Privacy Policy

We design the Service around the principles of data minimization, purpose limitation, and transparency:

We collect only what is necessary to provide the Service you signed up for. We use data only for the purposes described in this Policy and never for unrelated purposes. We do not sell or rent personal data to anyone. We do not use your content, recordings, or voice data to train shared or third-party AI models. You stay in control — you can access, export, correct, or delete your data at any time.

Account information you provide: your name, email address, organization details, and billing information needed to create and manage your account.

Service data you generate: the agents, campaigns, and content you configure, and — where you enable these features — call recordings and transcripts produced by calls handled through your account.

Limited technical data: log and device information (such as IP address and browser type) collected automatically for security, fraud prevention, and to keep the Service working reliably. We do not track you across other websites and we do not build advertising profiles.

We use personal data only to:

(a) provide, operate, and secure the Service; (b) process payments you authorize; (c) provide the analytics, transcripts, and reports you request within your own workspace; (d) respond to your support requests and send essential service communications; and (e) comply with our legal obligations.

We do not use your data for third-party advertising, we do not sell it, and we do not use it for any purpose that is incompatible with the reason it was collected.

For your account and billing data, HeyRik acts as a data controller. For the call recordings, transcripts, and contact data you process through the platform, HeyRik acts as a data processor: we process that data only on your documented instructions, only to deliver the features you have enabled, and we return or delete it on request or upon account closure, in accordance with applicable data-protection law.

Where you enable recording or transcription, voice interactions handled through HeyRik are processed solely to deliver the features you have configured — such as transcripts, summaries, and analytics visible only within your workspace. Call data is never sold, never shared for advertising, and never used to train shared or third-party AI models.

As the party initiating or receiving calls, you are responsible for informing call participants and obtaining any consent required by applicable law (including call-recording, telemarketing, and do-not-call regulations) in the jurisdictions where you and the people you call are located. We provide controls to help you meet these obligations, and we may suspend usage that violates them.

Voice samples you upload and the resulting synthetic voice models are treated as sensitive data. We process them only to provide the voice features of your own account. They are never shared with other customers, never sold, and never used to train shared or third-party models.

You may only clone a voice you own or have explicit, documented permission to use. You can delete a voice clone at any time from your workspace, which removes it from active use, and you can request permanent deletion of the underlying samples by contacting us.

We use strictly necessary cookies to keep you signed in and to remember your preferences, and privacy-respecting, first-party product analytics to understand how the dashboard is used so we can improve it. We do not use third-party advertising cookies or cross-site tracking. You can control cookies through your browser settings, though sign-in and some features may not function if essential cookies are disabled.

We never sell personal data. We share it only with the minimum set of vetted service providers required to run the platform: cloud hosting and storage, licensed telephony carriers (to connect calls and provision numbers), payment processors (to bill plans and credits), and sign-in providers such as Google where you choose to use them. The voice and conversational intelligence behind the Service is delivered through HeyRik’s own AI processing pipeline, operated under the same confidentiality and security standards as the rest of the platform.

Every sub-processor is bound by written contracts imposing confidentiality, security, and data-protection obligations, and may process data only to provide services to us — never for their own purposes. We may also disclose data where required by law or a valid legal order, and we will notify you of such requests where legally permitted.

We retain personal data only for as long as your account is active or as needed to provide the Service, meet legal and tax obligations, resolve disputes, and enforce our agreements. You can delete recordings, transcripts, voice clones, and contact data from your workspace at any time. When you close your account, or when retention is no longer necessary, we delete or irreversibly anonymize your data within a reasonable period, except where law requires longer retention.

We protect your data with technical and organizational measures including encryption in transit, access controls on a need-to-know basis, network isolation, audit logging, and regular review of our security practices. In the unlikely event of a personal data breach that affects you, we will notify you and the relevant authorities without undue delay, as required by applicable law.

Where data is transferred across borders to our sub-processors, we ensure appropriate safeguards are in place — such as contractual data-protection clauses — so that your data receives a consistent standard of protection wherever it is processed.

Subject to applicable law — including the EU/UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act) — you have the right to: access the personal data we hold about you; receive a copy of it in a portable format; correct inaccurate data; delete your data; withdraw consent at any time; object to or restrict certain processing; and lodge a complaint with your data-protection authority.

To exercise any of these rights, contact us using the details below. We respond to verified requests within the timelines required by applicable law, and we will never discriminate against you for exercising your rights.

The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes through the Service or by email before they take effect, and update the “Last updated” date above. We will not reduce your rights under this Policy without your consent.

For privacy questions, data requests, or complaints, email our privacy team at info@heyrik.com. Our designated Grievance Officer (as required under applicable Indian law) can be reached at the same address and will acknowledge complaints promptly and resolve them within the statutory timelines.

If you are not satisfied with our response, you may escalate to the data-protection authority in your jurisdiction.