Legal
Privacy Policy
Last updated: 15 September 2026
Zevantra Labs (“Zevantra”, “we”, “us”) is a partnership firm operating from Workafella Cyber Crown, HITEC City, Hyderabad, Telangana, India. This policy explains what personal data we collect through our website, our Round-the-Clock Front Desk AI Assistant, and WhatsApp, why we collect it, who we share it with, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”). It applies whether you're browsing this site, calling a business that uses our AI assistant, or working with us as a client.
1. What data we collect
When you fill in a form on this site (a demo request or waitlist submission): your name, work email, phone number, business name, business type, and anything you write in the message field.
When you call a business using our AI assistant: the call audio, an automatically generated transcript, the caller's phone number, and whatever the caller tells the assistant during the call (for example, symptoms mentioned when booking a clinic appointment, preferred appointment times, or questions asked). Calls are recorded and transcribed so the business can review them and so the assistant can act on what was said.
When you message a business on WhatsApp as part of a booking confirmation or a follow-up: your WhatsApp number and the content of that conversation, sent only after you've agreed on the call to be contacted that way.
When you sign in to manage your business's account (the client dashboard or team console): your email address, a one-time sign-in code sent to that email, and your activity inside the dashboard (for example, the agent configuration you save, or the date ranges you view in call analytics).
We don't use advertising or analytics cookies, and we don't sell personal data to anyone. See Cookies below for the small amount of technical data the site does set.
2. Why we collect it
We process personal data to: respond to demo and waitlist requests; operate the AI assistant a business has deployed (answering calls, booking appointments, sending WhatsApp confirmations and follow-ups the caller has agreed to); let a business review its own call history and analytics; run and secure the dashboard and team console; and meet our own legal, accounting and security obligations. We don't use call content or transcripts to build advertising profiles, and we don't share caller data between unrelated businesses.
3. Our basis for processing
Under the DPDP Act, we process personal data on the basis of consent — given when you submit a form on this site, when a caller proceeds with a call to a business using our assistant (with recording disclosed at the start of the call), or when a caller agrees to be messaged on WhatsApp — and, for our own clients, on the basis of the contract we have with the business that has engaged us. You can withdraw consent at any time; see Your rights below.
4. Who we share data with
We don't sell personal data. We share it only with the service providers that make the assistant work, each acting on our instructions:
- Cloudflare — hosts the website and application.
- Supabase — hosts our database and handles sign-in.
- Telephony carriers and our voice-AI processing partners — carry and process call audio in real time so the assistant can understand and respond to a caller. Zevantra is built on a provider-independent voice layer, so the specific engine handling a call can change; whichever engine is active is bound by the same confidentiality and data-handling obligations.
- WhatsApp Business Platform (Meta) — delivers WhatsApp confirmations and follow-up messages a caller has agreed to receive.
- Zoho Mail — sends sign-in codes and account email from our own domain.
We may also disclose personal data if required by law, to respond to a lawful request from a court or government authority, or to protect the rights, property or safety of Zevantra, our clients, or the public.
5. How long we keep it
We keep personal data only as long as it serves the purpose it was collected for. Demo and waitlist submissions are kept while we're following up and for a reasonable period after, so we can avoid contacting you again unnecessarily. Call recordings, transcripts and WhatsApp messages are kept for as long as the business you contacted keeps using our service for that purpose, or until deletion is requested. We keep basic system and security logs for up to a year, as the DPDP Rules allow, to investigate misuse or a security incident. When data is no longer needed, we delete it or make it anonymous.
6. Your rights
You can ask us to:
- Give you access to a summary of the personal data we hold about you.
- Correct or update personal data that's inaccurate or out of date.
- Erase your personal data once it's no longer needed for the purpose it was collected for, or once you withdraw consent.
- Withdraw consent for anything we process on that basis — for example, opting out of further WhatsApp messages.
- Nominate another individual to exercise these rights on your behalf if you become unable to (for example, due to incapacity), as the DPDP Act allows.
To exercise any of these, write to ak@zevantralabs.com with enough detail for us to find your data (for example, the phone number you called from, or the email you used on a form). We'll respond within 90 days. If you're not satisfied with how we've handled your request, you can escalate it to the Data Protection Board of India.
7. Children's data
Our service is intended for use by adults acting on behalf of a business, and for adult callers. We don't knowingly collect personal data from anyone under 18, we don't run targeted advertising, and we don't build behavioural profiles of children. If you believe a child's data has reached us, contact us using the details above and we'll delete it.
8. Security
We use reasonable technical and organisational safeguards to protect the personal data we hold — encrypted connections (TLS) between your device, our application, and our service providers; access to production data restricted to the people who need it to operate the service; and a temporary internal diagnostic endpoint is removed as soon as its job is done. No system is completely immune to compromise, and if a breach affecting your personal data occurs, we'll notify affected individuals and the Data Protection Board of India as required by law.
9. Where data is stored
Our hosting and database providers operate global infrastructure, so personal data may be processed on servers located outside India. The DPDP Act currently allows transfers to any country unless the Central Government specifically restricts it; we don't transfer personal data to any restricted destination.
10. Cookies
This site doesn't use advertising or analytics cookies. The client dashboard and team console set a strictly necessary session cookie so you stay signed in — nothing else reads or writes it, and it's cleared when you sign out.
11. Changes to this policy
We may update this policy as the service changes. We'll change the “Last updated” date above whenever we do, and for material changes we'll take reasonable steps to let active clients know.
12. Contact us
Zevantra Labs, Workafella Cyber Crown, HITEC City, Hyderabad, Telangana, India. For any privacy question, request, or complaint, email ak@zevantralabs.com.