Privacy Policy

We are committed to protecting the information you share with us and to being transparent about how we collect, process, and share that information. This Policy describes how the personal data of “data subjects” (referred to as “you” or “your”) is collected, handled, and protected when you interact with RevRag AI.

This Policy applies to visitors of our website, registered customers, and end users who interact with AI agents deployed by our customers. It should be read together with our Terms and Conditions.

RevRag AI provides an AI agent platform that enables businesses to embed intelligent agents into their applications (“In-App AI Agent”) and deploy outbound voice agents (“AI Calling Agent”), along with configuration tools, analytics dashboards, and SDKs that support these services.

We collect the following categories of information:

• Personal identification information you provide directly, such as your name and email address, when you register or interact with our website
• User behavior data, such as clicks, navigation patterns, and session data
• Conversation data, being messages exchanged between AI agents and end users
• Business data, such as CRM records or user profiles shared with us via integration by our customers
• Any other personal data collected from auditors for the purpose of security or compliance audits, obtained with the relevant individual’s consent

Where our customers deploy AI agents to their own end users, our customers act as the data controller for that end-user data, and we process it on their behalf as a data processor. Our customers are responsible for obtaining the necessary rights and consents to share that data with us.

We collect and process your data when you register online or avail of our products or services. We do not currently receive personal data indirectly from any third-party source.

We use the data we collect to:

• Provide and manage your account and deliver the Services
• Send you service-related communications and real-time alerts about your organization
• Where you have agreed, share your data with partners who form an essential part of the service we provide

Our production infrastructure is hosted in India (AWS Mumbai, ap-south-1 region), and Indian enterprise customers benefit from full data localization within India. All data is encrypted in transit using TLS 1.2/1.3 and at rest using AES-256. We maintain ISO/IEC 27001:2022 certification and SOC 2 Type II attestation, and apply role-based access control and least-privilege principles across our systems.

We retain your personal data for as long as our Services are availed. We will retain Customer Data for 90 days post-termination, after which it is securely deleted. Export of Customer Data is available upon request within this 90-day window.

We do not transfer personal data outside India except where a specific sub-processor engaged to provide a feature of the Services requires it. Where such a transfer occurs, it is made only to sub-processors bound by a data processing agreement (DPA) requiring safeguards consistent with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable data protection laws. You may request details of any cross-border transfer applicable to your account by contacting our Data Protection Officer below.

We may send you information about RevRag AI products and services that we think you might like. If you no longer wish to be contacted for marketing purposes, you can write to us at the email address in the Contact section below at any time.

We want to make sure you are fully aware of your data protection rights. Subject to applicable law, you are entitled to:

• The right to access: request copies of your personal data held by us
• The right to rectification: request that we correct inaccurate or incomplete information
• The right to erasure: request that we erase your personal data, under certain conditions
• The right to restrict processing: request that we restrict the processing of your personal data, under certain conditions
• The right to object to processing: object to our processing of your personal data, under certain conditions

If you make a request, we aim to respond within one month. To exercise any of these rights, please contact our Data Protection Officer using the details in the Contact section below.

Name: Pankaj Gupta
Email: contact@revrag.ai
Phone: +91-9453425611

The Data Protection Officer is responsible for creating, implementing, and supervising our privacy policies and processes; acting as our primary point of contact on personal data processing issues; conducting audits and Data Protection Impact Assessments (DPIAs) to evaluate and reduce data protection risks; ensuring records of processing activities are maintained; advising our personnel on their data protection obligations; and responding to data subjects on matters concerning the processing of their personal data and the exercise of their rights.

Our Privacy Policy transparently sets out the purposes of data processing, the affirmative actions required for consent, and the granularity of choices available, so that you have clear control over your data.

You may modify your consent preferences at any time by contacting us; we maintain documentation of all such modifications. Clear instructions for withdrawing consent are provided on request, and withdrawal will not result in any negative consequence to you. We maintain a record-keeping process for all consent changes for transparency and compliance.

Our Services are not intended for use by children, and we do not knowingly collect personal information from anyone under 13 years of age. Access to our platform is granted only to employees of our customer organizations, who we assume to be at least 18 years of age. Where any exception applies, we collect data only with verifiable parental consent.

We do not use cookies for advertising or tracking purposes. We use a session variable solely to keep you signed in to our application. Our website may contain links to other websites; our privacy practices apply only to our own website, so we encourage you to review the privacy policy of any third-party site you visit.

RevRag AI maintains an internal Information Security Incident Response Plan and an Information Security Incident Register to identify, contain, investigate, and remediate security incidents. In the event of a confirmed breach involving your personal data, we will notify you without undue delay, and in any event within seventy-two (72) hours of confirming the breach, and will cooperate with any notification obligations you may have under the Digital Personal Data Protection Act, 2023 (DPDPA) or other applicable law.

We keep this Privacy Policy under regular review and post any updates on this page, along with a revised “Last updated” date shown below.

If you have any questions about this Privacy Policy or the data we hold about you, or if you would like to exercise any of your data protection rights, please contact our Data Protection Officer using the details above.

If you feel that we have not addressed your concern satisfactorily, you may escalate your complaint to the relevant data protection authority in your jurisdiction. For users in India, this is the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

All personnel are expected to comply with this Policy and any related policies, standards, processes, and guidelines. Compliance is subject to periodic review by our Information Security function, and any confirmed violation may result in disciplinary action in line with our internal policies. Exceptions to this Policy require a waiver explicitly approved by our CEO or CTO.