Draft template — not legal advice. Replace every [bracketed]placeholder with your real details and have a lawyer review before publishing. Razorpay checks these pages during live-payment activation.

Privacy Policy

Last updated: [DD Month YYYY]

This policy explains how [Company Legal Name] (“we”) collects and processes personal data when you use LeadlyIVR, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP).

1. Data we collect

Account data — name, business name, email, password (hashed).
Call data — caller/called numbers, timestamps, duration, menu path, agent, and call recordings & voicemail.
Payment data — processed by Razorpay; we store only plan, amount, and payment references (not card details).
Usage/technical data — logs needed to operate and secure the Service.

2. How we use it

To provide call routing and recording, manage your subscription and numbers, offer support, ensure security, and meet legal/regulatory obligations.

3. Call recording & consent

You control whether calls are recorded and for how long. As the business operating the line, you are responsible for informing callers and obtaining consent as required by law. We store recordings for your selected retention period (up to 90 days on standard plans) and then delete them.

4. Storage & processors

Data is hosted in India. We share data only with processors needed to run the Service — Plivo(telephony & recording storage) and Razorpay (payments) — under their respective terms.

5. Retention

Account and billing records are kept while your account is active and as required by law. Recordings are kept for your chosen retention window. You may request earlier deletion.

6. Your rights (DPDP)

You may access, correct, or request erasure of your personal data, and withdraw consent. To exercise these rights, contact our Grievance Officer below.

7. Grievance Officer

[Grievance Officer Name], [Company Legal Name] — email: [grievance@yourdomain], [Registered Address]. We respond within the timelines required by DPDP.

8. Security

We use industry-standard measures (encryption in transit, hashed credentials, access controls). No method is 100% secure, but we work to protect your data.

9. Changes

We may update this policy; material changes will be notified.