Privacy Policy
Last updated: May 1, 2026
This policy explains how Iotcom.io collects, uses, and protects your personal data in compliance with the Digital Personal Data Protection (DPDP) Act 2023 and applicable Indian law.
1. Who We Are
Samvaad is an AI Voice Bot platform developed and operated by Iotcom.io, a technology company headquartered at 84 Tilak Vihar A, Gokulpura, Jaipur, Rajasthan, India.
For any privacy-related queries, contact us at: contact@iotcom.io or +91 93585 35763.
2. Information We Collect
We collect the following categories of information:
Account & Contact Information: Name, email address, phone number, company name when you register or book a demo.
Call Data: When you use Samvaad for voice automation, we process call recordings, transcripts, caller phone numbers, call duration, and call outcomes on behalf of our business customers.
Usage Data: IP address, browser type, pages visited, time spent on the platform, and interaction logs.
Payment Information: Billing details processed securely through our payment partners. We do not store card numbers on our servers.
Device Information: Device type, operating system, and unique device identifiers for security and analytics purposes.
3. How We Use Your Information
We use your information to:
- Provide, operate, and improve the Samvaad platform
- Process demo bookings and respond to enquiries
- Send transactional communications (call reports, billing, account alerts)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations under Indian law
- Analyse usage patterns to improve our AI models (using anonymised data only)
- Send product updates and marketing communications (with your consent, which you may withdraw at any time)
4. Call Recordings & Transcripts
Samvaad processes voice calls on behalf of our business customers. In this capacity:
- Call recordings and transcripts are stored on Indian servers
- Recordings are retained for a maximum of 90 days unless the customer requests deletion
- Recordings are accessible only to the business customer who initiated the call and authorised Iotcom.io personnel
- We do not use call content to train AI models without explicit written consent
- All call data is encrypted at rest (AES-256) and in transit (TLS 1.3)
5. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
Service Providers: We share data with trusted third-party providers (cloud infrastructure, payment processors, analytics) who are contractually bound to protect your data.
Google Gemini API: Voice data is processed through Google's Gemini Live API for AI inference. Google's data processing terms apply. Audio is not retained by Google beyond the session.
Legal Requirements: We may disclose data when required by Indian law, court order, or government authority.
Business Transfer: In the event of a merger or acquisition, data may be transferred to the successor entity with prior notice to users.
6. Data Storage & Security
All data is stored on servers located in India. We implement industry-standard security measures including:
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Role-based access controls
- Regular security audits
- Intrusion detection systems
While we take all reasonable precautions, no system is 100% secure. We will notify affected users within 72 hours of discovering a data breach as required by the DPDP Act 2023.
7. Your Rights Under DPDP Act 2023
Under the Digital Personal Data Protection Act 2023, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Grievance Redressal: Lodge a complaint with our Data Protection Officer
- Nomination: Nominate another individual to exercise your rights in case of death or incapacity
To exercise any of these rights, email us at contact@iotcom.io with the subject line "DPDP Rights Request".
8. Cookies
We use cookies and similar tracking technologies to:
- Maintain your session and preferences
- Analyse website traffic (Google Analytics)
- Improve user experience
You can control cookies through your browser settings. Disabling cookies may affect some functionality of the platform. We do not use cookies for cross-site advertising.
9. Children's Privacy
Samvaad is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at contact@iotcom.io.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website at least 30 days before the changes take effect. Continued use of Samvaad after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For any privacy concerns, data requests, or complaints:
Iotcom.io — Data Protection Officer
84 Tilak Vihar A, Gokulpura
Jaipur, Rajasthan 302015, India
Email: contact@iotcom.io
Phone: +91 93585 35763
Website: https://iotcom.io