Privacy policy.

Who we are

Oye Hello is operated by TODO — registered legal entity name, TODO — registered office address. For anything in this policy, including any request about your data, use the contact form and mark it a privacy request.

Two different relationships are covered here, and it matters which one you are in. When you sign up and use the console, we are the data fiduciary for your account data. When your own agent takes calls from your customers, you are the fiduciary for those callers' data and we act as your data processor, handling it on your instructions.

What we collect

When you create an account

• Your email address and authentication credentials, handled by our identity provider.
• The business details you enter at sign-up: your name, company name, work phone, website, company size, industry, expected monthly call volume and intended use case.

When you try a showcase agent

• Your name and mobile number, which we verify by SMS one-time passcode before starting a demo call or chat.
• A record of which demo agents that number has already used, so we can apply the one voice call and one chat per agent limit.

When an agent takes a call

• The call transcript — everything said by the caller and the agent — together with call metadata such as time, duration and which agent handled it.
• Per-stage response timings for each turn, which we use to diagnose latency and quality.
• Whatever the caller chooses to tell the agent during the conversation. If your callers may share sensitive information, please account for that in your own notice to them.

What we do not do

• We do not sell personal data, and we do not share it for advertising.
• We do not use your call transcripts or uploaded business documents to train general-purpose AI models.
• We do not run advertising trackers or third-party analytics on our marketing pages.

Why we collect it

• To provide the service — building your agent from the documents you upload, connecting calls, and showing you your call history.
• To keep it working — diagnosing failures and latency using the per-turn timings and transcripts.
• To prevent abuse — SMS verification and per-number demo limits stop our free demo agents being used as a free calling service.
• To communicate with you — service notices and replies to your enquiries.

Who else processes it

We use a small number of infrastructure and model providers to deliver the service. They process data on our instructions only:

• Cloud hosting and database — for running the application and storing your account, agent profiles and call history.
• Real-time media and telephony — for carrying call audio and connecting phone calls over SIP.
• Speech and language model providers — for speech-to-text, text-to-speech and the language model behind each agent. Which providers apply depends on how your agent is configured, and if you supply your own model API keys, those calls run on your account with that provider under their terms.
• SMS provider — for delivering the one-time passcode used to gate demo calls.
• Bot protection — a challenge on the sign-up form to block automated abuse.

Some of these providers operate outside India, so your data may be processed abroad. Ask us through the contact form for the current list of providers and the safeguards that apply.

How long we keep it

Account data

For as long as your account is open, and then as required to meet legal obligations.

Agent profiles

Until you delete the agent or close your account.

Call transcripts

Retained in your call history so you can review conversations, until you delete them or close your account.

Demo verification

The demo session expires seven days after verification. The record of which demo agents a number has used is kept so the per-number limit survives that expiry.

How we protect it

Call media is encrypted in transit and data is encrypted at rest. Each business is isolated from every other, and every API request is authenticated. Our security page describes this in more detail.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to give you a summary of the personal data we hold about you, correct or complete anything inaccurate, erase data we no longer need, and nominate someone to exercise these rights if you cannot. You may withdraw consent at any time, though that may mean we can no longer provide parts of the service.

To exercise any of these, use the contact form. If your data was collected by an agent belonging to one of our customers, we will refer you to that business, since they decide what happens to it — and we will help them respond.

If you are unhappy with how we have handled a request, you may complain to the Data Protection Board of India.

Cookies

We use cookies that are necessary for the service to work — keeping you signed in and protecting the sign-up form from automated abuse. We do not use advertising or analytics cookies on our marketing pages.

Changes

If we change this policy we will update the date at the top of this page, and tell account holders directly where the change is significant.