Privacy Policy

Last updated:

1. Who we are

Vaanicall (“Vaanicall”, “we”, “us”) is operated by [Legal entity name], registered at [Registered address] (CIN/GSTIN: [CIN/GSTIN]). We are a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) for personal data we process, and we act as a Data Processor on behalf of our tenant customers (the businesses that use Vaanicall to run calling campaigns) for the contact data those tenants upload.

2. What we collect

  • Account data: name, email, phone, organization, and authentication credentials for people who sign up and use the dashboard.
  • Tenant contact data: names, phone numbers, and campaign metadata that our tenant customers upload to run calling campaigns (we process this as a Data Processor under the tenant's instructions).
  • Call data: call recordings, transcripts, dispositions, and CRM outcome notes generated during a call.
  • Billing data: wallet balance, top-up history, and invoices. Payment card details are handled by Razorpay and are not stored on Vaanicall's servers.
  • Usage & log data: product analytics, audit logs, and technical logs (IP address, device/browser type) needed for security and reliability.

3. Why we process it (purpose & legal basis)

We process personal data to: provide and operate the platform (running calling campaigns, CRM, billing); enforce India's calling-compliance rules (TRAI calling windows, DND/NCPR scrubbing, DLT registration); maintain security and audit logs; and communicate service updates. Under the DPDP Act, our legal basis is the data principal's consent (captured at signup and, for called parties, per DND/consent-capture flows configured by the tenant) or a legitimate use recognized under the Act (e.g. compliance with law, or performing a contract with the tenant).

4. Data residency & security

Vaanicall is architected database-per-tenant, with production data resident in India (AWS ap-south-1). Access to tenant data is role-based (RBAC) and every administrative action is written to an immutable audit log. We use encryption in transit (TLS) and at rest for stored data.

5. Your rights as a data principal

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you.
  • Correct or update inaccurate or incomplete personal data.
  • Request erasure of your personal data, subject to legal/regulatory retention requirements (e.g. audit logs we must retain for compliance).
  • Withdraw consent for processing that relies on consent.
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
  • Lodge a grievance with our Grievance Officer (below), and subsequently with the Data Protection Board of India.

To exercise these rights, email grievance@vaanicall.com. If your data was uploaded by a business you interacted with (a Vaanicall tenant), we may need to route your request to that business, since they control the underlying contact data.

6. Data sharing

We share data with sub-processors strictly to operate the service: voice providers (Bolna, ElevenLabs, or a self-hosted pipeline, per tenant configuration), payment processing (Razorpay), and cloud infrastructure (AWS, India region). We do not sell personal data. We disclose data when legally required (court order, regulatory request) or to protect the rights, safety, or property of Vaanicall, our users, or the public.

7. Retention

We retain account and call data for as long as your account is active, plus a limited period after closure for legal, tax, and audit-log requirements (compliance audit logs are retained per applicable regulatory minimums). You can request earlier erasure per Section 5, subject to those requirements.

8. Children's data

Vaanicall is a business-to-business product not directed at children. Tenants are responsible for ensuring lawful consent when contact data includes minors, per DPDP Act requirements for processing children's data.

9. Grievance Officer

In accordance with the DPDP Act, 2023, the Grievance Officer for Vaanicall is:

[Grievance Officer name]
Email: grievance@vaanicall.com
Address: [Registered address]

We aim to acknowledge grievances within 7 days and resolve within 30 days.

10. Changes to this policy

We'll update this page when our practices change and update the “Last updated” date above. Material changes affecting how we process your data will be communicated to account holders by email.

11. Contact

Questions about this policy: email hello@vaanicall.com. For a Data Processing Agreement (DPA) as our tenant customer, contact your account team.