Privacy Policy

• For account, billing, and website data, Indus Labs acts as a data controller.
• For call recordings, transcripts, assistant configurations, and related customer content processed through our platform, we generally act as a data processor on our customer's instructions.
• Customers are responsible for providing notices and obtaining consents required by applicable call recording and privacy laws.

• Account and contact data: name, company, email, phone, role, and login credentials.
• Voice AI platform data: assistant prompts/configuration, knowledge files, call metadata (time, duration, status), phone numbers, call recordings/transcripts (when enabled), and conversation logs.
• Integration data: API keys, access tokens, webhook endpoints, and connection metadata for third-party integrations.
• Device and usage data: IP address, browser/device details, logs, diagnostics, and feature interaction data.
• Billing/transaction data from payment partners (we do not store full card details on our servers).
• Support communications and feedback that you send to us.

• Provide, operate, maintain, and improve the Services.
• Route calls, process audio/transcripts, and generate AI responses.
• Authenticate users, secure systems, and prevent abuse/fraud.
• Process billing, invoices, and service administration.
• Provide customer support and incident response.
• Analyze performance and reliability, including service telemetry and aggregated analytics.
• Send product updates, transactional notices, and (where lawful) marketing communications with opt-out controls.
• Comply with legal obligations and enforce our agreements.
• Use data for model or product improvement in line with applicable law, contractual commitments, and your settings.

Where the GDPR or UK GDPR applies, we rely on the following bases. Where India’s Digital Personal Data Protection Act, 2023 (DPDPA) applies, we process on the basis of your consent or for the legitimate uses that Act permits.

• Performance of a contract — providing the Services, authenticating users, billing, and support.
• Legitimate interests — securing our systems, preventing fraud and abuse, and maintaining service reliability. We balance these against your rights and you may object at any time.
• Consent — analytics cookies and any marketing communications. Consent is requested separately for each and may be withdrawn at any time without affecting the Services.
• Legal obligation — tax, accounting, and statutory record-keeping.

We do not use the details submitted through our enquiry form to send marketing. That data is used only to answer your enquiry. If we later wish to send you marketing, we will ask for your consent separately.

• Service providers/subprocessors that help us operate the Services, such as cloud hosting, telephony, speech and AI model providers, analytics, customer support, security, and payment processing.
• Affiliates and contractors under confidentiality and data protection obligations.
• Authorities and third parties when required by law, regulation, legal process, or to protect rights, safety, and security.
• Parties involved in mergers, financing, acquisitions, or asset transfers, subject to appropriate safeguards.

We do not sell personal information for monetary consideration.

Your information may be processed in countries other than where you reside. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections and equivalent legal mechanisms.

• We retain data for as long as needed to provide the Services and fulfill legal, tax, accounting, and compliance obligations.
• Call data retention may depend on customer configuration, plan, and legal requirements.
• You may request deletion of eligible personal data by contacting us.
• We may retain limited records when required for dispute resolution, fraud prevention, and legal defense.

We apply technical and organizational safeguards, including encryption in transit, encryption of sensitive secrets, role-based access controls, and operational monitoring. No method of transmission or storage is completely secure.

• Depending on your location, you may request access, correction, deletion, restriction, objection, or portability of your personal data.
• You may withdraw consent where processing is based on consent and opt out of non-essential marketing communications.
• California, EEA, UK, and other regional privacy rights are handled as required by applicable law.
• You may nominate another person to exercise your rights in the event of your death or incapacity, as provided under the DPDPA.

To make a request, contact hello@induslabs.io. We respond within the periods required by applicable law and do not charge for a first request.

If you are not satisfied. Please raise it with our Grievance Officer first (details below). You also have the right to complain to a regulator: in India, the Data Protection Board of India; in the EEA or UK, your local supervisory authority. Complaining to a regulator does not require you to contact us first.

We ask for your permission before using any non-essential cookie or similar technology. Analytics stays switched off until you allow it, and nothing in the analytics category runs if you decline. You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page — withdrawing is exactly as easy as consenting, and we delete the analytics identifiers from your device when you do.

What we store, and why:

The first two are stored in your browser’s local storage rather than as cookies, but we list them here because they are the same kind of technology and you should know about them.

Analytics provider. We use Google Analytics 4 (property G-SJYH8LX615), provided by Google. We run it with Google Consent Mode, so before you consent Google receives only a cookieless signal and sets no identifiers. We do not use Google Analytics for advertising, and advertising storage remains disabled whatever you choose. See Google’s Privacy Policy.

Embedded maps. Our contact pages can display a Google Maps view of our office. It does not load until you click to load it, because doing so sends your IP address to Google. If you never click, no request is made.

You can also block or delete cookies in your browser settings, though some features may not work properly if you disable strictly necessary storage.

Our Services are intended for businesses and are not directed at children. Under India’s DPDPA a child is anyone under 18, and we do not knowingly collect personal data from children or process it without verifiable consent from a parent or lawful guardian. We do not carry out behavioural monitoring or targeted advertising directed at children.

If you believe a child has provided us personal data, contact our Grievance Officer below and we will delete it.

Under India’s DPDPA and the Information Technology Act, 2000, we publish a contact for privacy questions and complaints. You may write to them about anything in this policy, to exercise your rights, or to raise a grievance.

• Grievance Officer: Manish Dangi
• Email: hello@induslabs.io
• Address: Indus AI Pvt. Ltd., 7th Floor, Logix Cyber Park, Office No. B-715-716 (B Tower), Sector 62, Noida, Uttar Pradesh 201301, India

We acknowledge grievances promptly and aim to resolve them within the timelines set by applicable law. If you remain dissatisfied, you may escalate to the Data Protection Board of India or, in the EEA or UK, to your local supervisory authority.

We may update this policy from time to time. We will post the revised version and update the "Last updated" date. If a change materially affects how we use personal data, we will seek fresh consent where the law requires it rather than relying on your earlier choice.

Privacy contact: hello@induslabs.io