Privacy Policy

This Privacy Policy explains how Callorax ("Callorax", "we", "us") handles personal data when you visit https://www.callorax.com, request a demo, or use the Callorax platform. It is written to align with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.

1. Our two roles

For website visitors and account holders, we are the data fiduciary: we decide why and how your data is processed. For the leads and customers our clients manage in Callorax, our client is the data fiduciary and we act as a data processor, processing that data only on their documented instructions.

2. Data we collect

• Contact details you submit: name, mobile number, email, company, role and city.
• Account data: login credentials, workspace settings, billing details and GSTIN.
• Usage data: pages visited, device and browser information, IP address and cookies.
• Communications: emails, WhatsApp messages and call recordings with our team, where you consent.

3. Why we use it

• To respond to your enquiry, schedule demos and provide the service you sign up for.
• To bill you, provide support and keep the platform secure.
• To improve our product and website, using aggregated or de-identified data where possible.
• To send product updates, which you can opt out of at any time.

We rely on your consent, the performance of our contract with you, and legitimate uses permitted under the DPDP Act.

4. Sharing

We do not sell personal data. We share it only with service providers who help us run Callorax — such as cloud hosting, telephony, WhatsApp Business API providers, payment processors and email delivery — under contracts that require them to protect it, or where the law requires.

5. Retention

We keep personal data only as long as needed for the purposes above or as required by law (for example, tax records). Client workspace data is deleted on request after the account ends, subject to legal retention duties.

6. Your rights

Under the DPDP Act you may:

• Access a summary of the personal data we process about you.
• Ask us to correct, complete, update or erase your data.
• Withdraw consent at any time, without affecting earlier lawful processing.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India.

If you are a lead of one of our clients, please contact that business first; we will help them respond.

7. Security

We use role-based access, audit logging, encryption in transit and for secrets at rest, and two-factor authentication. See our Security page for details. No system is perfectly secure; we will notify affected users and the Board of any personal data breach as the law requires.

8. Cookies

We use essential cookies to run the site and, with your consent where required, analytics cookies to understand usage. You can control cookies in your browser settings.

9. Children

Callorax is a business service and is not directed to anyone under 18. We do not knowingly process children's data.

10. Grievance officer

Questions or requests? Contact our Grievance Officer at contact@callorax.com, Your office address, Faridabad, Haryana 121003. We respond within the timelines set by applicable law.

11. Changes

We may update this policy. Material changes will be notified on this page or by email.