Privacy Policy
Last updated: 5 May 2026
ASL Digital Solutions, a sole proprietorship registered in West Bengal, India (“Dial Kite,” “we,” “us”), operates the Dial Kite AI voice calling platform. This Privacy Policy describes how we collect, use, share, and protect personal data, in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the CERT-In Directive of April 2022.
1. Who is the Data Fiduciary
For data you provide as a Dial Kite customer (account, business details), Dial Kite is the Data Fiduciary. For data you upload about your leads (phone numbers, names, scripts, transcripts), you are the Data Fiduciary and Dial Kite is the Data Processor. You are responsible for the lawful basis (typically consent) for processing your leads’ data.
2. Data we collect from customers
- Account: name, email, phone, password (hashed)
- Business: company name, GSTIN, Udyam/MSME or registration number, PAN (for verification)
- Billing: payment provider tokens (we do not store card numbers)
- Usage: campaigns, calls placed, minutes used, dashboard activity
- Technical: IP address, browser, device type, cookies
3. Data we process for customers (about leads)
- Phone numbers and names you upload
- Call audio recordings (where consent has been provided)
- Call transcripts and AI-generated summaries
- Call metadata: duration, outcome, sentiment
4. Purposes of processing
We process personal data to:
- Provide and operate the Service
- Verify customer identity and business eligibility
- Place calls on your behalf using AI agents
- Maintain audit logs for TRAI/regulatory compliance
- Bill customers and prevent fraud
- Improve the Service (with anonymised, aggregated usage data only)
- Communicate service updates and respond to support requests
5. Data sharing
We share data with these service providers, under contract:
- Sarvam AI (Bengaluru) — speech-to-text and text-to-speech processing
- Google (Gemini API) — large language model inference
- LiveKit Cloud (India South region) — real-time audio infrastructure
- Vobiz — telecom SIP trunk for placing calls
- Supabase (Mumbai) — database and storage
- Vercel — dashboard hosting (USA, with Indian edge caching)
We do not sell personal data. We may disclose data when required by law, court order, or to investigate fraud or breach of these Terms.
6. Cross-border transfers
Some processing (Gemini LLM inference, Vercel dashboard, OpenTelemetry logging) involves servers outside India. We rely on the contractual protections of these providers and on India’s permitted-country framework under the DPDP Act.
7. Retention
- Account data: retained while your account is active and 12 months after closure
- Call recordings and transcripts: 90 days by default; you may set a shorter retention in settings
- Billing records: 7 years (statutory requirement under Indian tax law)
- Audit logs for TRAI compliance: 5 years
8. Your rights under the DPDP Act
You may:
- Access the data we hold about you
- Correct inaccurate data
- Erase data (subject to statutory retention exceptions)
- Withdraw consent for non-essential processing
- Nominate a person to exercise these rights on your behalf
- File a grievance with our Data Protection Officer (see Section 10)
- Escalate unresolved grievances to the Data Protection Board of India
9. Security
We use TLS 1.3 in transit, AES-256 at rest, role-based access controls, and audit logging. No system is perfectly secure. In the event of a breach, we will notify the Data Protection Board and affected users within 72 hours, as required by the DPDP Act.
10. Grievance Officer / Data Protection Officer
Lal Mahammad, Proprietor of ASL Digital Solutions, serves as the Grievance Officer and Data Protection Officer.
Email: contact@asldigitalsolutions.in
Address: ASL Digital Solutions, Suri, West Bengal, India
Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST
Acknowledgement within 24 hours. Resolution within 30 days for DPDP-Act requests, 15 days for IT-Rules grievances. Full details and escalation paths are on the Grievance Officer page.
11. Cookies
We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. Analytics (Vercel Analytics) is privacy-first and does not use cookies.
12. Children
Dial Kite is a B2B service. We do not knowingly collect data from anyone under 18 years old.
13. Changes to this policy
Material changes will be communicated by email or in-product notice at least 14 days before they take effect.