Privacy Policy

Chitti is a voice AI call screening service. For the purposes of applicable data protection laws, Chitti is the data controller in respect of your personal data.

Contact: pradyumnkhanchandani27@gmail.com

Account data: Your name, email address, and phone number when you create an account (collected via Clerk).

Call metadata: Caller phone numbers, call timestamps, call duration, and the AI-assigned classification category (e.g. "Sales", "Delivery") for each screened call.

Call recordings and transcripts: Audio of screening conversations is processed by ElevenLabs to generate transcripts. Transcripts are stored in your account.

Call summaries: AI-generated SMS summaries derived from transcripts, sent to your registered phone number.

Routing preferences: Your configured rules for how each caller category should be handled.

Usage data: Log data, IP addresses, and browser/device information collected automatically when you use our web application.

Cookies: We use cookies set by Clerk for authentication session management. No advertising or tracking cookies are used.

• To screen, classify, and route incoming calls according to your preferences
• To generate and deliver SMS summaries of handled calls
• To display your call history and account information in your dashboard
• To send transactional messages (account verification, security alerts)
• To maintain and improve the service, including AI classification accuracy
• To comply with legal obligations and respond to lawful requests

We do not sell your personal data. We do not use your call data for advertising purposes.

We share data with the following sub-processors, each bound by data processing agreements:

Our sub-processors operate infrastructure primarily in the United States. Your data may be transferred to and processed in countries outside India. We take reasonable steps to ensure your data is handled securely in accordance with this policy.

Account data: Retained for the duration of your account. Deleted within 30 days of account closure.

Call records and transcripts: Retained for the duration of your account. You may delete individual call records from your dashboard at any time.

Authentication logs: Retained for up to 90 days for security purposes.

Legal holds: We may retain data longer if required by applicable law or ongoing legal proceedings.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) for all data transmissions
• Encryption at rest for stored data via Supabase
• Row-level security (RLS) ensuring each user can only access their own data
• Authentication through Clerk with support for multi-factor authentication
• API authentication using signed webhooks for all ElevenLabs integrations

No method of transmission or storage is 100% secure. We will notify affected users within 72 hours of becoming aware of a personal data breach where required by law.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email pradyumnkhanchandani27@gmail.com. We will respond within 30 days. Deleting your account via the dashboard immediately removes all your data from our active systems.

For users in India, this section supplements the above in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).

Consent: We process your personal data based on your consent, given at the time of account creation. You may withdraw consent at any time by deleting your account.

Data Principal rights: As a Data Principal under the DPDP Act, you have the right to access information about your personal data, correct inaccurate data, erase your data, and raise a grievance with us.

Grievance Officer: To raise a grievance, contact us at pradyumnkhanchandani27@gmail.com. We will acknowledge your grievance within 48 hours and resolve it within 30 days.

Children: The service is not directed at children under 18. We do not knowingly collect personal data from minors.

Chitti is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email (to your registered address) or by displaying a prominent notice on the service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of Chitti after changes take effect constitutes acceptance of the updated policy.

This policy is governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of the courts in India.

For any privacy questions, data requests, or grievances: pradyumnkhanchandani27@gmail.com