Privacy policy

Last updated 26 September 2026

This policy explains what data Hello Loop collects when you use helloloop.in and our AI voice agents, why we collect it, and the choices you have.

Who this covers

Hello Loop is software that lets a business run an AI voice agent on its phone calls. Two groups of people are involved:

  • Customers: the businesses and people who sign up, set up an agent and top up a wallet.
  • Callers and call recipients: the people who phone a customer's number, or whom a customer's agent calls.

For call content, the customer decides who is called and why, so the customer is responsible for that data (the “data fiduciary” under India's Digital Personal Data Protection Act, 2023) and we process it on the customer's instructions. For account data and our own website, we are responsible.

What we collect

  • Account data: name, email, phone number, business name, workspace settings and team members.
  • Agent setup: the instructions, business details, knowledge documents and voice choices you give your agent.
  • Contacts: names, phone numbers and notes you import or that your agent captures on calls.
  • Calls: phone numbers, time and length, call audio, recordings, transcripts, summaries, and details the agent records (messages, callbacks, bookings).
  • Wallet and billing: top-up amounts, invoices and payment status. Card and UPI details are handled by our payment provider; we do not store them.
  • Website forms: if you ask for a call back on helloloop.in, we store your name, phone number and business details. Submitting the form can start an AI phone call to the number you entered to explain Hello Loop.
  • Technical data: IP address, approximate country (to show local pricing), browser type and server logs.

How we use it

  • To answer and place calls through your agent, and to show you what happened on each call.
  • To bill your wallet for talk time and phone numbers.
  • To keep the service secure, prevent abuse, and meet legal and telecom obligations.
  • To reply to you and send service messages about your account.

AI processing

Call audio is streamed to Google's Gemini Live API, which listens and speaks for the agent in real time. When you describe your business in the setup assistant, that text is sent to DeepSeek to draft the agent's instructions.

We do not use your calls, recordings or transcripts to train our own models. The AI providers process data under their API terms.

Recordings and retention

  • Calls placed or answered through our cloud phone numbers are recorded. The agent says early in the call that it may be recorded.
  • Recordings are kept for 180 days, then deleted automatically. Transcripts and summaries stay in your workspace until you delete them or close your account.
  • The voice demo on our website is not recorded or stored.
  • Account data is kept while your account is open and removed after it is closed, unless the law requires us to keep it (for example, tax and billing records).

Who we share it with

We do not sell personal data. We share it only with providers that run parts of the service:

  • Supabase: database, file storage and sign-in
  • Vercel: website and app hosting
  • Amazon Web Services (Mumbai region): the media server that connects phone calls to the AI
  • Google (Gemini API): real-time voice AI
  • DeepSeek: drafting agent instructions from your setup answers
  • Plivo, Telnyx and VoiceLink: phone numbers and call connection
  • Razorpay: wallet payments
  • Hostinger: email

We may also disclose data when the law requires it, or to protect people from harm or fraud. Some providers store data outside India; they are bound by contract to protect it.

Cookies and local storage

  • Sign-in cookies keep you logged in.
  • A country cookie remembers which pricing to show on the website.
  • Your browser's local storage remembers small preferences, such as a banner you dismissed.
  • We do not use advertising cookies or third-party trackers.

Security

Data is encrypted in transit. Workspaces are isolated from each other at the database level. API keys and phone provider credentials you give us are stored encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Your rights

You can ask to see, correct or delete your personal data, withdraw consent, or name someone to act for you. Write to hi@helloloop.in and we will reply within 30 days.

If a business using Hello Loop called you, contact that business first; they control that call data. We will help them respond. You can also write to us and we will help stop further calls to your number.

Children

Hello Loop is for businesses. It is not meant for anyone under 18, and we do not knowingly collect their data.

Changes and contact

We will post changes here and update the date above. For important changes we will email account owners. Grievances and privacy requests go to hi@helloloop.in.

Questions? Write to hi@helloloop.in.