Legal

Privacy policy

Last updated 27 October 2026Applies to tryhalloo.in, Halloo Converse and Halloo Admissions

Draft for review. Items like [this] need your details, and a lawyer should review this page before it is published.

The short version
  • Businesses and universities use Halloo to run voice agents. When one of them calls you or takes your call through Halloo, that organisation decides what your data is used for, and we process it on its behalf.
  • We do not sell personal data or use it for advertising.
  • This website sets no cookies and runs no analytics.
  • To see, correct or delete your data, write to [Grievance officer email].

01Who we are

This policy is published by [Company legal name], [Registered address], India (“Halloo”, “we”, “us”). It covers this website (tryhalloo.in), Halloo Converse (converse.tryhalloo.in) and Halloo Admissions (admissions.tryhalloo.in).

02Our role and our customers’ role

Our customers are businesses and universities. When they use our products to call people or to answer calls, they decide what the call is for and what is collected. For that data the customer is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), and Halloo processes it on the customer’s instructions as a Data Processor.

If you spoke with a voice agent run by one of our customers, please contact that organisation about your data first. We will help them respond.

For this website, for the people who use our products on behalf of our customers, and for anyone who contacts us, Halloo is the Data Fiduciary.

03What we collect

  • People who use our products. Name, work email, phone number and organisation; sign-in and activity records; and the settings of the agents and campaigns you create.
  • People on calls run by our customers. Your phone number; details the customer gives us to personalise the call, such as your name or the course you enquired about; the call audio and, where the customer has turned it on, a recording; a transcript; details the agent notes during the call, such as a preferred callback time; and the outcome of the call.
  • People who contact us. What you send us by email or WhatsApp, and your contact details.
  • Visitors to this website. Our web host keeps standard request logs, such as IP address, browser and time [confirm with your web host]. The site loads fonts from Google Fonts and a script from jsDelivr, so those services receive your IP address when the page loads. This website sets no cookies and runs no analytics.

04How we use it

  • To run the service our customer set up: place and receive calls, answer from the customer’s documents, record outcomes and send them to the customer’s own systems.
  • To keep the service secure, investigate problems and check call quality.
  • To bill customers and meet our legal obligations.
  • To reply when you contact us.

We do not sell personal data and do not use call data for advertising. [State whether customer call data is used to train or improve AI models]

05Recordings and consent

Customers decide whether their calls are recorded. They are responsible for telling the people they call that they are speaking with an automated agent where the law requires it, for any notice or consent needed for recording, and for following telecom rules on commercial calls.

[Describe whether agents announce recording or AI by default]

06Who processes data for us

We use service providers to run our products. They process personal data only to provide their service to us.

What they doProvider
Hosting and storage[Provider and region]
Connecting phone callsPlivo, Twilio or Telnyx, as chosen and connected by the customer
Speech recognition, language model and speech synthesis[Providers]
Email and WhatsApp messages[Providers]

Some providers may process data outside India. [State where data is stored and processed] Any transfer outside India is subject to the DPDP Act and to any restrictions the Government of India notifies under it.

07How long we keep it

We keep customer data for as long as the customer’s account is active, and then for [number of days] after it ends, unless the customer deletes it sooner or the law requires us to keep it longer. Call recordings are kept for [period]. Deleted data is removed from backups within [period].

We keep account and billing records for as long as tax and accounting law requires.

08Security

Data is encrypted in transit and access to it is limited to the people who need it to run the service. No system is perfectly secure. If a breach affects your personal data, we will inform the Data Protection Board of India and the people affected as the DPDP Act requires, and where we process the data for a customer we will inform that customer without delay.

09Your rights

Under the DPDP Act you can ask for a summary of the personal data we process about you and who we have shared it with; ask us to correct, complete, update or erase it; withdraw consent where we rely on it; raise a grievance; and nominate someone to exercise these rights for you if you die or are unable to.

Write to [Grievance officer email]. We reply within [number of days]. If your data reached us through one of our customers, we will pass your request to them and help them answer it. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

10Children

Our products are for organisations. Some customers, such as universities, may contact applicants who are under 18. Those customers must obtain verifiable consent from a parent or guardian where the DPDP Act requires it. We do not knowingly collect children’s data for our own purposes.

11Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will also tell our customers by email before it takes effect.

12Contact and grievance officer

[Grievance officer name], Grievance Officer
[Grievance officer email]
[Company legal name], [Registered address]

For anything else, write to support@tryhalloo.in.