Last updated: 1 July 2026

This document is written in plain language for transparency. It is not legal advice, and it does not replace a signed agreement where one applies. If anything here conflicts with a contract we have signed with you, that contract governs.

1. Who we are

AI Call Studio is operated by AcmaTel Communications Pvt. Ltd. ("AcmaTel", "we", "us"), an Indian company. This policy explains what personal data we process, why, who we share it with, and how you can exercise your rights. It should be read with our Terms of Service and, for data you process through the platform, our Data Processing Addendum.

2. Scope

This policy covers the AI Call Studio website, the web and mobile applications, and the calling platform. It does not cover third-party services you connect to your account (such as your CRM or messaging providers), which are governed by their own policies.

3. The personal data we process

Account data you provide when you sign up or are invited: name, work email, phone number, company, role and password (stored only as a secure hash).
Contact data you upload to run calls, such as your customers' names, phone numbers and any fields you add to a contact.
Call data generated during calls placed on your instruction: audio recordings, transcripts, call outcomes, dispositions, sentiment and lead scores.
Billing data: plan, wallet balance, usage and invoices. Card and payment details are handled by our payment processor; we do not store full card numbers.
Support data: messages, tickets and correspondence when you contact us.
Usage and device data: log events, IP address, browser and device information needed to operate, secure and improve the service.
Cookies and similar technologies, as described below.

4. How we collect it

We collect data directly from you (when you sign up, upload contacts, make calls or contact support), automatically (through logs and cookies as you use the service), and from the integrations you choose to connect.

5. Why we process it, and our legal basis

We process personal data to provide the service, place and analyse calls on your instruction, authenticate users, bill for usage, provide support, keep the platform secure, prevent abuse and fraud, and comply with law. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we rely on your consent and on legitimate uses such as performing our contract with you and meeting legal obligations. We do not sell personal data, and we do not use the content of your calls or contacts to train models for other customers.

6. When you are the controller and we are the processor

For the contact and call data you bring to the platform, you are the data controller (or Data Fiduciary under the DPDP Act) and we act as your processor (Data Processor). We process that data only on your documented instructions, under our Data Processing Addendum. You are responsible for having a lawful basis and any required consent to call the numbers you upload.

7. Cookies and analytics

We use strictly necessary cookies to keep you signed in and secure the service, and a limited set of functional and analytics cookies to understand usage and improve the product. You can control non-essential cookies through your browser settings. We do not use cookies to sell your data to advertisers.

8. Sharing and sub-processors

We share personal data only as needed to run the service:

Sub-processors for voice, telephony, cloud infrastructure, messaging and payments, under written terms consistent with this policy. A current list is available on request.
Your connected integrations, such as your CRM or WhatsApp provider, when you direct us to send data to them.
Legal and safety: where required by law, to enforce our terms, or to protect the rights and safety of users and the public.
Business transfers: if AcmaTel is involved in a merger or acquisition, subject to this policy.

9. International transfers and data residency

Personal data is stored and processed in-region on Indian infrastructure by default. Where any transfer outside India is necessary to provide the service, we apply appropriate contractual and technical safeguards, consistent with applicable law.

10. Storage and security

Sensitive fields and provider keys are encrypted at rest and data is encrypted in transit. Secrets are redacted from logs, access is role-based and least-privilege, and every tenant's data is isolated. We maintain audit logging and monitoring. No system is perfectly secure, but we work to protect your data using appropriate technical and organisational measures. See our Security page for detail.

11. Retention

We keep account data for as long as your account is active and as needed to provide the service. Call recordings and transcripts are retained for the period you configure; when that period ends they are deleted or archived. We keep certain records (such as invoices and audit logs) for longer where required for security, tax or legal compliance, after which they are deleted or anonymised.

12. Your rights

Subject to applicable law, and in particular the DPDP Act, you may:

Access a summary of the personal data we process about you.
Correct or update inaccurate or incomplete data.
Erase data that is no longer needed for the purpose it was collected.
Withdraw consent where we rely on it, without affecting prior processing.
Nominate another person to exercise your rights in the event of death or incapacity.
Grievance redressal: raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.

If you are a contact called through the platform, please direct requests to the business that called you (our customer), who controls that data. We will assist them in responding.

13. Marketing and calling preferences

We send service messages you cannot opt out of (for example, security and billing notices) and, separately, product updates you can unsubscribe from at any time. Calls placed through the platform honour DND registries and consent requirements; see our Compliance page.

14. Children

The service is intended for businesses and is not directed at children. We do not knowingly collect personal data of children, and we process the data of minors only in line with the DPDP Act where a business lawfully does so.

15. Changes to this policy

We may update this policy as the service and the law evolve. We will change the "last updated" date above and, for material changes, give reasonable notice.

16. Grievance Officer and contact

For privacy questions or to exercise your rights, contact our Grievance Officer at privacy@aicallstudio.com. We aim to acknowledge requests promptly and respond within the timelines required by applicable law.

Questions about this document? Email legal@aicallstudio.com, or call us on +91 922 222 8989.

Privacy Policy