Privacy Policy

RokoVoice is run by Roko Solutions Pvt. Ltd., Hyderabad. This policy follows India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

• For businesses that use RokoVoice and their team members, we decide how your account data is used, so we are the Data Fiduciary.
• For the people a business calls, or who call a business, that business decides why their data is used. The business is the Data Fiduciary and we are its Data Processor: we handle that data only to run the service for the business. If a business called you, please contact that business first; we will help it answer you.

• Account details: name, work email, company name, role, and your password — stored only as a one-way hash.
• Billing details: GST number, billing address, wallet top-ups, invoices and usage charges. Card, UPI and bank details go straight to Razorpay; we don't see or store them.
• Calls and chats: phone numbers, call audio recordings, transcripts, AI summaries, the details the AI employee captures (such as name, budget or appointment time), and test text chats.
• Content you add: contact lists and leads, scripts, knowledge base files, WhatsApp message templates.
• Connected tools: access tokens for Google Calendar, Google Sheets or WhatsApp when you connect them, stored encrypted.
• Security and usage records: sign-ins, IP address, browser and device, and an activity log of changes made in each workspace.

• To run the service: place and answer calls, turn speech into text and back, write call summaries, run campaigns and follow-ups, and show call logs.
• To bill you, issue GST invoices, and keep the records tax law requires.
• To keep accounts safe, prevent fraud and misuse, and investigate complaints from callers, carriers or regulators.
• To give support and send important notices about your account or the service.
• To meet legal duties, including requests from telecom regulators and law enforcement made under law.

We do not sell personal data. We don't use a business's callers or contacts for our own marketing, and we don't use call recordings or transcripts to train AI models of our own.

We share personal data only with the services needed to run RokoVoice, and only what each one needs:

• Telecom carriers (Vobiz, VoiceLink, Exotel) — to connect calls and phone numbers.
• AI providers for speech recognition, language and voice (for example OpenAI, Google Gemini, Sarvam AI, ElevenLabs, Cartesia, Deepgram), depending on the voice quality chosen — to understand callers and reply.
• Razorpay — to take payments.
• Cloudflare — to store call recordings and files.
• Google and Meta (WhatsApp) — only when a business connects them, to add appointments and rows or send messages.
• Our hosting provider — to run our servers and database.
• Government authorities — when the law requires it.

Some of these providers may process data outside India. We use them under their business terms and only for the purposes above.

Calls can be recorded and transcribed so businesses can review them. Each business can switch on a recording notice that its AI employees speak at the start of every call, and AI employees say they are an AI assistant when asked. Businesses must tell callers about recording as the law requires — see our Acceptable Use Policy.

We use one essential cookie to keep you signed in. It is HTTP-only and can't be read by other websites. Your browser also remembers your light or dark theme. We don't use advertising or tracking cookies.

• All traffic uses HTTPS.
• Passwords are stored as salted one-way hashes; provider keys and connected-tool tokens are encrypted (AES-256-GCM).
• Each workspace sees only its own data, and team roles limit what each member can do.
• Sign-ins are rate-limited, sessions can be revoked, and changes are kept in an activity log.

• Account, workspace, call and contact data are kept while the workspace is open.
• When a workspace is closed, we delete its personal data within 90 days, except what we must keep by law.
• Invoices and payment records are kept as long as tax law requires (for GST, generally at least 6 years).
• A business can ask us to delete particular call records or contacts earlier by writing to rokosolutions26@gmail.com.

Under the DPDP Act you can:

• ask what personal data we hold about you and how it is used;
• ask us to correct, complete, update or erase it;
• withdraw consent you gave, for the future;
• nominate someone to act for you if you die or can't act yourself;
• complain to our Grievance Officer, and then to the Data Protection Board of India.

Write to rokosolutions26@gmail.com. We reply within 30 days. If a business called you through RokoVoice, your request is best sent to that business; if you send it to us, we will pass it on and help them answer.

RokoVoice is a service for businesses and isn't meant for anyone under 18. Businesses must not use it to call children.

When we update this policy we change the date at the top and tell workspace owners in the app or by email before important changes take effect.

Grievance Officer: Suresh N, Roko Solutions Pvt. Ltd., Hyderabad. Email: rokosolutions26@gmail.com. We acknowledge complaints within 48 hours and resolve them within 30 days.