Privacy Policy
Enigma Ventures Pvt. Ltd. ("Oravaa," "we," "us," or "our") operates the website https://oravaa.com (the "Site") and provides an AI-powered conversational voice platform (the "Service"). We respect your privacy and are committed to protecting the personal information of our Clients ("You") and the individuals to whom our Clients direct calls ("End Users").
1. Scope and Role
1.1 Our Role as Data Processor
In the context of the Oravaa Service (making calls, recording audio, transcribing), Oravaa acts as a Data Processor. This means we process data solely on behalf of our B2B Clients, who are the Data Controllers.
- The Client (Controller) determines who to call, what to say, and is responsible for obtaining necessary consents (such as consent to record) from End Users.
- Oravaa (Processor) executes these instructions using our technology.
1.2 Our Role as Data Controller
We act as a Data Controller only for the information we collect directly from our direct Clients (e.g., your business account details, billing information, and usage logs of our website).
2. Information We Collect
A. Information You Provide (Client Data)
- Account Information: Name, business email, phone number, and company details provided when signing up.
- Billing Information: Payment details processed by our third-party payment gateways.
- Campaign Data: Phone numbers, names, and scripts you upload for your calling campaigns.
B. Information Processed via the Service (End-User Data)
- Voice Recordings: Audio recordings of conversations between the AI agent and End Users.
- Transcripts: Text-based transcriptions of these conversations.
- Telephony Metadata: Call duration, timestamps, success/failure status, and caller IDs.
3. How We Use Information
We use the collected data for the following purposes:
- To Provide the Service: To initiate calls via telephony providers, process voice via LLMs, and store results for your review.
- Platform Maintenance: To troubleshoot technical issues and monitor system uptime.
- Billing & Administration: To manage your subscription and send administrative alerts.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Note on AI Training: We do not use your proprietary Client Data or End-User voice recordings to train our general public AI models. Your data remains isolated to your account usage.
4. Sub-Processors and Third Parties
To provide our Service, we utilize trusted third-party vendors ("Sub-processors"). By using Oravaa, you agree to the processing of data by the following entities:
| Category | Provider(s) | Purpose |
|---|---|---|
| Telephony | Twilio, Exotel | Connecting calls and handling phone lines. |
| AI & LLM | OpenAI, Anthropic, Google Cloud, Groq, xAI | Processing voice inputs and generating intelligent text responses. |
| Cloud Hosting | AWS (Amazon Web Services) | Secure storage of databases, recordings, and transcripts. |
We may update this list from time to time. We ensure legally binding data processing agreements (DPAs) are in place with these providers.
5. Voice Data & Retention
- Recording: All calls processed through the platform are recorded by default as per the Service functionality.
- Retention Period: We retain call recordings and transcripts for one (1) year from the date of creation. After this period, data is automatically deleted or anonymized, unless you (the Client) delete it sooner.
Human Access:
- By You: You have full access to listen to and review recordings generated by your account.
- By Oravaa: Oravaa personnel do not listen to recordings in the normal course of business. Access is granted only in rare cases for critical technical debugging or when required by law, and is strictly limited to authorized engineering staff.
6. International Data Transfers
Enigma Ventures Pvt. Ltd. is incorporated in India. Our servers are currently hosted on AWS (which may include regions in the US, India, or elsewhere).
For EU/EEA Users: If you are located in the European Union, note that your data may be transferred to India or the United States. We rely on Standard Contractual Clauses (SCCs) and strict data security measures to ensure your data is protected in accordance with GDPR standards.
7. Your Rights & Opt-Outs
Depending on your location, you may have rights regarding your personal data, including access, correction, deletion, and portability.
Website Visitor Opt-Out (RB2B/Retention.com)
- General Opt-Out: You may opt out of receiving advertising based on visitor identification by visiting https://app.retention.com/optout.
- GDPR Opt-Out: You also have the option to opt out of the collection of your personal data in compliance with GDPR. To exercise this option, please visit https://www.rb2b.com/rb2b-gdpr-opt-out.
To exercise other rights (such as deleting your account data), contact us at contact@oravaa.com.
If you are an End User (a person who received a call) and wish to exercise these rights, please contact the business (our Client) that called you directly. As a Processor, we will assist our Client in fulfilling your request.
8. Client Responsibilities (Important)
As a user of Oravaa, You acknowledge and agree that:
- You have obtained all necessary consents from the individuals you are calling.
- You comply with all local laws regarding call recording (e.g., "One-Party" vs. "Two-Party" consent laws).
- You will not use the platform for illegal purposes, harassment, or fraud.
9. Security
We use industry-standard encryption (SSL/TLS) for data in transit and AES-256 encryption for data at rest on AWS. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Contact Us
If you have questions about this Privacy Policy, please contact us: