Privacy Policy
Highvance Private Limited ("Company", "we", "us") respects the privacy of everyone who interacts with us. This Privacy Policy explains how we collect, use, store, and protect personal data, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025.
This Policy covers two distinct relationships — please read the one relevant to you:
- Section A — data of our website visitors and our direct business clients, where we act as Data Fiduciary.
- Section B — data of a client's own leads/customers ("End Users") processed through our Platform at a client's instruction, where we act as Data Processor on that client's behalf. (If you are an End User who received a call or message from one of our clients, your primary privacy relationship — including consent and rights requests — is with that client, not with us. Contact them first; we support their compliance as described in Section B.)
Section A — Website Visitors and Direct Clients
A.1Personal Data We Collect
- Contact and billing details you provide to us (name, business name, email, phone, address, GST details).
- Information submitted through website forms, demo requests, or onboarding.
- Technical data from your use of hiighvance.com (IP address, browser type, cookies — see A.6).
A.2How We Use It
- To provide, operate, and bill for the Services.
- To communicate with you about your account, support, or updates.
- To improve our website and offerings.
- To comply with legal, tax, and regulatory obligations.
A.3Legal Basis
We process this data with your consent (e.g., form submissions) and/or as necessary to perform our contract with you.
A.4Sharing
We do not sell personal data. We share it only with:
- Sub-processors who support our operations (cloud infrastructure, payment processing, email/communication tools), bound by confidentiality and data protection obligations.
- Authorities, where required by law.
A.5Cross-Border Transfer
Some sub-processors (e.g., certain AI/language model providers) may process data outside India in the course of delivering the Services. Any such transfer is made in a manner consistent with the DPDP Act, 2023, and is not made to any country restricted by the Central Government.
A.6Cookies
Our website may use cookies and similar technologies for functionality and analytics. You can control cookies through your browser settings.
Section B — End Users Contacted Through Our Platform (We Act as Data Processor)
B.1What We Process
Call recordings, transcripts, phone numbers, and information extracted from conversations (e.g., stated preferences, appointment details) when our AI voice agents interact with an End User on a client's instruction.
B.2On Whose Instructions
We process this data strictly on the documented instructions of the client that deployed the agent, for the purposes that client has set (e.g., lead qualification, appointment booking). We do not independently decide why or how this data is used.
B.3Security
See Section C.0 below, which sets out the security measures applied across our platform to all data we process, including End User data.
B.4Retention and Deletion
Client data will be retained for the duration of the client relationship and for 90 days thereafter, unless a longer retention period is required by law or otherwise agreed with the client. On expiry of this period, data is deleted or anonymised, consistent with our Data Processing & Security Agreement with the relevant client.
B.5Sub-Processing
We may engage sub-processors (e.g., telephony and AI/language model providers) to deliver the Services, under confidentiality and security obligations no less protective than this Policy.
B.6If You Are an End User
To exercise rights over your data (access, correction, erasure) or withdraw consent, please contact the business that engaged us to contact you. If you are unable to reach them, you may write to us at the address below and we will direct your request appropriately.
Section C — Applies to Both
C.0Security Measures
We apply the following safeguards across our platform, to all personal data we process — whether yours as a client or an End User's:
- Encryption — data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Access control — access restricted to authorised personnel on a need-to-know basis, with role-based access control.
- Infrastructure — hosted on cloud infrastructure located in Mumbai, India.
- Segregation — logical isolation between different clients' data.
- Testing — regular vulnerability scanning.
No method of transmission or storage is 100% secure; we work to industry-standard practices but cannot guarantee absolute security.
C.1Data Principal Rights (DPDP Act)
Subject to applicable exceptions, you have the right to: access your personal data, correct or update it, request erasure, withdraw consent, nominate another person to exercise your rights in case of death or incapacity, and lodge a grievance with us and, thereafter, the Data Protection Board of India.
C.2Children's Data
Our Services are not directed at individuals under 18. We do not knowingly collect personal data of children without verifiable parental/guardian consent as required under the DPDP Act.
C.3Breach Notification
In the event of a personal data breach, we will notify affected individuals and/or the relevant client, and the Data Protection Board of India where required, in accordance with the DPDP Rules, 2025.
C.4Grievance Officer
Sumit KumarHighvance Private Limited, New Delhi, IndiaEmail: founder@highvance.inC.5Changes to This Policy
We may update this Policy from time to time. The "Last Updated" date above reflects the latest revision. Material changes will be notified via the website or direct communication.
C.6Governing Law
This Policy is governed by the laws of India, consistent with the Terms and Conditions.
Questions about how Highvance handles your data?
Ask us in a live demo, or read how calls are checked on the Trust page.