Privacy policy

01Who we are and what this covers

Zivo is run by [Company legal name], [Registered office address] ("Zivo", "we", "us"). Zivo gives businesses AI agents that answer and make phone calls and WhatsApp messages for them.

This policy covers personal data about three groups of people:

• Visitors to heyzivo.com, and people who sign up for early access.
• Customers: the businesses that use Zivo, and the people on their team who sign in to the Zivo console.
• Callers: people who call or message a business that uses Zivo, or whom a business contacts through Zivo.

02Our role for callers’ data

When a business uses Zivo to talk to its callers, the business decides why and how their data is used. Under India's Digital Personal Data Protection Act, 2023, the business is the data fiduciary and Zivo is its data processor: we handle callers' data only to run the service for that business, on its instructions and under our agreement with it.

If you called or messaged a business that uses Zivo, the business's own privacy notice applies, and requests about your data are best sent to the business. If you write to us instead, we'll pass your request to the business and help it respond.

03What we collect

Early-access sign-ups

Your name, email, business name (if you give it), the kind of business, what you'd like the agent to handle, which page you signed up from, and the country Cloudflare estimates from your connection.

Customer accounts

Your name, email and role, sign-in records (times, and the browser and IP address used), and what your business sets up in Zivo: its profile, menu or services, prices, hours, knowledge base, call flows, phone numbers and connected tools.

Calls and messages

When Zivo answers or makes a call, or handles a WhatsApp conversation, for a business, we process:

• the caller's phone number, and their name if they give it;
• the audio of the call, turned into text as it happens so the agent can reply (we don't keep audio recordings);
• a text transcript of the conversation, and messages exchanged on WhatsApp;
• what came out of it: orders, bookings, messages, callback requests, and anything else the business asked the agent to note;
• call details such as time, length and outcome, and our quality checks on the conversation.

Our website

Our site doesn't use advertising or analytics cookies. Like any website, the servers that deliver it see your IP address and browser details. Its fonts load from Google Fonts, so Google sees those details too. The Zivo console uses one cookie, to keep you signed in.

04How we use it

• To run Zivo: answer and make calls and messages, take orders and bookings, and send them where the business has asked.
• To show a business its calls, transcripts and results, and to check calls so it can see which ones need a look.
• To keep accounts secure, prevent abuse, and fix problems. We measure how long each part of a call takes (timings only, never what was said).
• To contact early-access sign-ups and customers about Zivo, and to reply when you write to us.
• To meet legal obligations and enforce our terms.

05What we don’t do

• We don't sell personal data, or share it with anyone for their own advertising.
• We don't use callers' conversations to train AI models, and we route requests only to model providers whose terms don't let them train on what we send.
• We don't use one business's callers' data for another business.

06Who we share it with

We use other companies to run parts of Zivo. They process data only to provide their service to us:

• Cloudflare: hosting, our database and storage, and some speech and language models.
• AI model providers, reached through OpenRouter: Anthropic, Amazon Web Services (Bedrock) and Google, which generate the agent's replies.
• Voice providers: Sarvam AI and ElevenLabs, which turn the agent's replies into speech.
• Telephony and messaging: Twilio for phone calls, and Meta for WhatsApp when a business uses it.
• Braintrust: call timings and counts, used to make calls faster. It receives no transcripts, words or phone numbers.

We also send data to the tools a business connects to Zivo, such as HubSpot, Zoho CRM, Calendly or its own webhooks, when the business turns that on. Those tools' own terms then apply to the business. We may disclose data if the law requires it, or to protect people's safety, and to a buyer if Zivo's business is sold, under this policy.

07Where it’s processed

Some of these providers process data outside India, including in the United States and the European Union. When data leaves India, we do so only as Indian law allows, and with providers bound to protect it.

08How long we keep it

• Early-access sign-ups: until you ask us to remove them, or until early access ends and we no longer need them to contact you.
• Customer account data: while the account is open, and for up to 30 days after it's closed, so it can be restored if the closure was a mistake.
• Call transcripts and results: for as long as the business keeps them in its account, and deleted when the business deletes them or closes its account.
• Security and sign-in records: as long as we need them to keep Zivo secure, or as the law requires.

09Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, where we no longer need it for the purpose you gave it for or the law requires us to keep it;
• withdraw consent you've given, for example to early-access emails (this doesn't undo what we did before);
• name someone to exercise these rights for you if you die or can't do so yourself.

Write to privacy@heyzivo.com. We may need to confirm it's you before acting. For callers, see our role for callers' data. To update or remove an early-access sign-up, you can also sign up again with the same email or write to us.

10How we protect it

Data is encrypted in transit, and stored with Cloudflare. Phone-provider credentials that businesses give us are encrypted again with our own keys. Access is limited to the people and systems that need it, and each business's data is kept separate. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.

11Children

Zivo is for businesses, and our website and console aren't meant for anyone under 18. Callers may be any age; the business that uses Zivo is responsible for handling children's calls as the law requires.

12Changes to this policy

We'll update this page when what we do changes, and change the date at the top. If a change is significant, we'll tell customers by email before it takes effect.

13Contact and grievances

Questions or requests about your data: privacy@heyzivo.com.

Grievance Officer: [Grievance Officer name], [grievance email], [Company legal name], [Registered office address]. We'll acknowledge a complaint within 24 hours and resolve it within 15 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.