Privacy Policy

1. Two kinds of data, two roles

• Your account data. When you sign up and use Progz, we decide how this data is used. For this data we are the data fiduciary.
• Your customers' data (the leads, candidates and contacts your AI employees call, email or book). You decide whom to contact and why; we process it only to run the service for you. For this data your business is the data fiduciary and we are your data processor. People who want to access or delete such data should contact the business that contacted them; we help that business respond.

2. What we collect

• Account and workspace: your name, work email, password (stored only as a secure hash), your business name, timezone, team members and their roles, and settings such as your brand colour, reply-to email and business details.
• Billing: recharges, invoices and the GST details you give us. Card, UPI and bank details are entered on Razorpay's page; we never see or store them.
• What you add: offerings, jobs, questions, rules, knowledge documents and FAQs, and lists you upload.
• Contacts: for each person your business adds or who fills your enquiry form: name, phone number, email, preferred language, consent to be called, and the answers they give.
• Calls and messages: call recordings, transcripts, call summaries, the facts the AI noted (for example, the service someone asked for), bookings and the emails sent.
• Technical: sign-in sessions (one essential cookie), IP address and device details in server logs, used for security and to fix problems. We don't use advertising cookies or sell data.

3. Why we use it

• To run the service: place and receive calls, book into calendars, send confirmations, and show results on your dashboard.
• To bill you, issue GST invoices and keep the records the law requires.
• To keep the service safe: prevent abuse, secure accounts and keep an audit log of important actions.
• To send you account emails (sign-in, receipts, low balance) and, if you allow them, setup tips and milestones.
• To improve the service using usage statistics. We do not use your customers' calls or data to train AI models for anyone else.

Our AI never scores or ranks people and never infers protected characteristics such as religion or caste. Decisions such as who qualifies are made by the rules your business sets.

4. Calls and recordings

Calls are made by AI and are recorded and transcribed so your business can review them. The AI introduces itself and the business it is calling for at the start of every call. Your business must have a lawful reason to call each person, for example their enquiry and consent on your form, and must honour do-not-call requests. Anyone can ask not to be contacted again; we mark them "do not contact" in that business's workspace.

5. Services we use (sub-processors)

We share only the data each service needs to do its job:

• Sarvam AI (India): voice AI that runs the calls, speech and transcripts.
• Telephony providers (India): phone numbers and call connection.
• Google Cloud: hosting and database. Google Calendar and Gmail, only if you connect them.
• OpenAI (USA): turns your knowledge documents into a search index so answers come from your own material.
• Zoho: sends emails (account emails and booking confirmations).
• Razorpay (India): payments.
• Meta (WhatsApp Business): only once WhatsApp is switched on and you connect your number.

Some of these services may process data outside India. We use them only as the DPDP Act allows and with safeguards in our agreements.

6. Google user data

If you connect Google Calendar or Gmail, we use that access only to check your free times, create and cancel the bookings your AI employees make, and send confirmation emails from your address. We never read your inbox. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time in Connections.

7. How long we keep it

• Account, workspace, contacts, calls and recordings: while your account is open.
• When you close your account, we delete your workspace data within 90 days, except what the law requires us to keep: invoices and billing records for 8 years under the GST and tax laws.
• Server logs: up to 90 days.

8. Security

Each workspace is kept separate. Connection credentials are encrypted. Access follows roles you set, important actions are written to an audit log, and all traffic uses HTTPS. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

9. Your rights

You can ask to see, correct or delete your personal data, withdraw consent, or name someone to act for you. Most of it you can change yourself in Settings. For anything else, write to info@progztech.com. We reply within 30 days. If your data came from a business that uses Progz, please contact that business first.

10. Children

Progz is for businesses and is not meant for children. Businesses must not use it to contact children under 18 without verifiable consent from a parent or guardian.

11. Changes

We will post changes here and update the date above. For important changes, we will email account owners first.

12. Grievance Officer and contact

Grievance Officer, Progztech Solutions Pvt Ltd
Hyderabad, Telangana, India
Email: info@progztech.com

We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you may approach the Data Protection Board of India.