Privacy & Voice Data Policy
Effective Date: October 20, 2026 • Operated by BitMicron Tech Labs (“Company”, “we”, “our”), located in Delhi/NCR, Ghaziabad (India)
Your phone calls and conversations are personal. At Guftagu, we believe in radical transparency: we do NOT sell your personal information or audio recordings to advertisers or third-party data brokers. All voice processing is used exclusively to facilitate your real-time conversation with your companion.
1. Information We Collect
We collect only the minimum information necessary to deliver voice companion calls:
Your mobile phone number (used solely for 4-digit OTP login, wallet management, and account security).
Your chosen caller name/nickname and gender preference (used strictly by the AI to conjugate natural Hindi grammatical forms).
Temporary speech audio captured while you speak during an active call, converted to text for the companion to formulate replies.
Timestamps, talk time seconds, and ring durations to ensure accurate wallet billing and detect dropped calls.
To maintain service quality, platform safety, and model accuracy, text transcripts of calls may be temporarily retained and reviewed by authorized administrators. Transcripts are encrypted at rest, protected by strict administrative access control, and automatically deleted after 30 days.
2. How Microphone Audio & Voice is Handled
When you grant microphone permission on Guftagu:
- Active Turn Only: Your microphone is accessed only while a call is active and in listening mode. It is paused during companion audio speech.
- Fast-Path Speech-to-Text: Audio is converted to text using device-level Web Speech API or secure neural speech recognition. Raw audio streams are processed in temporary server memory and are not sold, broadcast, or used for commercial marketing.
- Temporary Transcript Retention & Compliance: To maintain service quality, platform safety, and model accuracy, text transcripts of calls may be temporarily retained and reviewed by authorized administrators. In strict accordance with the Digital Personal Data Protection Act 2023 (DPDPA), transcripts are governed by administrative role-based access control, encrypted at rest, and automatically purged after thirty (30) days pursuant to our data minimization schedule.
- No Eavesdropping: When you hang up the call, all microphone tracks are explicitly severed and terminated by your browser.
3. Financial & Payment Information
All monetary transactions are processed through certified, PCI-DSS compliant third-party payment gateways (such as PayU, UPI, and RBI-licensed payment aggregators).
BitMicron Tech Labs does NOT store or process your full credit card numbers, CVVs, debit card PINs, or net banking passwords on our servers. All sensitive financial authorizations are handled securely within the payment aggregator’s encrypted iframe/modal.
4. Cookies & Session Tokens
We use a secure, HTTP-only cookie (guftagu_session) to maintain your login session across visits. This cookie does not track you across other websites. Local browser storage (localStorage) is used to cache your chosen audio engine profile (Turbo vs Studio) and caller name for instant startup.
5. International Users & Data Transfers
Our core server infrastructure is hosted on secure cloud servers in Singapore (Railway sin1) and India (cloud neural voice API and PostgreSQL). If you access Guftagu from outside India (such as the US, UK, Canada, or the EU), your information is securely transferred and processed in compliance with standard data protection protocols and encrypted over TLS 1.3.
6. Your Rights & Account Deletion (“Right to be Forgotten”)
Under the Digital Personal Data Protection Act 2023 (DPDPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), you retain the right to:
- Request a copy of your stored profile data.
- Correct inaccurate profile information (e.g. name or gender).
- Request complete deletion of your account, telephone number, call logs, and ratings from our databases.
7. Privacy Inquiries & Contact
For any questions, data protection concerns, or legal notices regarding this Privacy Policy, please contact our Data Protection Officer:
8. Governing Law & Legal Jurisdiction
This Privacy Policy, data handling practices, and any disputes relating to data privacy or the Guftagu platform shall be governed by the laws of India (including the Digital Personal Data Protection Act 2023 and Information Technology Act 2000). All legal claims, grievances, or proceedings shall be subject to the exclusive jurisdiction of the competent courts located in Delhi/NCR, Ghaziabad (India) only.