Privacy Policy
How Parwal AI collects, handles, safeguards, and isolates your telephonic audio streams, transcripts, WhatsApp messages, and customer data.
Core Enterprise Commitment: Zero Public Model Training
Parwal AI strictly ensures that customer telephone audio, speech streams, transcripts, WhatsApp dialogues, and uploaded knowledge bases are never used to train public foundation AI models.
Overview & Roles (Controller vs. Processor)
This Privacy Policy applies to Parwal AI, an India-based technology platform initiative operating from DDU Nagar, Raipur 492001, Chhattisgarh, India.
For customer-configured AI agents, telephony sessions, caller audio, transcripts, and WhatsApp chats, Customer is the Data Controller (Data Fiduciary) and Parwal AI acts as a Data Processor executing strictly upon Customer instructions.
We act as a Data Controller solely for direct account management, administrative login credentials (via Clerk), billing contacts, and platform security telemetry.
Information We Collect
AI Processing & Model Safety Commitments
Customer voice data, caller transcripts, and company prompts are strictly excluded from public foundation AI training corpora. In-flight language model requests execute via private enterprise API endpoints without public training retention; upstream operational logs are purged after up to 30 days.
Audio Streams, WhatsApp & Transcripts
Live RTP audio streams are processed in memory buffers for immediate speech recognition and text-to-speech rendering. Customer administrators can enable or disable call recording and transcription at any time from workspace settings. Customers are responsible for informing callers of AI processing and call recording.
Legal Bases for Processing
We process personal data under Contractual Necessity to operate conversational services, Legitimate Interests for authentication security, Legal Obligation for Indian statutory tax and invoicing compliance, and Consent for optional telemetry.
Authorized Sub-processors Inventory
Our verified sub-processors include:
- OpenAI: LLM reasoning (gpt-4o-mini);
- Deepgram: Speech-to-Text streaming recognition;
- Sarvam AI: Indian language STT/TTS voice synthesis;
- Vobiz: Telephony SIP trunks and call interconnects;
- Meta Platforms: WhatsApp Cloud API messaging;
- LiveKit: Real-time WebRTC audio media transport;
- Convex Inc.: Cloud transactional database & state sync;
- Clerk Inc.: User authentication & session identity;
- Cashfree Payments India: Payment processing gateway;
- Vercel Inc.: Application edge hosting & CDN.
Data Retention & Auto-Purge Controls
Call recordings and transcripts are retained for 90 days by default (or configured by Customer workspace policy). Invoices are retained for 7-8 years per Indian statutory tax requirements. Upstream API providers purge operational logs after up to 30 days.
Technical Security & Safeguards
All data in transit is protected via TLS 1.3 and SRTP/WebRTC encryption. Data at rest is encrypted with AES-256 bit keys, bolstered by strict logical multi-tenant database partitions. Underlying infrastructure partners maintain SOC 2 Type II / ISO 27001 certifications.
Privacy Rights (DPDP Act 2023 & GDPR)
Users possess rights to access, rectify, port, and erase their personal data, as well as grievance redressal rights. To submit a data subject request, contact privacy@parwal.ai.
Grievance Officer & Contact
Parwal AI — Privacy & Grievance Redressal Division
Operating Address: DDU Nagar, Raipur 492001, Chhattisgarh, India
Grievance Officer: dpo@parwal.ai
Privacy Desk: privacy@parwal.ai
Phone: +91 8149351697