Privacy Policy

1. Who we are

Air Calling ("we", "us", "our") is operated by Arham Fintech Private Limited. This policy covers the Air Calling website (arham-avaz.web.app), the Air Calling Android app (com.aircalling.app) and the Air Calling API (together, the "Service").

Contact: support@arhamfintech.ai.

Two groups of people are covered:

• Our customers: businesses and their team members who create an account and use the Service.
• Call recipients: people whose phone numbers our customers load into the Service and who receive an AI call from a customer. For these people, the business that placed the call decides why and how their data is used, and we process it on that business's behalf. See section 5.

2. Information we collect

Information you give us

Content you load into the Service

• Contact lists: names, phone numbers, preferred language, whether the person has consented to calls, a do-not-disturb flag, and any custom fields you add (for example a plan or an invoice due date).
• Agents, scripts and knowledge: the text you write for your AI agents, including product information and FAQs.
• Settings: calling hours, do-not-disturb numbers, phone numbers you list, API keys (stored only as hashes) and webhook addresses.

Call data created by the Service

• Call status, start time and duration, the outcome, an AI-written summary and a transcript of the conversation.
• Calls may be recorded by our voice provider. We store a link to the recording and do not keep the audio file on our own servers.
• By default, phone numbers, email addresses, PAN, Aadhaar and card numbers are masked in transcripts and summaries before they are stored. This is automatic pattern matching and it cannot catch numbers spoken as words. You can turn it off in Settings.

Collected automatically

• Technical data: IP address, device and browser type and request logs, which our servers record for security and troubleshooting.
• Approximate location: when you open Billing, your IP address is sent to a third-party lookup service (api.country.is or ipapi.co) to work out your country, so we can offer the right payment method. We do not store the result beyond your browser.
• Website only: if you visit our website while logged out, we use the Meta Pixel to measure our advertising (page views, content views and sign-ups). It is not loaded in the Android app or for logged-in users.
• Microphone (Android app, optional): the app can ask for microphone access so you can dictate text by voice. The audio is converted to text by your device's speech recognition service. We do not receive or store the audio.

3. How we use information

• To create and secure your account, and to verify your mobile number.
• To place AI calls, follow your scripts, and show you results, summaries and transcripts.
• To bill your wallet and process payments.
• To send service emails, such as team invitations.
• To check consent, do-not-disturb and calling hours before calls are placed.
• To prevent fraud and abuse, keep the Service secure, fix problems and improve it.
• To measure our advertising on our website.
• To meet legal obligations.

We do not sell personal data and we do not use call content to train our own models.

4. Who we share information with

We use trusted service providers to run the Service. They may process personal data only to provide their service to us.

We may also disclose information if the law requires it, to protect people's safety or our rights, or in connection with a sale or restructuring of our business. We will tell you if your data is transferred in a way that changes how this policy applies.

Some of these providers are located outside India, so personal data may be processed in other countries. We choose providers that protect data to a reasonable standard.

5. People who receive calls

If you received an AI call placed through Air Calling, the business that called you is responsible for deciding to call you and for having your consent. We process your phone number, the conversation and its summary on that business's behalf.

• Calls placed through our API are refused unless the business has recorded that the person consented. All calls are checked against the business's do-not-disturb list and calling hours.
• You can tell the caller during the call that you do not want to be called again. Where the AI agent records that request, the Service marks your number as do-not-call for that business and blocks further calls through the API.
• To ask what data a business holds about you, or to have it deleted, contact that business. You can also email support@arhamfintech.ai with your phone number and we will help or pass your request on.

6. How long we keep information

• Account data: for as long as your account is open.
• Call transcripts, summaries and recording links: deleted automatically after your workspace's retention period. The default is 90 days and you can change it from 1 day to 10 years in Settings. Call status, duration and billing entries are kept longer for reporting and accounting.
• Contacts and records: until you delete them. Deleting a contact also removes their records, call requests and stored call data.
• Payment and tax records: for the period the law requires.
• Security logs: for a limited period.

7. Security

We protect data with encryption in transit (HTTPS), one-way hashing of passwords and API keys, separation of each workspace's data, role-based access for team members, and signed webhooks. No system is completely secure, so please use a strong password and keep your API keys private.

8. Your rights and choices

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you may have the right to access your personal data, correct it, have it erased, withdraw your consent, nominate someone to exercise your rights, and make a complaint. Email us to use any of these rights.

• Delete your account and data: follow the steps on our account deletion page, or email support@arhamfintech.ai from your registered email address with the subject "Delete my account". We verify the request and delete your account and its data within 30 days, except records we must keep by law (such as payment records).
• Delete contacts or call data: your team can delete a contact, with all their records and stored call data, through the API, or ask us to do it.
• Redaction and retention: you control these in Settings.
• Microphone: you can switch off microphone access any time in your phone's settings.
• Advertising measurement: you can block the Meta Pixel with your browser's privacy settings or an ad blocker.

9. Children

The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top and, for significant changes, tell account holders by email or in the app.

11. Contact and grievances

For questions, requests or complaints about your personal data, write to us at support@arhamfintech.ai. We aim to reply within 7 days and to resolve complaints within 30 days.