Legal
Privacy Policy
Last updated: September 2026
1. Introduction
This Privacy Policy explains how Webchilly Infoways ("we", "us") collects, uses and protects information when you use NaCaller AI (the "Service"). By using the Service you agree to this policy. We comply with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
2. Information we collect
Account data: your name, email address and authentication details when you sign up via email or Google.
Business data you provide: lead names, phone numbers, email addresses and any notes you upload to run calling campaigns.
Call data: recordings, transcripts and AI-generated analysis of calls placed through the Service, retained in your account and deletable by you.
Usage and device data: log data, IP address and basic analytics to keep the Service secure and reliable.
3. How we use your data
To provide the Service — placing calls, generating transcripts, analytics and reports.
To authenticate you, secure your account and isolate your data from other customers.
To process payments and manage your subscription.
To improve reliability and support. We do not sell your data or your customers' data to third parties, and we do not use your calls to train AI models.
4. Consent for calls
You are responsible for ensuring you have a lawful basis and any required consent to call the contacts you upload, and for complying with TRAI/DND, DLT and other telemarketing regulations applicable in India.
5. Facebook and Instagram lead ads
If you connect a Facebook Page, we receive each lead your ads generate: the answers the person gave your lead form — typically name, phone number, email and any questions you added — together with the campaign, ad set, ad and form they came through.
We use that data for one purpose: to place the qualifying call you configured, and to file the lead in your account. We never post to your Page, never read your ad spend or audiences, and never share leads between customers.
To read those leads we store a Page access token issued by Meta. It is encrypted at rest under a key reserved for that purpose, is never shown in your browser or ours, and is used only against the Pages you selected.
You control it. Turning a Page off stops new leads immediately; disconnecting it deletes our copy of the token and ends our access. Leads already delivered stay in your account until you delete them.
You remain responsible for the lead form's own consent language and for your use of Meta's platform under their terms.
6. Data sharing
We share data only with infrastructure providers strictly necessary to run the Service (telephony, speech and hosting partners), under contractual confidentiality. We may disclose data if required by law.
7. Data security
Data is transmitted over encrypted HTTPS/WSS and stored in managed, access-controlled databases. Each customer's data is logically isolated. No method of transmission is 100% secure, but we take commercially reasonable measures to protect it.
8. Data retention
We retain your data while your account is active and as needed to comply with legal obligations. You may export or delete your data at any time: leads and call recordings can be deleted from your dashboard, disconnecting a Facebook Page removes our copy of its access token, and deleting your account removes the rest. To have us do it for you, email hello@nacaller.com and we will action it within 30 days.
9. Your rights
You may access, correct, export or request deletion of your personal data, and withdraw consent, by contacting us at hello@nacaller.com.
10. Changes
We may update this policy from time to time. Material changes will be notified through the Service or by email.
11. Contact
For any privacy questions, contact Webchilly Infoways at hello@nacaller.com.