Privacy Policy

This Privacy Policy explains how NextInfinity Technologies Private Limited (“NextInfinity”, “NestVoice AI”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data when you visit our website, create an account, or use our AI voice automation platform and related services (collectively, the “Services”).

We are committed to processing personal data in accordance with applicable data protection laws, including India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU/UK General Data Protection Regulation (GDPR). By using the Services, you agree to the practices described in this Policy.

Our responsibilities differ depending on the data involved:

• As a Data Fiduciary / Controller — for account, billing, marketing, and website data, we determine the purposes and means of processing.
• As a Data Processor — when our customers use the platform to place or receive calls, we process the personal data of their end-users (call recordings, transcripts, contact details) solely on their behalf and per their instructions, governed by a Data Processing Agreement (DPA).

• Account & identity data — name, business email, phone number, company name, role, and authentication credentials.
• Billing data — billing address, GSTIN, and transaction records. Card details are handled directly by our PCI-DSS compliant payment processors; we do not store full card numbers.
• Voice & conversation data — call audio, recordings, transcripts, call metadata (timestamps, duration, numbers), and outcomes processed to deliver the Services.
• Usage & device data — IP address, browser type, device identifiers, pages viewed, and diagnostic logs.
• Communications — messages you send to support, sales, or via forms.

We use personal data to:

• Provide, operate, maintain, and improve the Services;
• Authenticate users, process payments, and manage subscriptions;
• Power AI voice synthesis, speech recognition, and conversation routing;
• Provide customer support and respond to your requests;
• Monitor for security, fraud, abuse, and to enforce our Terms;
• Comply with legal, tax, and regulatory obligations; and
• Send service and, with consent, marketing communications.

The Services use automated speech recognition, natural language understanding, and neural voice synthesis to conduct conversations. Importantly:

• We do not use customer voice data or transcripts to train general-purpose foundation models. Customer content is used only to deliver that customer’s Services.
• Call recording is controlled by the customer and may be enabled or disabled per their configuration and legal requirements.
• Customers are responsible for obtaining any consent required from end-users for recording and AI-assisted interactions.

We rely on one or more of the following legal bases:

• Consent — where you have given clear consent (e.g. marketing, recording);
• Contract — to perform our agreement with you;
• Legal obligation — to comply with applicable law;
• Legitimate interests — to secure, improve, and operate the Services, balanced against your rights.

We do not sell personal data. We share data only with:

• Subprocessors — vetted cloud hosting, telephony, speech, and analytics providers acting under contract and on our instructions;
• Payment & tax providers — to process transactions and meet compliance obligations;
• Professional advisors — auditors, lawyers, and insurers under confidentiality;
• Authorities — where required by law, court order, or to protect rights and safety.

A current list of subprocessors is available on request to privacy@nestvoiceai.com.

We retain personal data only as long as necessary for the purposes described in this Policy, to provide the Services, and to comply with legal, tax, and accounting obligations. Customer content is retained per the customer’s configuration and contract, and is deleted or anonymized on expiry of the applicable retention period or upon verified request.

Personal data is primarily processed in India. Where data is transferred outside your jurisdiction, we implement appropriate safeguards — such as standard contractual clauses and equivalent contractual protections — consistent with the DPDP Act and GDPR requirements.

Subject to applicable law, you may have the right to:

• Access, correct, update, or complete your personal data;
• Request erasure of your personal data;
• Withdraw consent at any time (without affecting prior processing);
• Nominate another individual to exercise rights in case of death or incapacity (DPDP Act);
• Object to or restrict certain processing, and request data portability (GDPR);
• Lodge a complaint with the Data Protection Board of India or your local supervisory authority.

To exercise these rights, contact us using the details below. If we act as a Processor, we will refer your request to the relevant customer (Controller).

We use cookies and similar technologies to operate the website, remember preferences, and measure performance. You can manage cookies through your browser settings. For more detail, see our Cookie Policy.

We apply technical and organizational measures including encryption in transit and at rest, access controls, and continuous monitoring. For a detailed description, see our Security page. No method of transmission or storage is perfectly secure; we work continuously to protect your data.

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data of children. Where the DPDP Act applies, we will obtain verifiable parental consent before processing a child’s data if required.

We may update this Policy from time to time. Material changes will be notified via the Services or email, and the “Last updated” date above will be revised. Continued use of the Services after changes take effect constitutes acceptance.

For privacy questions or to exercise your rights, contact our Grievance Officer / Data Protection Officer:

• Email: privacy@nestvoiceai.com
• Entity: NextInfinity Technologies Private Limited
• Jurisdiction: Andhra Pradesh, India

We aim to respond to all verified requests within statutory timelines.