Privacy Policy
How Parwal AI collects, processes, isolates, and protects customer data, telephonic voice streams, WhatsApp messages, and administrative records.
Core Principle: Zero Public Model Training on Customer Data
Parwal AI processes customer telephone audio, speech streams, transcripts, WhatsApp dialogues, and uploaded knowledge bases strictly to execute customer instructions. Your private business data is never used to train or fine-tune public foundation AI models.
Overview & Roles (Controller vs. Processor)
This Privacy Policy applies to Parwal AI ("Parwal AI", "we", "us", or "our"), an India-based technology platform venture operating from DDU Nagar, Raipur 492001, Chhattisgarh, India, and outlines how we handle personal data across our website, marketing properties, real-time telephony voice services, WhatsApp integrations, and developer APIs.
When our business customers deploy AI voice agents, WhatsApp bots, or telephony pipelines to interact with their callers and end-users, the Customer is the Data Controller (or Data Fiduciary) and Parwal AI acts solely as a Data Processor. We process caller audio, WhatsApp message payloads, transcripts, and contact files strictly in accordance with Customer instructions and our Terms of Service.
Parwal AI acts as a Data Controller exclusively with respect to direct account relationship information: customer registration credentials, billing details, authenticated user login data (via Clerk), support communications, and non-sensitive aggregated platform telemetry.
Information We Collect
We collect and process information across three primary operational categories:
A. Customer Account & Billing Information
Contact name, corporate email address, business organization name, phone number, authentication identifiers (via Clerk), tax identifiers (GSTIN and PAN for Indian business customers), and payment transaction IDs processed securely via Cashfree Payments India. We never store raw credit or debit card numbers on our servers.
B. Telephony, WhatsApp & Communications Data (Customer-Controlled)
Caller phone numbers (ANI/DNIS), call timestamps, durations, SIP termination routing data, optional call recording audio files (WAV/MP3), real-time speech-to-text transcripts, and WhatsApp message payloads delivered via the Meta WhatsApp Cloud API.
C. Agent Prompts, Knowledge Bases & Configurations
System prompts, persona instructions, business FAQs, catalog documents, webhook URLs, and integration parameters provided by the Customer to customize the AI agent's behavior.
AI Processing & Model Safety Commitments
Parwal AI coordinates high-speed speech-to-text, large language model inference, and text-to-speech synthesis pipelines to render real-time conversational agents.
- No Public Model Training: Your voice streams, caller transcripts, customer databases, and uploaded knowledge files are excluded from public foundation AI model training.
- Stateless Streaming Invocations: In-flight language model reasoning calls are executed via enterprise API endpoints. Upstream model providers operate under contractual commitments that do not train on customer API data; operational/anti-abuse logs maintained by upstream providers are automatically purged after up to 30 days.
- Workspace Tenant Isolation: Embeddings, vector indices, and conversational prompts are strictly segregated within each customer's workspace and cannot be accessed across other tenant accounts.
Audio Streams, WhatsApp & Transcripts
During live phone calls and WhatsApp messaging sessions:
Volatile Memory Processing
Live RTP audio packets are converted and evaluated in volatile memory buffers for immediate speech recognition and text-to-speech rendering, minimizing unnecessary disk caching.
Customer Storage Controls
Customer administrators may enable or disable call recording and transcription at any time in agent settings. If disabled, audio recordings are not stored.
Customer Notice Obligation: The Customer is legally responsible for ensuring that call recipients are clearly informed of call recording, AI assistance, and processing, in compliance with applicable two-party wiretapping and privacy regulations.
Legal Bases for Processing (DPDP Act 2023 & GDPR)
We process personal information under the following recognized legal bases:
| Processing Activity | Data Categories | Lawful Basis |
|---|---|---|
| Voice AI & WhatsApp Operation | Telephony audio, transcripts, message payloads | Performance of Contract / Customer Instructions |
| Account Authentication & Security | User login email, session tokens, audit logs | Contractual Necessity & Legitimate Interests |
| Statutory Tax & Financial Invoicing | Invoices, GSTIN, PAN, transaction records | Legal Obligation (Income-tax Act & GST regulations) |
| Optional Website Telemetry | Anonymous visitor token, aggregate country stats | Affirmative Consent (Opt-in via Cookie Banner) |
Authorized Sub-processors Inventory
Parwal AI engages vetted, industry-leading cloud and telecommunications infrastructure partners to deliver our services. Each provider is bound by strict data processing and confidentiality agreements:
| Sub-processor | Service Role | Processing Location | Data Processed |
|---|---|---|---|
| OpenAI, LLC | Large Language Model reasoning (gpt-4o-mini) | United States | In-flight prompts & conversational queries |
| Deepgram, Inc. | Real-time Speech-to-Text (STT) transcription | United States | Streaming voice audio packets |
| Sarvam AI | Indian language STT & TTS voice synthesis (Bulbul:v3) | India | Voice audio streams & synthesis text |
| Vobiz | Telephony SIP trunk interconnects & PSTN termination | India / Global | Phone numbers (ANI/DNIS) & call metadata |
| Meta Platforms, Inc. | WhatsApp Cloud API & Embedded Signup | United States / Global | WhatsApp chat messages & media |
| LiveKit, Inc. | Real-time WebRTC audio media transport | United States / Global | In-flight encrypted WebRTC audio packets |
| Convex, Inc. | Cloud transactional database & state persistence | United States / Global | Workspace configurations, call logs, transcripts |
| Clerk, Inc. | User authentication, session tokens & MFA | United States | User email, login tokens, account identity |
| Cashfree Payments India | Payment processing gateway (UPI, Cards, Netbanking) | India | Transaction billing metadata, payment status |
| Vercel, Inc. | Edge application hosting & CDN distribution | Global Edge Network | HTTP requests, web assets, edge middleware |
| Telegram Bot API | Internal administrative operational alert dispatches | Global | Support inquiry submission notifications |
Data Retention & Auto-Purge Controls
We maintain data only as long as necessary to provide the services or fulfill statutory legal and tax obligations:
- Call Recordings & Transcripts: Retained for a default of 90 days, or configured in accordance with Customer workspace settings. Administrators can initiate manual deletion or automated purge cycles.
- Account Records & Settings: Retained for the active duration of the customer subscription. Upon confirmed account termination, personal identifiers are purged within 30 days, subject to regulatory backup cycles.
- Financial Invoices & Tax Records: Retained for 7 to 8 years in strict accordance with Indian statutory tax requirements (including the Income-tax Act, 1961 and GST rules).
- Upstream Provider Caches: Upstream LLM and telephony providers maintain operational logs for debugging and abuse detection for up to 30 days before automated deletion.
Technical Security & Safeguards
Parwal AI implements modern administrative, technical, and architectural safeguards:
Our primary cloud infrastructure partners (Convex, Clerk, Vercel, AWS) maintain independent SOC 2 Type II and ISO 27001 certifications.
Privacy Rights (DPDP Act 2023 & GDPR)
Under the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), the European General Data Protection Regulation (GDPR), and applicable privacy statutes, you possess statutory rights regarding your personal data:
Grievance Officer & Data Protection Desk
In compliance with the Digital Personal Data Protection Act, 2023 and Information Technology rules, if you have privacy queries, wish to exercise data rights, or need a Data Processing Addendum (DPA), please contact our designated Grievance Redressal Officer:
Parwal AI — Privacy & Grievance Redressal Division
Operating Address: DDU Nagar, Raipur 492001, Chhattisgarh, India
Grievance Officer Email: dpo@parwal.ai
General Privacy Queries: privacy@parwal.ai
Legal Inquiries: legal@parwal.ai
Telephone: +91 8149351697