Privacy policy

Operational draft — to be reviewed by counsel before launch. Last updated: 2026.

Who we are

Ekav (the “Company”) provides an AI voice-agent service used by Indian small businesses (the “Customer”). The Customer is the Data Fiduciary for their callers; Ekav is a Data Processor acting on their documented instructions.

What we collect

Account data (business name, owner name, contact email and phone), billing data, configuration data, and call data (recordings, transcripts, captured booking and lead details) — only as needed to provide the service.

Where it lives

Account and call data live in our Customer’s tenant slice in our managed database. Recordings live in object storage with short-TTL signed URLs; every playback is audited. Where possible we choose India-region storage.

How long we keep it

Recordings and transcripts retain per your tenant’s configured policy. Audit logs are retained for legal-hold reasons (DPDP and contractual record-keeping).

Sub-processors

We use the following sub-processors to deliver the service: Sarvam AI (speech), Google (Gemini LLM & Calendar), Anthropic (Claude LLM fallback), AiSensy (WhatsApp Business API), Exotel (telephony), Google Cloud Platform (compute / object storage). All are bound by their respective DPA terms.

Data Principal rights

Under the DPDP Act, callers and account holders have the right to access, correct, erase, and complain. Account holders manage their data via the Ekav dashboard. Callers may exercise their rights by contacting the Customer (who controls their data); Ekav supports the Customer in honouring those requests.

Grievance officer

Grievance Officer: placeholder name & email — to be set before launch. Response within statutory timelines.

Changes

Material changes will be notified through the dashboard and an updated timestamp on this page.