Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Telenow ("Telenow", "we", "us", or "our") collects, uses, discloses, and safeguards information in connection with our voice-AI agent platform and related websites, dashboards, APIs, and services (collectively, the "Services"). Telenow provides a business-to-business platform that lets our customers ("Customers") build and operate AI agents that place and receive phone and web-based voice calls. This policy describes our practices both as a provider of the Services and as a processor acting on behalf of our Customers. Our TeleBuddy app for Android and iPhone is covered in section 13, TeleBuddy App.

1. Information We Collect

We collect the following categories of information:

• Account information. Name, business email address, company name, role, password credentials, and other details you provide when you register for, configure, or administer an account.
• Call recordings and transcripts. Audio recordings, machine-generated transcripts, and derived metadata from phone and web calls that flow through agents configured on the platform. This content may include the voices and statements of end users who interact with our Customers' agents.
• Usage and technical metadata. Call timestamps, durations, phone numbers, dispositions, latency and quality metrics, agent and prompt configurations, IP addresses, device and browser information, and log data generated when you use the Services.
• Payment information. Billing contact details and limited transaction data. Card and bank details are collected and processed by our third-party payment processors; we do not store full payment card numbers on our systems.
• Cookies and similar technologies. We and our analytics providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the Services, and understand product usage. You can control cookies through your browser settings, though some features may not function without them.

2. How We Use Information

We use information to:

• provide, operate, maintain, and secure the Services;
• route, transcribe, and process voice calls and generate AI agent responses;
• authenticate users, prevent fraud and abuse, and enforce our terms;
• monitor performance, debug issues, and improve reliability and quality of the Services;
• calculate usage, generate invoices, and process payments;
• communicate with you about your account, security, and product updates; and
• comply with legal obligations and respond to lawful requests (see our Law Enforcement & Government Data Request Guidelines).

We do not sell personal information. We do not use Customer call content to train our own general-purpose foundation models, and we configure our AI sub-processors to operate on a no-training basis where such options are available.

3. Sub-processors and Third-Party Providers

To deliver the Services we rely on trusted sub-processors who process data on our behalf under contractual confidentiality and security commitments. These include:

• AI model providers. Large language model (LLM), speech-to-text (STT), and text-to-speech (TTS) providers that power agent reasoning, transcription, and voice synthesis. Audio and text are transmitted to these providers to generate real-time responses.
• Telephony carriers. Communications providers such as Plivo and Twilio that originate, terminate, and stream voice calls over the public telephone network.
• Infrastructure and support vendors. Cloud hosting, storage, error monitoring, analytics, email delivery, and payment processing providers.

A current list of sub-processors is available on request. We remain responsible for the processing carried out by our sub-processors.

4. Data Retention

We retain account and usage data for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Call recordings and transcripts are retained according to the configuration and retention settings chosen by the Customer that controls the relevant agent. Customers may delete recordings and transcripts, and we will delete or de-identify data following account termination, subject to backup retention cycles and legal hold requirements.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit, encryption of sensitive data at rest, access controls, network segmentation, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and API keys.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, and to receive a copy of your information in a portable format (for example, under the GDPR or the CCPA/CPRA). Where we act as a processor on behalf of a Customer, we will refer requests from that Customer's end users to the relevant Customer and assist them in responding. To exercise rights with respect to data for which Telenow is the controller, contact us using the details below. You may also have the right to lodge a complaint with a supervisory authority and to withdraw consent where processing is based on consent.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to access a summary of your personal data and the processing we carry out, to have inaccurate data corrected or completed, to have your data erased where it is no longer needed for the purpose it was collected for, to nominate another person to exercise these rights on your behalf, and to a readily available means of grievance redressal. See Grievance Officer (India) below.

6a. Voice Cloning and Biometric Data

Our Services allow a Customer to create a synthetic voice from a voice sample. Doing so generates a voiceprint, which is a biometric identifier under laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and the Washington My Health My Data Act.

• Notice and release. A voiceprint is created only where the person whose voice it is has been told, before their voice was recorded, that a biometric identifier would be created, for what purpose, and for how long it would be kept — and has provided a written release. Where a Customer clones a third party's voice, the Customer confirms at capture that it holds that release and can produce it on request.
• Purpose. A voiceprint is used solely to synthesize speech for the account that created it. We do not sell, lease, trade, or otherwise profit from voiceprints.
• Retention and destruction. A voiceprint is destroyed on the schedule selected when it was created, when the Customer deletes the voice, or within three years of the last interaction with the person whose voice it is — whichever occurs first. Destruction removes both the reference recording and any copies held by the voice providers listed in our sub-processor register.
• Disclosure. A voiceprint may be processed by the third-party voice providers listed in our sub-processor register in order to create and use the synthetic voice.

7. Call-Recording Consent

Recording, monitoring, and transcribing calls are subject to laws that vary by jurisdiction, and some jurisdictions require the consent of one or all parties to a call. As between Telenow and the Customer, the Customer is solely responsible for determining the legal basis for, and obtaining any required consents and providing any required disclosures for, recording, transcribing, and processing calls conducted through its agents. Customers are responsible for configuring appropriate consent prompts and disclosures and for the lawfulness of the calls they place and receive.

8. Children's Data

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

9. International Transfers

We and our sub-processors may process and store information in countries other than the one in which you are located. Where we transfer personal information across borders, we rely on appropriate safeguards, such as Standard Contractual Clauses or other recognized transfer mechanisms, to protect that information consistent with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or requests regarding this Privacy Policy or our data practices, contact us at [email protected].

12. Grievance Officer (India)

In accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, the following officer may be contacted about any grievance regarding the processing of your personal data:

13. TeleBuddy App

This part of our privacy policy covers TeleBuddy, our AI call assistant app for Android and iPhone. It says what TeleBuddy collects, why, who else handles it, how long we keep it and the choices you have. Where it differs from the rest of this page, this part applies to TeleBuddy.

"We" and "us" mean Telenow AI Technologies Private Limited ("Telenow"), which publishes TeleBuddy on Google Play as TELENOW AI.

Your account

• Your mobile number. You confirm it with a one-time code we send to your WhatsApp. Where the app offers it, you can instead send TeleBuddy a WhatsApp message from that number. We also keep the numbers of any other SIMs you connect.
• Your name and the avatar you pick.
• An internal account ID, which we use in place of your number wherever we can.
• A business email address, only if you add one to your business details.

Calls TeleBuddy handles for you

When the assistant answers a call you missed or declined, we keep the caller's number, the time and length of the call, a recording, a transcript, a short summary and the reason for the call. For a business call, the summary can include a lead: what the caller wanted and how to follow up.

When TeleBuddy calls someone for you, we keep the number called, the name and details you gave for that call, the recording, the transcript and the outcome. This covers scheduled calls, payment reminders in Collect dues, calls to your customer lists and tasks you give the AI Assistant.

What you tell TeleBuddy

• Your instructions, what the assistant should know about you, its greeting, voice and language, your business hours and the addresses you save.
• Your chats with the TeleBuddy AI Assistant, its replies, and the tasks you ask it to do.
• Searches you make in the app, such as for a business number to buy.
• Feedback, if you send it: the topic you pick, your message, a screenshot if you add one (made smaller before it is sent), and your app version, phone model, Android or iOS version and app language. If you uninstall from the app and tell us why, we keep that reason, any words you add, and how many SIMs the app switched off first.

Your contacts

TeleBuddy uses your contacts in two ways:

• On your phone, always: it checks incoming numbers against your contacts, so people you know ring through normally. This check stays on your phone.
• On our servers, while "Tell the assistant who is calling" is on: TeleBuddy sends the name and phone number of each contact, and nothing else, so the assistant can greet callers by name. The AI Assistant can also use them to find a number you ask for.

"Tell the assistant who is calling" starts switched on. On Android, your contacts are sent once you allow TeleBuddy to read them, and again when they change. On iPhone, they are sent only after you turn the switch on and agree in the app.

To stop, turn off "Tell the assistant who is calling" in Settings, and your contacts are deleted from our servers at once. Taking away TeleBuddy's Contacts permission stops new uploads, but only the switch deletes what we hold.

Your location

• From your internet connection: when the app opens, our servers work out your state and city from your IP address. We keep only the state and city, not the address, to count in totals where TeleBuddy is used. If you have not picked a city for sponsored cards, it may also pick cards for your city.
• From your phone, only if you allow it: if you tap Allow when the app explains why, TeleBuddy reads your phone's location when you open the app. It does this at most once every 12 hours and never in the background. We keep only the latest reading, to count in totals which cities and areas use TeleBuddy.
• To fill in an address: when you tap "Use my current location", your phone's location fills in that address.

Turn location off for TeleBuddy in your phone's settings, and the reading we kept is erased the next time the app opens. It is also deleted with your account.

Your SIMs, phone and app

• Your SIMs and carrier, so the app can set up the call connection on the right SIM and check that it keeps working.
• Diagnostic reports, such as connection test results and when your phone rang for a call.
• The app version, and the language the app is shown in.
• An install ID the app makes for itself, and a notification token, so we can tell your phones apart and send you alerts.

How you use the app: Microsoft Clarity

TeleBuddy uses Microsoft Clarity to see where the app is hard to use. Clarity records the screens you open and where you tap. Text and pictures on the screen are hidden on your phone before anything is sent.

Recording stops while the payment screen, a family code, the code scanner, or the KYC and business details screens are open. Clarity knows your account only by an internal ID, never by your number or name.

Microsoft collects and receives this data from TeleBuddy to provide Clarity and Microsoft Advertising, and uses it as the Microsoft Privacy Statement describes.

Payments

• Your plan, credits, packs, invite rewards and payment history.
• Razorpay, our payment partner, takes your card, UPI or bank details on its own payment screen. Your full card number, CVV and UPI PIN never reach us.
• Razorpay tells us the result of each payment. This can include the phone number and email entered there, and how you paid, such as a UPI ID or a card's network and last 4 digits. We keep it with the payment record.
• For Collect dues: the UPI ID where your customers should pay you, and what each of them owes.

Business features

If you use Business Mode, we also keep:

• Your business details: name, type, city, address, email, products and prices, and your agents' scripts.
• Your KYC, before you buy a business number: legal name, the signing person's name, PAN, GSTIN and Aadhaar, with photos or PDFs of the PAN card and the Aadhaar, and a company's Certificate of Incorporation. We keep only the last 4 digits of the Aadhaar number, but the photo you send shows the whole card. Our team uses these to check who owns the business.
• Numbers and customer lists: the numbers you buy, and the customer lists you add for calls. Only the names and numbers you confirm leave your phone; the sheet you pick does not.
• Promotion requests: if you ask us to promote your business, the words, phone number or address and cities you give for the card.

The camera is used only to photograph KYC documents or to scan a family code.

Family Access

If you use Family Access, we keep the number you ask for (stored only in a coded form, with a few digits kept to show you) and the relation you pick. We also keep what each of you allowed and for how long, when the person you allowed last looked, and who agreed to which version of the Family Access Terms, and when.

For family codes, we keep when a code was made, who scanned or typed it and what was decided. The code itself is kept only in a coded form and deleted 30 days after it closes. The camera picture stays on your phone; only the code read from it is sent.

Sponsored cards

TeleBuddy can show sponsored cards: its own ads for local businesses and brands, marked "Sponsored", and TeleBuddy tips where no ad is booked. No ad network places them.

• How a card is picked: by the city you choose for ads and the language of the app. If you have not chosen a city, we may use the city your internet connection points to. Your calls, contacts, numbers and messages are never used to pick a card.
• What we count: when a card is shown, seen or tapped, and when you hide or report one. The app sends these counts in batches with its install ID, the city and language used, and the app version. We do not store them with your account, number or name.
• What advertisers get: totals only, such as how many times their card was seen or tapped. Never your number, your contacts, your calls or anything else that identifies you.
• How long: count batches are deleted after 90 days, and a report forgets the install that sent it after 180 days. Totals are kept.
• Your choices: from "Why this ad?" on any card, hide the card, hide all cards from that advertiser, report it, or change your city for ads. A paid pack or plan can turn sponsored cards off for a time, and the app says for how long.

Google ads, later. TeleBuddy does not use Google AdMob or any other ad network today. If we add Google's ads, Google will collect your phone's advertising ID, your approximate location from your internet address, app interactions and diagnostics, and use them for ads, measurement and fraud prevention. We will update this policy and the Play Store data safety section before a version with Google's ads reaches you.

Who else handles your data

We never sell your data and never give it to advertisers. These partners handle it only to run TeleBuddy for us, and only what each one needs:

• Telenow's voice AI platform, which runs the calls.
• Telephony partners, which carry the calls and the numbers.
• Speech and AI partners, which turn speech into text, write summaries and replies, and speak for the assistant. Anthropic's Claude writes the AI Assistant's chat replies and summarises business calls.
• WhatsApp (Meta), which delivers your sign-in code and carries "Log in with WhatsApp" messages.
• Razorpay, for payments.
• Google Firebase, which delivers notifications.
• Hosting providers, which store our data and files.

Microsoft Clarity is the exception: Microsoft also uses what it collects for its own purposes, as described above. We also share with family members you allow through Family Access, only what you switched on and until you stop, and with authorities when the law requires it. Some partners process data outside India, as set out under International Transfers above.

If you call a TeleBuddy user

When you call someone who uses TeleBuddy and their assistant answers, we record the call and keep your number, a transcript and a summary for that user. The assistant tells you it is an AI assistant if you ask. If the user shares contacts with TeleBuddy, the assistant may greet you by the name they saved. To ask about or delete what we hold about you, write to [email protected].

How long we keep it

• Account details, settings and what you told TeleBuddy: while your account is open.
• Calls, recordings, transcripts and summaries: while your account is open. Your plan decides how far back the app shows them; older calls are kept and come back if you upgrade.
• Contacts: until you turn off "Tell the assistant who is calling" or delete your account.
• Phone location: only the latest reading, until you turn location off for TeleBuddy or delete your account.
• Feedback and uninstall reasons: while your account is open, and deleted with it. Uninstalling the app does not delete your account.
• Sponsored card counts: as set out under Sponsored cards.
• Family codes: 30 days after a code closes.
• Payment records: as long as tax and accounting law requires, even after you delete your account.
• Backups: deleted data can stay in our backups for up to 7 days.
• Copies on Telenow's voice platform: the platform that runs the calls keeps its own copy of call audio and transcripts for up to 90 days.

Deleting your account

You can delete your account in two ways:

• In the app: You → Account & Data → Delete account.
• On the web: fill in our account deletion form from the number on your account. We check that the request comes from that number by sending a WhatsApp message to it and waiting for a reply, then delete the account within 30 days.

Deleting the app from your phone does not delete your account. Deleting your account is permanent. It removes your account and settings, calls, recordings, transcripts and summaries, the contacts we hold, your location reading, AI Assistant chats, Family Access, your business details and agents, and your KYC details and documents. Business numbers you rented are released, and any autopay is cancelled.

We keep only:

• payment records, without your account, because tax and accounting law requires them;
• a coded (hashed) form of your number on invite records, so the same number cannot earn an invite reward twice;
• an anonymous count of when you signed up, for our sign-up totals;
• security and audit records of actions on the account, to keep the service safe and meet legal duties;
• sponsored card counts, which were never linked to your account.

How we protect it

• Everything between the app and our servers is encrypted in transit.
• KYC documents are stored encrypted in a private store, and the PAN is encrypted in our database. Our database never keeps a full Aadhaar number; the Aadhaar photo you send stays encrypted with your KYC documents.
• Recordings play through links that work for ten minutes.
• Only the people who need it to run TeleBuddy can reach your data, and every look at a KYC document is logged.

Your rights and choices

In the app you can:

• see and change your settings, instructions and addresses;
• turn off "Tell the assistant who is calling", which deletes your contacts from our servers;
• turn off location for TeleBuddy in your phone's settings, which erases the reading we kept;
• hide or report sponsored cards, or change your city for ads;
• see, change or stop Family Access at once, from You → Who can see my calls;
• remove your business details and KYC documents;
• pause the assistant, or sign this phone out.

You can also ask us for a summary of your data and what we do with it, a correction, or deletion, and you can nominate someone to do this for you. Write to [email protected], or use You → Help Center in the app.

For a complaint, write to our Grievance Officer, Navin Kumar, at [email protected]. We acknowledge complaints within 72 hours and aim to resolve them within 30 days. You can also complain to the Data Protection Board of India.

Children

TeleBuddy is for people aged 18 and over, and we do not knowingly collect data from anyone younger. If you think a child is using TeleBuddy, write to [email protected].

Changes to this part

When we change this part, we update the date at the top of this page. For an important change, we tell you in the app first.