Privacy

Privacy policy.

What personal data Govodo handles, why, who else sees it, and what you can ask us to do with it.

Who we are

Govodo is a platform for AI agents that answer and place phone calls and follow up over WhatsApp, SMS, email and web chat. It is built and run by Scrini AI ("Scrini", "we", "us"). This policy covers this website, the Govodo console and admin portal, the Govodo API, and the calls and messages Govodo handles.

Our role

We handle personal data in two different capacities.

  • For our customers. A business using Govodo ("a customer") decides whom its agents call or message, what they say and what they record. For those calls and messages, we act on the customer's instructions. The customer is responsible for that data, and its own privacy notice applies.
  • For ourselves. For people who visit this site, and for the people who sign in to Govodo for a customer, we decide what is collected and why.

If a business called or messaged you using Govodo, please contact that business first about your data. If you contact us instead, we will pass your request to them and help them answer it.

What we collect

People who sign in to Govodo

  • Name, email address, role and the workspace you belong to.
  • Your password, stored only as a salted bcrypt hash.
  • When you last signed in, and a record of each request made with an API key.
  • If you sign in with Google, an email link or a code by SMS, your email address or phone number goes to Google's Firebase Authentication, which handles that sign-in.

People our customers' agents talk to

What is collected depends on how the customer has set Govodo up. It can include:

  • Contact details: phone number, and the name, email address and other details a customer uploads in a calling list.
  • Call recordings: one recording per call with both sides of the conversation. Recording is on unless the customer turns it off.
  • Transcripts and summaries of calls and conversations, and a quality score.
  • Details taken down in the conversation, such as a name, an email address, an appointment, an order, or whether someone is interested.
  • Memory: a short summary and a few facts about a returning contact, such as preferences, kept so the agent does not have to ask again.
  • Messages sent and received over WhatsApp, SMS, email and the web chat widget.
  • For web chat: the page the chat was opened from, the browser type, and a short hash of the IP address used for rate limiting. A hash this short can be reversed, so we treat it as personal data.

Visitors to this website

In production, this site and the console use Google Analytics to count visits and the pages viewed. It sets cookies and sends Google your IP address, browser details and the pages you view. We do not send it your name, email address or account. Our web servers also record each request, including the IP address, as part of normal operation and security. Fonts are loaded from Google Fonts, which also receives your IP address. See the cookie policy.

How we use it

  • To run the service: place and answer calls, send messages, transcribe speech, generate the agent's replies, and write summaries and scores.
  • To keep it secure: verify sign-ins and requests, prevent abuse, and investigate problems.
  • To support customers, and to measure usage for billing.
  • To understand which pages of this site and the console are used, with Google Analytics.

We do not sell personal data, use it for advertising, or use it to train AI models of our own.

Who we share it with

Some parts of the service are provided by other companies. Each receives only what it needs for its part.

ProviderWhat it doesWhat it receives
Amazon Web ServicesHosting, database and file storageAll service data, stored in Mumbai
OpenAI, Google (Gemini), GroqLanguage models: the agent's replies, summaries, quality scores and memoryConversation text and context
Deepgram, AssemblyAI, Sarvam, SmallestSpeech recognitionCall audio
ElevenLabs, Cartesia, Sarvam, Smallest, RumikAgent voicesThe text the agent speaks
OpenAISearch over a customer's knowledge baseKnowledge-base text and search queries
Meta (WhatsApp Business), UnipileWhatsApp, email and other messaging, when a customer uses themMessages and contact details
Google (Firebase Authentication)Sign-in with Google, an email link or a code by SMSEmail address or phone number
Google (Analytics)Counting visits to this site and the console, in productionIP address, browser details, pages viewed
GoogleWebsite fonts; connection set-up for browser test callsIP address

A customer can also choose other providers for models, speech and voices, and connects its own phone carrier, calendar, CRM and other tools. Data a customer sends to services it chose is shared on that customer's instructions, under that service's own terms.

We may also disclose data when the law requires it, to protect people or the service from harm, or to a buyer of all or part of our business, who would be bound by this policy.

Where it is stored

Govodo's database and files, including call recordings, are stored on AWS in Mumbai, India. Several of the providers above process data outside India, mainly in the United States, while a call or message is handled.

How long we keep it

Conversation data is kept for 90 days and then deleted automatically. That covers call recordings, transcripts and summaries, chat and WhatsApp messages, caller memory, uploaded calling lists once their calls have been made, and our logs of webhook deliveries and API requests.

Records a customer chooses to keep in Govodo — leads, event invitees, appointments and orders — stay until the customer deletes them or closes the account. So do the customer's agents, knowledge bases and settings.

A customer can ask us to delete data before 90 days; for now our team does this on request. When an account closes, we delete its data on the customer's request, except where we must keep something by law. Information about a call in progress is held in memory for at most six hours.

Security

How we protect data, and what we have not built yet, is described on our trust page.

Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may have the right to:

  • see the personal data we hold about you,
  • have it corrected or deleted,
  • withdraw consent you have given,
  • name someone to exercise these rights for you, and
  • complain to us, and then to the data protection authority.

To use any of these, email us at the address below. For data we hold on a customer's behalf, we will pass your request to that customer and help them respond.

Govodo is a service for businesses and is not meant for children.

Changes to this policy

When this policy changes, we will update the date at the top. If a change materially affects how we use customers' data, we will tell customers before it takes effect.

Contact

For privacy questions, requests and complaints, email support@scrini.ai with "Privacy" in the subject.