Privacy Policy

1. Who this policy covers

It applies to visitors of ownpbx.in, people who book a demo or try our live demo, and businesses that sign up for OwnPBX ("customers") and their users.

When a customer uses OwnPBX to make or receive calls, the customer decides what calls are recorded, which AI agents are used and how long data is kept. For that call content we process data on the customer's behalf and under their instructions. The customer is responsible for having a lawful basis to do so and for informing the people they call — for example, telling callers that a call may be recorded or handled by an AI agent.

2. Information we collect

• Account and contact details: name, business name, email, phone number, and login credentials (passwords are stored only in hashed form).
• Billing details: plan, invoices, wallet balance and payment status. Card, UPI and bank details are entered directly with our payment processor; we do not see or store them.
• Call detail records: calling and called numbers, time, duration, call outcome, the number or DID used, and the cost of the call.
• Call content, only where the customer enables it: call recordings, voicemail, and conversation transcripts.
• AI agent data: audio sent to speech recognition, the resulting transcripts, and the agent's replies, plus usage figures such as audio seconds and characters processed.
• Technical data: IP addresses, device and browser type, SIP registration and connection details, and logs used to run and secure the service.
• Website measurement: which pages were viewed on our website, the site that referred you, and your approximate country, device type and browser. Our website analytics does not use cookies and does not store anything that identifies you personally.
• Website forms and live demo: details you type into our demo booking form or live demo (name, email, phone, company, message, preferred date), your conversation with the demo agent, the page you were on and your IP address.

3. How we use it

• To provide the service: routing and connecting calls, running AI agents, storing recordings, and showing reports.
• To bill accurately: rating calls, deducting usage from prepaid balances and issuing invoices.
• To keep the platform secure: detecting fraud, blocking abusive traffic and brute-force login attempts, and investigating misuse.
• To respond to demo requests and support queries, and to send service and account emails such as welcome, billing and security notices.
• To meet legal obligations, including tax records and lawful requests from authorities.

We do not sell personal data, and we do not use customers' call recordings or transcripts to advertise to anyone.

4. AI processing

OwnPBX's AI features rely on specialised third-party providers for speech recognition, language understanding and voice generation. Depending on the features and voice a customer selects, audio and text from a call or from our website demo may be processed by providers such as Sarvam AI, OpenAI, Deepgram and ElevenLabs.

These providers receive only what is needed to perform the task in real time. Their own terms govern how they handle that data.

5. Who we share data with

• Telecom carriers and network partners, to connect calls to and from the public telephone network.
• AI service providers, as described above.
• Our payment processor, to take payments and issue refunds.
• Hosting, email and infrastructure providers that run the service for us.
• Our website analytics provider, Plausible Analytics, which receives page-level measurement from our website and no personal data.
• Our advertising partner, where you reached our website from one of our ads, so that the ad can be credited. This applies to our website only, not to the customer portal or to anything inside your account.
• Authorities, where required by law, court order or a lawful request from a government agency, including under Indian telecommunications law.
• A buyer or successor, if our business is merged or acquired, under the same protections described here.

6. Where data is stored

Our servers and some of our service providers may be located outside India. Where data is transferred abroad we take reasonable steps to keep it protected as this policy describes, and as permitted under applicable Indian law.

7. How long we keep it

Account and billing records are kept while the account is active and afterwards for as long as tax and accounting law requires.

Call detail records, recordings and transcripts are kept according to the customer's settings and plan, and deleted or anonymised when they are no longer needed, unless the law requires us to keep them longer.

Demo requests and live demo conversations are kept for as long as needed to follow up with you, and deleted on request.

8. Security

We use access controls, encrypted connections for the web portal and browser softphone, hashed passwords, rate limiting and automatic blocking of repeated failed login attempts. No system is perfectly secure, and customers are responsible for keeping their passwords and SIP credentials confidential.

9. Your rights

Subject to the Digital Personal Data Protection Act, 2023 and other applicable law, you can ask us to:

• access the personal data we hold about you;
• correct or update it;
• erase it, where we are not required to keep it;
• withdraw consent you have given, for the future; and
• nominate another person to exercise these rights on your behalf.

Email ops@ownpbx.in. If your data was collected by one of our customers (for example, you received a call from a business using OwnPBX), please contact that business first; we will help them respond.

10. Cookies and similar technologies

Our website uses browser storage to keep things working — for example, remembering your live demo conversation if you close and reopen it.

For website analytics we use Plausible Analytics, which counts page views without cookies and without collecting or storing any personal data. Because it cannot identify you, there is nothing to consent to and we do not show a cookie banner.

Our public website also carries an advertising measurement pixel, so that a visit which began with one of our ads can be credited to it. It is on the marketing website only. It is not present in the customer portal, and we do not use advertising trackers anywhere inside your account or alongside your calls, recordings or transcripts.

You can block either of these with any standard browser setting, extension or ad blocker. Nothing on this website requires them, and blocking them does not affect your use of the site or the service.

11. Children

OwnPBX is a business service and is not directed to anyone under 18. We do not knowingly collect children's personal data.

12. Grievances

For any concern about how your personal data is handled, contact our Grievance Officer at ops@ownpbx.in. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

13. Changes

We may update this policy. The date at the top shows the latest version; significant changes will be communicated to customers by email or in the portal.