Privacy Policy

Account information: When you register, we collect your name, email address, company name, and company domain.

Usage data: We automatically collect information about how you interact with the platform — pages visited, features used, API calls made, and timestamps.

Call data: When you use our voice agent or campaign features, we may process call recordings, transcripts, and metadata (caller ID, duration, outcome) on your behalf.

Knowledge base content: Documents, FAQs, and other content you upload to our RAG/knowledge-base system.

Google account data: If you sign in with Google, we receive your email address, name, and Google account ID. We do not receive your Google password.

Device and log data: IP address, browser type, operating system, referring URLs, and error logs.

We use the information we collect to:

• Provide, operate, and improve the Service;
• Authenticate your identity and secure your account;
• Process and fulfil your API requests and campaign jobs;
• Send transactional communications (account approvals, alerts, invoices);
• Monitor platform health, detect abuse, and prevent fraud;
• Comply with legal obligations;
• Conduct aggregate, anonymised analytics to improve our AI models and platform.

We do not sell your personal data to third parties.

Call recordings and transcripts are processed on your behalf as a data processor. You (the account admin) are the data controller responsible for obtaining all necessary consents from call participants as required by applicable law (e.g., TCPA in the US, TRAI regulations in India, GDPR in the EU).

Recordings are stored in encrypted cloud storage. Retention periods are configurable by account admins. We do not use your call recordings to train our AI models without your explicit consent.

We may share your information with:

• Service providers: AWS (cloud hosting, S3 storage), LiveKit (WebRTC infrastructure), Deepgram / ElevenLabs / OpenAI (AI processing), Stripe (payments). These providers process data on our behalf under data processing agreements.
• Within your organisation: Account admins can invite team members and access all account data.
• Legal requirements: When required by law, regulation, court order, or to protect the rights and safety of Osvi AI, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

We retain account data for as long as your account is active. Call logs and recordings are retained according to your account settings (default: 90 days). You may request deletion of your data at any time. Backups may retain data for up to 30 additional days after deletion.

Some data may be retained longer where required by legal obligation (e.g., billing records for tax purposes).

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, JWT-based authentication with token revocation, role-based access control, and regular security audits.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We use essential cookies and local storage to maintain your session and authentication state. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect platform functionality.

Osvi AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Sign-In solely for authentication. We do not access your Google Drive, Gmail, Contacts, or any other Google service data.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict certain processing;
• Data portability (receive a copy of your data in machine-readable format);
• Withdraw consent where processing is based on consent.

To exercise these rights, email us at privacy@osvi.ai. We will respond within 30 days.

The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal data, please contact us and we will delete it.

Your data may be processed in countries other than your own (including India, the United States, and the European Union) where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the platform at least 14 days before the changes take effect. Your continued use after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection team at: