Who is responsible
Konvrs AI Labs, [to be added before launch] ("Konvrs", "we") decides why and how personal data is used for Konvrs accounts, billing, the website and our own communications. For the contacts and call data our customers load into Konvrs, the customer decides, and we process the data for them (see the Data Processing Addendum).
Grievance contact: [to be added before launch], [to be added before launch]. See Grievance Redressal.
What we collect
From you, when you use Konvrs
- Account details: name, email address, password (stored as a one-way hash), plan.
- Billing details: payments are handled by Razorpay. We receive the payment status, amount, plan and a payment reference, not your card or UPI details.
- Usage: agents, campaigns, calls, minutes, settings, support messages.
About the people your agents call (we process this for you)
- Phone numbers and names you upload, call recordings, transcripts, summaries and outcomes, and any answers given during the call.
From people who use our public site
- Demo call form: name, mobile number, your consent, a one-time code check, and a masked or hashed form of your number and network address used to apply daily limits.
- Contact, partner and similar forms: what you type in.
- "Stop calls to my number": the number you verify, kept only as a one-way hash plus a masked copy so that nobody calls it again.
- Analytics and marketing cookies, only if you accept them.
LeadFinder
- Public business contact information from sources such as Google Maps listings and public company registers, and lists customers upload. See the LeadFinder Notice.
Why we use it
| Purpose | Basis |
|---|---|
| Provide Konvrs, run calls and campaigns you ask for | Contract and your instructions |
| Take payment, issue invoices, prevent fraud | Contract, legal obligation |
| Send service messages (receipts, security, failed payments) | Contract, legitimate use |
| Place a demo call you asked for | Your consent |
| Keep calls lawful: do-not-call list, calling hours, abuse checks | Legal obligation, legitimate use |
| Improve and secure the service | Legitimate use |
| Marketing messages and analytics | Your consent, which you can withdraw |
Calls and recordings
Every call starts with the agent saying it is an AI assistant. If recording is on for a campaign, the customer is responsible for telling the person where the law requires it. Anyone can say "stop" and their number goes on a shared do-not-call list.
How long we keep it
| Data | Kept for |
|---|---|
| Account and billing records | While your account is active, then as long as tax and accounting law requires |
| Call recordings, transcripts and contacts | As set by the customer, and deleted when the customer asks or the account ends |
| Demo call requests | 30 days |
| One-time codes | 2 days |
| Contact and partner form messages | 12 months |
| Payment event records | 90 days after processing (invoices and payments are kept longer for tax) |
| Security and admin audit logs | 24 months |
| Calling-rule events (blocked calls, opt-outs) | 12 months |
| Do-not-call entries | Until the person asks us to remove them, so that we keep honouring their request |
Your rights
You can ask us to: tell you what data we hold about you; correct it; erase it (unless we must keep it by law); withdraw a consent; and nominate someone to exercise your rights if you cannot. Write to [to be added before launch]. We will confirm we received your request promptly and respond within the time the law requires. If you are not satisfied, you can complain to the Data Protection Board of India.
To stop AI calls to your number, use Stop calls to my number. To remove business details from LeadFinder, use the LeadFinder opt-out.
Children
Konvrs is for businesses. We do not knowingly collect data from anyone under 18.
Security
We protect data with encryption in transit; encryption at rest for LeadFinder phone numbers and emails; one-way hashing for passwords and phone numbers kept for do-not-call checks; signed webhooks; role-based access; two-step sign-in for administrators; and an audit log of administrator actions. No system is perfectly secure. If a breach affects you we will tell you and the authorities as the law requires.
Where data is processed
Some processors (for example AI and telephony providers) may handle data outside India.
Changes
If we change this policy in a way that matters, we will tell you in the product or by email before it applies.