Privacy Policy

Last updated: 6 October 2026. This policy explains how TechShah Co., 3175 Chawri Bazar, Delhi 110006, India, which operates the Clientager brand (“Clientager”, “we”, “us”) handles personal data. Contact: privacy@clientager.com.

1. Two roles

• Controller. For visitors to our website, people who contact us, and the people who sign up and manage accounts, we decide why and how data is used. We are the controller (or “business” and “data fiduciary” under laws that use those terms).
• Processor. When our AI agents answer calls, texts, chats, emails or WhatsApp messages for a business using Clientager (“our customer”), we handle those conversations on that business’s behalf and under its instructions. We are the processor (or “service provider”), under our Data Processing Addendum. The business decides what is collected and is the controller. If you spoke to a Clientager agent and want to see, correct or delete your data, please contact that business first. We will help it respond, and we will point you to it if you contact us.

2. Data we collect

• Account and business details: name, work email, phone, business name, country, industry, website, hours, services, policies, documents and answers you share during setup.
• Billing: plan, payment status and receipts. Card or PayPal details are handled by our payment provider; we do not store card numbers.
• Conversation data (for our customers): caller phone numbers, names, contact details, what was said or written, bookings, orders, payments links, summaries, voice recordings and transcripts where the business enables recording, and metadata such as time, duration and channel. Voice data may include voice characteristics of the person speaking, which is processed only to understand and answer them.
• Website and demo use: pages visited, device and browser information, approximate location from IP address, referrer and events such as clicking “get started”. If you try our live demo agent, we process what you say or type to run the demo.
• Messages to us: emails, forms and support requests.

We do not intentionally collect payment card numbers, passwords or one-time codes in conversations, and agents are configured not to ask for them.

3. How and why we use data

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We do not use customer conversation data to train our own AI models. Our agents use automated processing to understand and answer people, but we do not use it to make decisions that have legal or similarly significant effects on someone without a person involved. Agents tell people they are an AI assistant.

4. Call recording

Recording is optional and set by the business. Where a business enables it, the agent says so at the start of the call. Businesses are responsible for obtaining any consent that local law requires. Transcripts and summaries may be stored whether or not audio is recorded, so the business can see what happened.

5. Who we share data with

We share data only as needed to run the service, with:

• Service providers (subprocessors) under written contracts. They include providers for hosting and database (Supabase), real-time voice and media (LiveKit), speech to text and text to speech (Deepgram and Google Cloud), AI language models (Groq and Anthropic), telephony and SMS (SignalWire, Plivo), email delivery (Resend), payments (PayPal), and WhatsApp messaging (Meta) where enabled. We may add or replace providers; the current list is available on request and in the Data Processing Addendum.
• Services you connect, such as your calendar, payment gateway (Stripe, PayPal, Razorpay), booking software or CRM, which receive the data needed for the connection you set up.
• Professional advisers, authorities and others where the law requires, to protect rights, safety and security, or in a merger or sale of the business, with notice to you where required.

6. International transfers

We are based in India and our providers operate in several countries, including the United States and the European Union. Your data may be processed outside your country. Where the law restricts such transfers, we use safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and contractual commitments from our providers. You can ask us for a copy of the safeguards that apply.

7. How long we keep data

• Account and conversation data are kept while the account is active, or as the business sets within the product.
• After an account ends, you can export data for 30 days; we then delete or anonymise it within 90 days, except what the law requires us to keep (for example tax and accounting records).
• Backups are overwritten on their normal cycle.
• Website analytics are kept for a limited period set in our analytics tools. Marketing and support correspondence is kept while relevant.

8. Security

We use measures such as encryption in transit, encryption of customer-supplied integration keys, access controls, separation between customers, logging and staff confidentiality. No system is completely secure. We will notify affected customers and, where the law requires, authorities, of a personal data breach without undue delay. See our Security page.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your personal data, to receive it in a portable format, to withdraw consent, and to complain to a regulator. These rights come from laws such as:

• EU and UK GDPR, and Swiss data protection law;
• California’s CCPA and CPRA and other US state privacy laws, including the right to know, delete, correct and opt out of sale or sharing (we do not sell or share data) and not to be discriminated against;
• India’s Digital Personal Data Protection Act 2023, including the right to access, correct, erase and nominate someone, and to grievance redressal;
• the UAE and Saudi Arabia’s data protection laws, Canada’s PIPEDA, Brazil’s LGPD, Australia’s Privacy Act and similar laws.

To use a right for data we control, email privacy@clientager.com. We may need to verify your identity, and we respond within the time the law sets, normally within 30 days. For conversation data held for one of our customers, contact that business. You can unsubscribe from marketing emails at any time with the link in them.

Grievance contact for India: privacy@clientager.com, TechShah Co. (Clientager), 3175 Chawri Bazar, Delhi 110006, India. You can also complain to your local data protection authority.

10. Children

Clientager is for businesses and is not directed at people under 18. We do not knowingly collect their data for our own purposes. If you think a child has given us data, contact us and we will delete it. A business that serves children is responsible for its lawful use of the service.

11. Cookies

See our Cookie Policy.

12. Changes

We may update this policy. For material changes we will post the new date and, where the law requires, tell you in advance.

13. Contact

TechShah Co. (Clientager)
3175 Chawri Bazar, Delhi 110006, India
Privacy: privacy@clientager.com
Support: support@clientager.com
General: info@clientager.com