Privacy Policy

1. Personal Data We Process

We collect and process the following categories of data on behalf of our business clients:

• Lead Information: Names, phone numbers, and optional metadata uploaded in campaign lists.
• Voice Transcripts: Automatically generated text records of the calls qualified by AI agents.
• Call Telemetry: Latency metrics, call duration, and call status logs.
• User Account Details: Name, business email, billing details, and IP address of registration.

2. Purpose of Data Processing

All data is processed strictly for the following purposes:

• Initiating automated calls to qualify business leads.
• Enabling clients to review transcripts and verify the quality of AI agent conversations.
• Billing, credits management, and fraud prevention.
• Maintaining regulatory compliance records (e.g. keeping audit logs of campaign dispatches).

3. Consent and Your Rights (DPDP)

Consent Verification: Our clients are required to ensure they have obtained valid, specific, and clear consent before uploading phone numbers to our system.

Under the DPDP Act 2023, data subjects (leads) have the following rights:

• Right to Access: View the transcripts and information processed about them.
• Right to Correction & Erasure: Request the deletion of call records and transcripts. We provide clients with controls to purge leads and call logs.
• Right to Withdraw Consent: Revoke consent to receive calls (which automatically updates the DND registry simulation).

4. Data Security & Storage Safeguards

We implement industry-standard security measures to protect customer data:

• All API endpoints and browser connections use standard TLS encryption in transit.
• Stored call transcripts, database records, and credentials are kept in secure, access-controlled data stores.
• API keys and third-party credentials are stored as standard environment variables and injected into running processes.

5. Data Retention Policy

Closerr retains personal data and voice transcripts only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by Indian telecommunications law and database logging guidelines. Retention periods may be configured by the business client, subject to contractual and legal requirements. Authorized deletion requests are processed through the platform's erasure workflow and applicable backup-retention procedures.

6. Cross-Border Data Transfers

Service providers used for telephony, speech, AI, hosting, observability, and storage may process data in multiple regions. Applicable transfer safeguards, deployment-region commitments, and subprocessor terms are defined in the relevant customer and vendor agreements. Contact the Grievance Officer for the current subprocessor and transfer information.