Privacy policy

Kallix is a voice AI platform. Businesses use it to build AI agents that make and answer phone calls. The website and the platform are run by Kallix Labs Private Limited, Noida, Uttar Pradesh, India (registered office: [to be confirmed]; CIN: [to be confirmed]).

Under the DPDP Act, who is responsible for your data depends on how you deal with us:

• Kallix is the Data Fiduciary for personal data about website visitors, people who try a demo call, prospects who contact us and the people who use a Kallix account. We decide why and how this data is used.
• Our customers are the Data Fiduciary for the call data they process with the platform: the contacts they upload, the calls their agents make or answer, and the recordings, transcripts and results of those calls. For that data, Kallix is a Data Processor and handles it only on the customer's instructions.

If you got a call from an AI agent run by a business that uses Kallix, please contact that business first about your data. If you write to us instead, we'll pass your request on to them where we can identify them.

On the website

• Technical data your browser sends, such as your IP address, browser and device type, and the pages you request. Our hosting and security providers use it to deliver the site and protect it from abuse.
• Only with your consent: analytics data about how you use the site (pages viewed, clicks, scrolling and approximate location from your IP address), and marketing data that links ad clicks and visits to our CRM. The cookie policy lists each tool.
• Your cookie choices, and a record of them: a random consent ID, your choices, the time, the page, your browser type and a salted hash of your IP address. We don't store the IP address itself in this record.

When you try a demo call

• Your phone number and country, the demo agent you picked, and your agreement to the call.
• A one-time code that we send you on WhatsApp. We never store the code itself. Your browser holds a signed cookie with your number and a keyed hash (HMAC) of the code for 10 minutes, so we can check the code you type in.
• Once you've verified, a signed cookie that remembers your number for 30 minutes, so you can try another demo agent without a new code.
• Your IP address and phone number, in short-lived counters that limit how many codes and calls can be requested.
• The demo call itself. Our platform calls your number, and the call is recorded and transcribed. We also keep call details such as the time, duration and outcome.

When you fill in a form or contact us

• On the book-a-demo and contact forms: your name and work email and, if you add them, your phone number, company, website, role, use case, expected monthly call volume and message. We also receive the page you sent the form from and your IP address.
• Your agreement for us to store and process these details to respond to you, and when you gave it.
• If you've allowed marketing cookies, how you found us: the ad campaign or website that brought you to our site.
• Anything you tell us by email, phone or WhatsApp.

When you have a Kallix account

• Your name, work email, phone number, company and role, and the names and emails of team members you invite.
• Billing details such as your billing address and GSTIN, wallet top-ups, invoices and payment records. Our payment processor handles card and bank details, and we don't store full card numbers.
• Sign-in and security data such as login times, IP address, device and API key use, and how you use the dashboard.
• Support requests and feedback.

Call data on the platform

When a customer uses Kallix, the platform processes data for that customer: contact lists (names, phone numbers and variables such as an amount due), call audio, recordings, transcripts, call details (time, duration, cost, outcome, sentiment and the fields the agent captured), WhatsApp follow-up messages and knowledge base content. The customer decides what is collected and why.

We use personal data only for these purposes:

• To run the website and keep it safe: deliver pages, stop spam and abuse, and fix problems.
• To give you a demo call: verify your number, place the demo calls you ask for, and limit how many codes and calls one number or device can request.
• To check and improve our demo agents: review demo call recordings and transcripts for quality and misuse.
• To respond to you: answer enquiries, arrange demos and follow up about Kallix with people who've asked us to.
• To provide the platform: create and run accounts, make and answer calls as customers instruct, process payments, issue GST invoices and give support.
• To send service messages about billing, security and changes to the service or our policies. You can't opt out of these while you have an account.
• To measure and improve the website with analytics, and to measure our ads, only if you've agreed to those cookies.
• To meet legal duties: keep tax and accounting records, respond to lawful requests from authorities, and enforce our terms of service.

We use the phone number you give for a demo only for the demo, and we don't add it to marketing lists. We send marketing emails only to people who've asked to hear from us, and every one has a way to unsubscribe. We don't sell personal data.

Under the DPDP Act, we process your personal data on one of two grounds:

• Your consent. We ask before the demo call, when you send a form, and before any analytics or marketing cookies load. Each request says what the data is for. You can withdraw consent at any time, as easily as you gave it: use Cookie settings in the footer, the unsubscribe link in our emails, or write to privacy@kallix.in. Withdrawing doesn't affect processing that happened before. We then stop processing for that purpose within a reasonable time, and ask our processors to do the same, unless the law requires us to keep the data.
• Legitimate uses the Act allows, such as data you've voluntarily given us for a specific purpose (for example, account and billing details to run your account), and processing needed to meet a legal duty or to comply with a court order or judgment.

You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India.

If you're in the European Union or the United Kingdom, the GDPR or UK GDPR also applies to how we handle your data as a website visitor or prospect. We rely on your consent for optional cookies and the demo call, on our contract with you for your account, on our legitimate interests to keep the site secure, prevent abuse and respond to business enquiries, and on legal obligations. You also have the right to restrict or object to processing and to data portability, and you can complain to your local data protection authority.

Demo calls. Our demo agents say they're AI assistants at the start of every call. Demo calls are recorded and transcribed, so we can show you how the platform works, review call quality and prevent misuse. We keep demo recordings and transcripts for 90 days. To have yours deleted sooner, email privacy@kallix.in with your number and the rough time of the call.

Calls made with the platform. Our customers decide whether their calls are recorded and what happens to the recordings. Our acceptable use policy requires every agent to say it's an AI and never to pretend to be a real person, and requires customers to tell people about recording where the law requires it.

How AI processes calls. During a call, AI services turn speech into text, work out what the agent should say next and produce the agent's voice. After the call, they create the transcript, the outcome, a sentiment score and the fields the agent captured. Kallix doesn't use these results to make decisions about you that have legal or similarly significant effects. Any decisions a customer takes based on its calls are that customer's.

We share personal data only with the parties below, and only what each one needs. Service providers that process data for us (processors) may use it only to provide their service to us.

• Hosting and infrastructure: cloud providers that host the website, the platform, our databases and logs.
• Telephony partner: connects calls and provides Indian phone numbers. Call audio and call details pass through its network.
• AI service providers: turn speech into text, generate the agent's replies and voice, and analyse calls, on our behalf.
• WhatsApp Business, by Meta: delivers demo verification codes and, for customers who use it, WhatsApp follow-up messages.
• CRM provider: stores form submissions and our sales conversations with prospects.
• Analytics (Google Analytics, Microsoft Clarity): only if you accept analytics cookies.
• Advertising (Google Ads, LinkedIn, Meta): measures our ads and shows them to people who have visited the site, only if you accept marketing cookies, and only while we use those tools.
• Cloudflare: runs the Turnstile check that confirms a person, not an automated script, is asking for a demo code.
• Error monitoring (Sentry): receives a report when a page or form on the website breaks, so we can fix it. Reports are stored in the EU (Germany) and carry technical details only: we remove names, contact details, form answers and cookies before a report is sent, and Sentry doesn't store IP addresses (it may note the approximate city).
• Payment processors: take payments and send refunds.
• Email and support tools: let us write to you and handle support requests.
• Professional advisers such as lawyers, accountants and auditors, who must keep it confidential.
• Authorities: courts, regulators, law enforcement agencies or telecom operators, when the law requires it, or to protect people from harm or fraud.
• A buyer or successor, if Kallix is merged or sold. We'll tell you before your data becomes subject to a different privacy policy.

The cookie policy lists the analytics and marketing tools in use at any time. Customers can ask us for a current list of the processors that handle platform data.

Kallix is based in India. Some of our service providers, such as Meta, Google, Microsoft, Cloudflare and Sentry, may process data on servers outside India. We transfer personal data outside India only as the DPDP Act allows, and not to any country the Government of India has restricted.

If you're in the EU or UK, your data is transferred to India and other countries. Where the law requires it, we rely on safeguards the law recognises, such as adequacy decisions or standard contractual clauses. Write to privacy@kallix.in to find out more.

We keep personal data only as long as we need it for the purpose we collected it for. Then we delete it or make it anonymous.

We may keep some data longer where the law requires it, for example logs of how personal data was processed that the rules under the DPDP Act require us to keep, or data we need for a legal claim.

We use technical and organisational measures that fit the risk, including:

• Encryption in transit (HTTPS) when data moves between your browser and our services.
• Access to personal data limited to the people who need it for their work.
• Collecting less in the first place: the WhatsApp code is never stored, only a keyed hash of it, and consent records keep a salted hash of your IP address rather than the address itself.
• Rate limits and the Cloudflare Turnstile check to stop abuse of the demo and forms.
• Signed webhooks, so customers can check that call events really came from Kallix.

No system is completely secure. If a personal data breach affects you, we'll tell you and the Data Protection Board of India as the law requires. If it affects platform call data, we'll tell the customer without undue delay so it can meet its own duties.

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you, how we use it, and who we've shared it with.
• Correction: have inaccurate or incomplete data corrected, completed or updated.
• Erasure: have your data deleted when it's no longer needed for the purpose you gave it for, unless the law requires us to keep it.
• Withdraw consent: at any time, as easily as you gave it.
• Grievance redressal: have a complaint about how we handle your data answered by our grievance officer.
• Nominate: name someone to use these rights for you if you die or become unable to act.

How to use them. Email privacy@kallix.in from the email address you used with us, or include the phone number you used for a demo call, and tell us which right you want to use. We may need to confirm it's you before we act, for example by sending a code to that number. There's no charge.

For call data that a customer controls, we'll pass your request to that customer and help them respond.

If you're not satisfied with how we answer your grievance, you can complain to the Data Protection Board of India.

You can contact our grievance officer about any concern with how we handle personal data.

• Name: Shreyansh Tiwari, Founder & CEO
• Email: privacy@kallix.in
• Post: Grievance officer, Kallix Labs Private Limited, [to be confirmed], Noida, Uttar Pradesh, India

We'll acknowledge your grievance within 24 hours and aim to resolve it within 15 days, and always within the time the law requires. See the grievance officer page.

The website and the platform are for adults acting for businesses. They aren't meant for anyone under 18, and we don't knowingly collect personal data from children. If you think a child has given us personal data, for example by entering their number for a demo call, email privacy@kallix.in and we'll delete it.

Customers must not use Kallix to call children, except where the law allows it and a parent or lawful guardian has given verifiable consent.

We'll update this policy when our services or the law change. The date at the top of the page shows the latest version. If a change is significant, we'll tell you by email or with a notice on the website before it takes effect, and we'll ask for fresh consent where the law requires it.

• Privacy questions and requests: privacy@kallix.in
• Everything else: hello@kallix.in
• Post: Kallix Labs Private Limited, [to be confirmed], Noida, Uttar Pradesh, India