Privacy policy

Your email address, a bcrypt hash of your password (never the password itself), the company name you type into the form, and the time you created the account. If you top up, we also store the payment order id, the amount and its status.

• Phone numbers you connect, dial, or receive calls from.
• Call audio recordings (when the agent's recording switch is on), transcripts, and call metadata: start, end, duration, which agent answered, and the amount charged.
• The knowledge sources, instructions and tool definitions you add to an agent.
• Technical logs: IP address, browser user agent, and a request id for each request.
• Payment metadata from Razorpay: order id, payment id, amount, status. Card numbers, CVV and UPI credentials never reach us.

• To place and receive the calls you ask for, and to run the agent you configured.
• To meter calls per second, charge the wallet, and show you what each call cost — this is also why call records outlive a deleted agent.
• To keep the service secure: rate limiting, abuse detection, and debugging a failure you report.
• To answer your support and grievance requests.

We do not sell personal data, we do not run advertising or analytics cookies, and we do not use your call content to train models.

Four kinds of third party touch your data, each for one job. They are processors, not owners: they act on our instructions and are bound by their own contracts with us.

Where your data lives. The database, recordings and backups are held on servers in the European Union (Germany). If your organisation needs call data to stay inside India, tell us before you sign up — that is a different deployment, not a setting you can toggle.

• Call recordings: 30 days, then deleted automatically by a scheduled job.
• Transcripts and call records: while your account is open, and 90 days after you close it.
• Database backups: 7 days, then rotated out.
• Technical logs: 30 days.
• Payment records: as long as tax and accounting law requires us to keep them.

Calls are recorded when the agent's recording switch is on, which is the default for every agent. Each agent is instructed to open the call by saying “This call is recorded for quality and training.” before its greeting.

If you switch recording off, no audio is written to storage at all; the transcript and the charge are still kept, because they are the invoice. If you edit a prompt so that the notice is never spoken while recording is on, you are breaking our terms and very likely the law.

A person you called can ask for a copy of their recording or for its deletion. Send us the number and the approximate time of the call and we will handle it within 30 days.

Under India's Digital Personal Data Protection Act 2023 you can ask to see the personal data we hold about you, ask us to correct it, ask for its erasure, and nominate someone to act for you if you die or become incapacitated. Write to support@zagcalling.com from the address on the account; we answer within 30 days.

Closing your account deletes your agents, knowledge, tools and numbers. Call records and transcripts follow the retention above, because they are also the billing record.

One cookie, zag_token, set when you sign in so the app knows who you are. It is httpOnly, secure and sameSite=lax. There are no advertising, tracking or analytics cookies, so there is no consent banner to dismiss.

The service is for people aged 18 and over. We do not knowingly hold data about children; if you believe a child's data has reached us, write to us and we will delete it.

Grievance officer: Albin Varghees, Kochi, Kerala, India — support@zagcalling.com. Complaints are acknowledged within 48 hours and answered within 15 days.

If this policy changes materially we will email account holders before the change takes effect. The date at the top of this page is the version you are reading.