DialAssist
Privacy Policy
Last updated 17 August 2026
This policy explains what DialAssist collects, why, where it is kept and how to get rid of it.
It covers both our subscribers and the people who call them.
What we collect about you
| Data | Why |
|---|
| Name and email address, from Google sign-in | To identify your account and send your daily summary |
| Your mobile number | To route forwarded calls to the right account. This is the key the whole service turns on |
| Contacts you add — name, number, notes, greeting | To recognise callers and greet them the way you asked |
| Rules you write | To tell the assistant how to handle your calls |
| Call records — time, duration, caller number, recording, transcript, summary | To show you what you missed |
| Subscription status and billing history | To run your plan and issue invoices |
What we do not collect
Signing in with Google gives us your name and email address only. We never read your Gmail,
your Google contacts, your calendar or your files. We never receive your card or bank details —
those go directly to Razorpay.
People who call you
If you have reached this page because DialAssist answered your call: the person you rang
uses DialAssist to answer calls they miss. Your phone number, a recording of that call, and a
transcript were stored on their behalf. They control that data, not us. To have it deleted,
ask them, or write to us at
[email protected] and we
will pass your request to them and act on it where we are able to.
For calls to a subscriber's number, the subscriber decides what is collected and why. We
process that data on their instructions. The subscriber is responsible for having the right to
record and transcribe those calls, and for telling callers where the law requires it.
Where your data is kept
- Accounts, contacts, rules, transcripts and summaries: AWS Mumbai (ap-south-1), India.
- Recordings: Amazon S3 in Mumbai, encrypted at rest, never publicly readable. The dashboard serves them through links that expire after 15 minutes.
- Email is sent through Google Workspace, and through Amazon SES in the United States as a fallback.
How long we keep it
| Data | Kept for |
|---|
| Call recordings | 90 days, then deleted automatically |
| Transcripts and summaries | Until you delete them or close your account |
| Contacts and rules | Until you delete them |
| Account and billing records | As long as your account exists, then as required by Indian tax law |
Who else processes it
Running the service means sending some data to these providers, and nothing beyond what each needs:
| Provider | What it receives |
|---|
| Plivo | Carries the phone call. Sees the phone numbers and the audio |
| ElevenLabs | Speaks and listens on the call. Receives the audio, and the caller's name and your rules so the assistant can respond |
| Google (Gemini) | Receives the transcript to write the summary |
| Google (Sign-In, Workspace) | Authenticates you; delivers your email |
| Amazon Web Services | Stores everything and runs the service |
| Cloudflare | Serves the website |
| Razorpay | Takes payment. Receives your email and phone number; we never receive your card details |
We do not sell your data, and we do not use it for advertising.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- ask what we hold about you and why;
- correct anything inaccurate;
- have your data erased — closing your account deletes your calls, contacts and rules;
- withdraw consent, by cancelling and removing call forwarding;
- nominate someone to exercise these rights if you die or become incapacitated;
- complain to us, and then to the Data Protection Board of India if we do not resolve it.
Most of this you can do yourself in the dashboard. For anything else, write to
[email protected] and we will respond within 30 days.
Security
- Recordings are encrypted at rest and are never public. Access is through short-lived signed links.
- The dashboard requires a signed session; the session cookie is HttpOnly and cannot be read by page scripts.
- Webhooks from our telephony and payment providers are cryptographically verified before they are acted on.
- We keep no passwords, because we do not use any — sign-in goes through Google.
No service is perfectly secure. If we discover a breach affecting your data, we will tell you
and the Data Protection Board as the law requires.
Cookies
One cookie, da_session, which keeps you signed in. No advertising cookies, no
analytics cookies, no third-party trackers. Signing out deletes it.
Children
DialAssist is not for anyone under 18, and we do not knowingly collect their data.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes
effect.
Contact
DialAssist is operated by Vartana (OPC) Private Limited, Bengaluru, Karnataka, India,
which is the data fiduciary for your account data.
For any privacy question, or to exercise a right above:
[email protected]