navamitra.in with the subject "Data request" and we will respond within 30 days.

8. Children

Vani is a B2B product for business owners. We do not knowingly collect data from anyone under 18.

9. Changes

We may update this policy from time to time. Material changes will be notified by email or WhatsApp. Continued use of the Service constitutes acceptance.

10. Grievance officer

Navamitra, Bangalore. Email support@navamitra.in with the subject line "Grievance — <your issue>". We respond within 30 days as required by the IT Rules.