Privacy Policy

This Privacy Policy describes how I-TECH INFONET PVT LTD (trading as Truffl, “we”, “us”, or “our”) collects, uses, processes, and shares information about you when you visit our website at trufflinnovations.in, request a product demo, use the Truffl platform, or communicate with us.

By using our website or services, you acknowledge the practices described in this policy. If you do not agree, please discontinue use of our services.

We use the information we collect to:

• Respond to your demo requests and product enquiries
• Provide and operate the Truffl platform
• Configure and run your voice workflows
• Generate analytics, QA reports, and post-call intelligence
• Improve the reliability and performance of our service
• Send transactional and product communications related to your account
• Comply with legal obligations
• Detect and prevent fraudulent or harmful activity

We do not sell your personal data to third parties.

Truffl processes voice recordings and transcripts as part of its core platform functionality. When you deploy a voice workflow, calls may be recorded and transcribed depending on your configuration and applicable law.

You are responsible for obtaining the necessary consent from your end customers before recording calls. Truffl provides tools to help configure consent prompts, but the legal obligation to obtain consent rests with you as the operator of the workflow.

Recordings and transcripts are stored in accordance with your data retention settings. You can configure retention periods from the platform dashboard. Default retention periods are specified in your service agreement.

By default, Truffl does not use call recordings or transcripts from your workflows to train AI models unless explicitly agreed in writing.

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide the service you have requested or agreed to.
• Legitimate interests: Where we have a genuine business purpose for processing and it does not override your rights (e.g., improving service quality, fraud prevention, analytics).
• Legal obligation: Where we are required by law to process your data.
• Consent: Where you have provided explicit consent, which you may withdraw at any time without affecting prior processing.

Under India’s Digital Personal Data Protection Act (DPDPA), we act as a Data Fiduciary with respect to personal data we control. Where you process personal data of your customers through our platform, you are the Data Fiduciary and we act as a Data Processor.

We do not sell your personal data. We may share your information with:

• Service providers and subprocessors who help us operate the platform (e.g., cloud infrastructure, telephony providers, analytics tools, AI model providers) — see Section 7.
• Business transfers: If Truffl is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements: Where required by law, court order, or government authority.
• Protection of rights: To enforce our terms, protect our intellectual property, or prevent harm.

We use third-party service providers (subprocessors) to help deliver our services. These include cloud infrastructure providers, telephony and communication providers, AI model providers, analytics platforms, and payment processors.

All subprocessors are bound by data processing agreements and are only permitted to process your data as instructed by us and as described in this policy.

For an up-to-date list of our subprocessors, please email privacy@trufflinnovations.in.

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law.

• Demo request data: retained for up to 24 months from the date of submission unless you request earlier deletion.
• Account and platform data: retained for the duration of your subscription and for a reasonable period after termination.
• Call recordings and transcripts: retained per your configured retention settings, or as specified in your service agreement.
• Technical and analytics data: retained for up to 26 months.

You can request deletion of your data at any time — see Section 10.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption of data at rest and in transit
• Role-based access controls and least-privilege principles
• Secure API key management
• Regular security reviews and monitoring
• Audit logging for administrative actions

No system is completely secure. If you become aware of a security issue related to Truffl, please report it to security@trufflinnovations.in.

Depending on applicable law, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Restriction: Request that we restrict processing in certain circumstances.
• Portability: Request a copy of your data in a machine-readable format where applicable.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email privacy@trufflinnovations.in. We will respond within 30 days.

Truffl is operated from India. If you are accessing our services from outside India, your data may be transferred to and processed in India, or in other countries where our subprocessors operate.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place consistent with applicable data protection law.

Our website uses cookies and similar tracking technologies to understand how visitors use our site and to improve the experience.

We use: essential cookies (required for the site to function), analytics cookies (to understand traffic and usage), and functional cookies (to remember your preferences).

We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings. For more detail, see our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

For privacy questions, requests, or concerns, contact us at:

privacy@trufflinnovations.in