Privacy Policy

Last updated:

This is a general template aligned with India's Digital Personal Data Protection Act (DPDP) 2023. Have it reviewed by a lawyer before relying on it commercially, and update the data table below to match exactly what your deployment actually collects and which third parties it actually uses.

1. Who We Are

Shukai ("we", "us") provides an AI-powered lead engagement platform for businesses. This policy explains what personal data we collect, why, and how it's handled — both for our business customers ("Clients") and the leads/visitors Clients interact with through our platform ("End Users").

2. Data We Collect

Category	Examples	Collected from
Account data	Name, email, phone, business name	Client, at signup
Billing data	Payment status, transaction IDs (card/UPI details are handled directly by Razorpay, not stored by us)	Razorpay
Lead data	Name, phone, email, conversation transcripts, inferred intent	Client's leads, via calls/WhatsApp/widget
Call recordings & transcripts	Audio metadata, AI-generated transcripts and summaries	Exotel, during AI calls
WhatsApp messages	Message content and metadata for leads who message a Client's connected number	Meta WhatsApp Business API
Widget chat data	Visitor messages, name/phone/email if voluntarily provided	Client's website visitors
Usage data	Credits consumed, login activity, feature usage	Automatically, during use of the Service

3. How We Use This Data

To provide the core Service — placing calls, sending WhatsApp messages, running the chat widget, and tracking credit usage.
To generate AI responses via our AI provider (Groq), which processes conversation content to produce replies.
To process payments and detect/prevent fraud.
To send account-related emails (receipts, password resets, team invites) and, where you've opted in, product updates.
To monitor and improve the Service's reliability and security.

4. Third Parties We Share Data With

Provider	Purpose	Data shared
Groq	AI inference for calls, WhatsApp, and widget chat	Conversation content sent to generate a reply
Exotel	Placing and receiving phone calls	Phone numbers, call audio, call status
Meta (WhatsApp Business API)	Sending/receiving WhatsApp messages	Phone numbers, message content
Razorpay	Payment processing	Billing name/email, transaction amount

We do not sell personal data to third parties.

5. Data Retention

We retain account and lead data for as long as your account is active, plus a reasonable period afterward to comply with legal, tax, and dispute-resolution obligations. You may request deletion of your account and associated data at any time, subject to records we're legally required to keep.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for non-essential processing. To exercise these rights, contact privacy@shukai.protobot.co.in. We will respond within the timeframe required by applicable law.

7. End User (Lead) Data

If you are a lead or website visitor who has interacted with a business using Shukai, that business is the data controller for your information — we process it on their behalf. To exercise data rights regarding your own information, please contact the business directly; we will assist them in fulfilling that request.

8. Security

We use industry-standard measures — encrypted connections (HTTPS/TLS), hashed passwords, and role-based access controls — to protect data. No system is perfectly secure, and we encourage Clients to use strong, unique passwords and enable available account protections.

9. International Data Transfers

Some of our third-party providers (e.g. Groq, Meta) may process data outside India. Where this occurs, we rely on those providers' own data protection commitments and applicable cross-border transfer safeguards.

10. Children's Data

The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from individuals under 18.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice before they take effect.

12. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and applicable Indian IT rules, we have designated a Grievance Officer to address concerns about how your personal data is collected, used, or shared.

Name: [To be designated]
Email: privacy@shukai.protobot.co.in
Address: [To be added]

We will acknowledge grievances within 7 days of receipt and aim to resolve them within 30 days, as required under the DPDP Act, 2023.

13. Contact

Questions about this policy can be sent to privacy@shukai.protobot.co.in.