Privacy Notice & Data Protection Policy
Platform: Sancharya (Operated by Marketingko) • Location: Warangal, Telangana, India
Last Updated: September 19, 2026 • Version 2.4-DPDP
1. Roles & Applicability
This Privacy Notice informs Data Principals (users, visitors, enterprise clients, and call recipients) regarding how Marketingko (“Company”, “we”, “us”, or “Sancharya”), operating from Warangal, Telangana, India, collects, stores, processes, and protects digital personal data.
For registered account users, billing contacts, and platform administrators, Sancharya determines the purposes and means of data processing under Section 2(i) of the DPDP Act.
When enterprise clients upload prospect lists or initiate automated telephony calls, Sancharya processes phone numbers, audio streams, and transcripts solely on behalf of the client under Section 2(k).
2. Categories of Personal Data, Purposes & Retention
In compliance with Section 5 of the DPDP Act, personal data is processed solely for specified lawful purposes with defined retention limits:
| Category | Data Elements | Lawful Purpose | Retention Period | Legal Basis |
|---|---|---|---|---|
| Account & Identity | Full Name, Work Email, Phone, Company, Password Hash | Account provisioning, authentication, role-based access control | Duration of active account + 180 days post-deletion | Consent (Sec 6) |
| Voice & Audio Biometrics | Spoken audio waveforms, voice timbre, WebRTC streams | Real-time speech-to-text conversion and AI conversation handling | Ephemeral in memory; raw recordings purged per client retention setting (7–90 days) | Explicit Consent (Sec 6) |
| Telephony Metadata | Caller ID, Dialed Number, Call Duration, SIP Headers, Timestamps | Call routing, billing calculation (₹6/min), network troubleshooting | 2 years (Statutory TRAI & DoT telecom compliance) | Legal Obligation (Sec 7) |
| Lead & Qualification | Customer Name, Phone, Financial Budget, Buying Timeline, CRM Tags | Lead qualification, appointment booking, CRM dispatch | Client configurable or until erasure request | Consent (Sec 6) |
| Financial & Billing | Indian GSTIN, Invoicing Address, Transaction IDs, Credit balances | GST invoicing, wallet accounting, statutory audits | 8 years (Indian Income Tax & GST statutory retention) | Legal Obligation (Sec 7) |
3. Third-Party Sub-Processors & Data Transfers
Sancharya engages selected technical sub-processors under strict Data Processing Agreements ensuring security safeguards equivalent to Section 8(5) of the DPDP Act. We strictly prohibit sub-processors from training generalized foundational models on proprietary customer audio:
Processes real-time audio packets via DTLS-SRTP encryption. Zero persistent audio retention.
Data processed in Indian data centers for vernacular language recognition (Telugu, Hindi, Tamil).
Sub-second speech transcription and neural synthesis under zero-data-retention API contracts.
SOC 2 Type II certified credential management, MFA, and session encryption.
Enterprise real-time database with AES-256 encryption at rest and TLS 1.3 in transit.
Text prompts processed under zero-data retention (ZDR) enterprise terms.
4. Your Rights as a Data Principal
Under Chapter III (Sections 11, 12, 13, and 14) of the DPDP Act, 2023, you have enforceable legal rights:
5. Data Grievance Redressal Officer
In accordance with Section 8(9) and Section 13 of the DPDP Act, 2023, Marketingko has designated a Data Protection & Grievance Officer. If you have any inquiries, complaints, or wish to escalate an unresolved data request, contact:
If your grievance is not redressed within the statutory timeframe or you are dissatisfied with the resolution, you have the statutory right under Section 13(3) to escalate a complaint to the Data Protection Board of India (DPBI).