Privacy policy

What we collect

• About you and your team: name, mobile number, email address, and the role each person has on the account.
• About your business: its name, address, services, prices, opening hours, staff, and anything you teach the AI employee about how you work.
• Sign-in and security: one-time passcodes sent to your phone, an encrypted (hashed) password if you set one, a session cookie, and the IP address and device information of sign-ins and sensitive actions.
• About your customers, on your behalf: phone numbers, names, what they said on a call or wrote in a message, call recordings and transcripts where recording is on, and the orders, bookings, enquiries and follow-ups created from them.
• Payments: the amount, the date, and the payment reference from our payment gateway. We never receive or store card numbers, UPI PINs or bank passwords.
• Usage: every charge against your prepaid balance, with the call or message that caused it.

How we use it

We do not sell personal information, do not use it for advertising, and do not use your or your customers’ conversations to train AI models.

• To run the service: answering and placing calls, sending and replying to messages, and keeping your dashboard up to date.
• To bill you: measuring usage and drawing it from your prepaid balance.
• To keep accounts safe: verifying sign-ins, detecting misuse, and investigating problems.
• To support you: answering your questions and fixing what went wrong.
• To tell you what you need to know: passcodes, low-balance warnings, and changes to the service or to these policies.

Who we share it with

Answering a phone call with an AI needs several specialist providers. Each receives only what its part of the job requires:

• Plivo — carries phone calls and supplies phone numbers.
• Sarvam AI — turns a caller’s speech into text, and the reply back into a voice.
• Google (Gemini) — the language model that works out the answer.
• Google (Drive) — stores call recordings, in a Drive account AutoCallDesk controls.
• Meta (WhatsApp Business Platform) — delivers WhatsApp messages.
• Resend — delivers email.
• Razorpay — processes payments into your prepaid balance.
• Our hosting provider — runs the servers the service and its database live on.
• Services you connect yourself, such as an online store or a calendar, receive and send what the connection is for.

Where it is processed

Some of these providers process data outside India. Where they do, it is only for the purpose above and under their own security and confidentiality obligations. We will not transfer personal data to any country the Government of India has restricted.

Call recording

Calls answered or made by the AI assistant are recorded. Every caller is told at the start of the call that it is recorded and that they are speaking to an AI assistant.

Recordings are stored in Google Drive, in an account AutoCallDesk controls, filed separately for each business. Only people signed in to that business can listen to them, from the call’s page in the dashboard. Nobody is given a link to the file.

Each recording is deleted automatically 90 days after the call.

Cookies

This website sets no cookies and loads no advertising or tracking scripts. The dashboard uses one cookie, which keeps you signed in; it is necessary for the service to work and is not used for anything else.

How long we keep it

• Account and business information: while the account is open.
• Call recordings: 90 days from the call, then deleted automatically.
• Your customers’ records and transcripts: while the account is open, unless your business deletes them or asks us to.
• After an account is closed: personal information is deleted or anonymised within 90 days.
• Financial records — payments and the charges against your balance — are kept as the law requires, with personal details removed where the law allows. Security and audit logs are kept for up to seven years.

How we protect it

All traffic is encrypted in transit. Passwords are stored only as a one-way hash. Each business’s information is separated at the database level, so one business cannot read another’s. Access to customer information is limited to what the service needs, and sensitive actions are logged.

If a breach affects your information, we will tell you and the authorities as the Digital Personal Data Protection Act, 2023 requires.

Your rights

You can ask to see the personal information we hold about you, to correct or complete it, or to have it erased, and you can withdraw consent you have given. Write to info@capturo.in from the email or number on the account.

If you are a customer of a business that uses AutoCallDesk, contact that business first — it controls your information. If it does not respond, write to us and we will help.

Children

AutoCallDesk is a service for businesses. Accounts are for people aged 18 or over, and we do not knowingly collect information from children except as a business’s caller.

Grievances

Complaints about how personal information is handled go to our Grievance Officer at info@capturo.in, with "Grievance" in the subject. We acknowledge within 48 hours and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Changes to this policy

We will post any change here with a new effective date, and tell account holders by email or in the dashboard before a significant change takes effect.