Privacy Protocol.

Data Security & Sovereignty Rules

At Praveg AI, we treat your data with the same rigor we apply to our code. We act strictly as a Data Processor. This Privacy Policy outlines how we collect and process information when you deploy our AI Workforce.

Select Legal Jurisdiction

1. Data Processing & The Neural Uplink

We process specific data streams solely to power your autonomous workforce:

Identity Data: Name, email, and business details provided during account creation.
Voice Artifacts: Audio streams and transcripts of end-user interactions with the AI Agent.
Synapse Routing: Real-time API routing of CRM data. We act as a bridge; we do not clone your CRM databases into our servers.

2. TRAI/DoT Compliance & Enterprise Trunks

To ensure telecom network integrity and prevent spam, Praveg AI provisions dedicated +91 Enterprise Trunks for our clients. We must comply with strict government KYC (Know Your Customer) regulations.

Before a line is activated, the Data Fiduciary (Client) must securely provide: Company Incorporation Certificate, GST/PAN credentials, Authorized Aadhar, and a signed CAF (Customer Application Form).
These documents are submitted directly to the official telecom providers and are not used by Praveg AI for any marketing purposes.

3. Zero Public AI Training & Data Ownership

Your intelligence belongs to you. Praveg AI strictly prohibits the use of your private conversations, internal knowledge documents, or customer interactions to train or feed generalized public AI models.

Note: AI will learn and adapt in real time accordingly to your customer needs. It runs on a separate context for each user and is ensured that we don’t use that data to train any models. Every new user experience came afresh and learn the algorithm as it progresses. Users can toggle this feature ON/OFF as per their contextual requirement.

Brand-Voice Cloning features available in enterprise plans require verified legal consent from the executive and do not fall under the category of public AI training.

4. Zero-Retention & The Private Vault System

Transparency and Data Minimization are absolute. Praveg AI enforces a strict multi-tenant annihilation protocol to protect consumer privacy and eliminate third-party liability.

Transient Processing: We utilize external communication channels to deliver voice services. The exact second a call finishes, our system issues an automated DELETE command to these third-party platforms, instantly and permanently eradicating call logs, audio, and transcripts from their servers.
The Private Vault: Instead of leaving data on outside servers, your records are instantly siphoned into Praveg AI’s self-managed, encrypted storage matrix. We remain the sole custodians of your interaction history.
Complete Data Isolation: Every business running on our engine is kept in its own distinct, cryptographically isolated room. It is mathematically impossible for other tenants to access or cross-contaminate your data.

5. Secure Cloud Processing & DPDP Compliance

To provide our services, Praveg AI’s private vaults are securely hosted on enterprise-grade, SOC2 and GDPR-certified cloud infrastructure. These underlying processors act strictly under our command and are legally and technically bound to protect your information in full compliance with India’s Digital Personal Data Protection (DPDP) Act, 2023. They possess zero rights to access, share, or monetize your data.

6. Communication & Grievance Redressal

For privacy inquiries, security audits, or to exercise your rights under the DPDP Act (including the Right to be Erased), please contact our Intelligence Division at:

Legal & Compliance Desk

Praveg AI Security Operations

customersupport@praveg.io

1. CCPA Framework: Service Provider Status

Under the California Consumer Privacy Act (CCPA) and subsequent US state laws, Praveg AI functions exclusively as a Service Provider. We process end-user conversational data solely at the direction of our Clients (the Data Controllers). We absolutely do not sell, share, or monetize any personal information routed through our architecture.

2. Financial Security & GLBA Standards

For our clients in the Wealth Management and Financial Services sectors, Praveg AI's data pipelines are engineered to meet the strict confidentiality requirements of the Gramm-Leach-Bliley Act (GLBA). All SIP trunking, telecom handoffs, and webhook payloads are secured via end-to-end TLS encryption to ensure Non-Public Personal Information (NPI) remains impenetrable.

3. Zero-Retention & Global Data Isolation

We believe the best way to secure data is to minimize its exposure. Praveg AI exceeds US and GDPR data minimization standards through our proprietary retention protocols:

Instant Third-Party Clean-Up: Voice interactions are processed transiently. Upon call completion, our system automatically commands all sub-processing communication partners to permanently delete transcripts and audio files from their servers.
Client Custody & Walled Gardens: Data is secured directly into isolated, tenant-specific vaults within Praveg's internal matrix, or pushed directly to the Client's own CRM via webhooks. Long-term data retention policies are managed by the Client.

4. Global Telecom Compliance & Formatting

To protect global consumer telecom data, Praveg AI utilizes autonomous Length-Based Heuristics. All inbound and outbound phone numbers are dynamically stripped of noise and securely formatted to strict international E.164 telecom standards. This ensures highly secure, globally compliant dispatch payloads across platforms like WhatsApp and Twilio, eliminating malformed data risks.

5. Legal Inquiries & DPA

US/Global Enterprise clients must sign and adhere to our standalone Data Processing Agreement (DPA) during onboarding.

Global Compliance & Security Desk

Praveg AI Global Security Operations

customersupport@praveg.io