Privacy Policy

Effective 30 September 2026

In short: we use your data only to run ExoCall for you — calls, WhatsApp messages, billing and support. We never sell it or use your customers' calls and chats for advertising. To have your data deleted, email info@exocall.io (see Deleting your data).

1. Who we are

ExoCall (exocall.io and app.exocall.io) is an AI calling and messaging service operated by Exasys Educational Services Pvt Ltd("ExoCall", "we", "us"), 3rd Floor, A-308, Megh Malhar Residency, VT Nagar Road, Gate No 1, Simana, Surat-395006, Gujarat, India.

This policy explains what personal data we handle and why. It covers visitors to our website, businesses that use ExoCall ("customers") and their team members, and the people our customers call or message through ExoCall. We follow the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

2. Our role

For our own website visitors, enquiries and customer accounts, ExoCall decides how the data is used and is responsible for it.

For the contacts, calls and WhatsApp conversations of a customer's own customers, ExoCall processes the data on behalf of that customer and only on their instructions. The customer decides whom to call or message and is responsible for having consent to do so. If a business contacted you through ExoCall, you can ask that business directly, or write to us and we will pass your request on and stop further calls to your number.

3. What we collect

  • Website visitors and enquiries: what you send us through the contact or demo form (name, business name, phone, email, message) and basic usage data collected by cookies (see section 7).
  • Customer accounts: name, email, mobile number (verified by an SMS code), business name, login history, and billing details such as legal name, GSTIN, state and payment records.
  • Business verification: details and documents a customer submits to use an ExoCall phone number (for example PAN, GSTIN, registration certificates and the authorised person's details).
  • Calls: the phone numbers and details of leads a customer uploads or sends by API, call recordings, transcripts, and the AI analysis of each call (summary, lead score, next action).
  • WhatsApp: when a customer connects their WhatsApp Business number to ExoCall, the messages sent and received on that number through ExoCall, delivery and read status, and — if the customer chooses to sync them — their WhatsApp contacts and past chat history. See section 5.

4. How we use it

  • To provide the service: answer and place calls, send and receive WhatsApp messages, and show the results to the customer.
  • To create and secure accounts, verify phone numbers and businesses, and prevent misuse of phone numbers.
  • To bill customers and issue GST invoices.
  • To reply to enquiries and give support, including calling or messaging people who asked for a demo.
  • To send product updates to customers and enquirers, which anyone can unsubscribe from with the link in each email.
  • To meet legal obligations, such as telecom (TRAI) rules and tax law, and to handle complaints.

We do not sell personal data, and we do not use our customers' call or WhatsApp data for advertising.

5. WhatsApp data

ExoCall connects to WhatsApp through Meta's WhatsApp Business Platform (Cloud API). A business connects its own WhatsApp Business number through Meta's signup window, which shows exactly which permissions it grants; if the number is on the WhatsApp Business app, it keeps working there too.

  • We use WhatsApp data only to send and receive messages for the business that owns the number, and to show those conversations to that business in its ExoCall dashboard.
  • We do not sell it, share it with other customers, or use it for advertising or to build profiles.
  • Contact and chat-history sync happens only if the business chooses it during signup.
  • The business can disconnect its number at any time — from ExoCall, from its Meta Business settings, or by removing ExoCall under Facebook Settings → Business integrations. We then stop accessing the number and delete the stored data as described in section 10.
  • People who receive messages can reply "STOP" or ask the business to stop, and the business must honour it.

6. Who we share it with

We share personal data only with service providers that ExoCall needs to run, and only for that purpose:

  • Exotel — telephone numbers and call connectivity.
  • Google — Gemini AI for the voice agent and call analysis, and Google Workspace for email and our own contacts.
  • Meta — the WhatsApp Business Platform, when a customer connects WhatsApp.
  • Payment gateways (Razorpay or Cashfree) — to take online payments.
  • SMS provider — to send phone-verification codes.
  • Hosting and database providers — to store and run the service.

We may also disclose data when the law requires it, for example to a court, regulator or telecom authority, or to protect people from harm or fraud.

7. Cookies and analytics

The ExoCall dashboard uses a cookie to keep you signed in. Our public website uses Google Analytics and the Meta Pixel to understand visits and measure our advertising; they set cookies in your browser. You can block or delete these cookies in your browser settings without affecting the dashboard.

8. How long we keep it

We keep customer data while the account is active. When a customer closes their account or asks us to delete their data, we delete it as described in section 10. We keep invoices and payment records for as long as Indian tax law requires, and may keep a limited record of a deleted account where needed to handle a complaint or legal claim.

9. Security and your rights

Data is sent over encrypted connections (HTTPS), access to the dashboard is limited to each customer's own team, verification documents are stored privately, and secrets such as API keys and access tokens are never shown in the browser.

You can ask us for a summary of the personal data we hold about you, to correct it, or to delete it, and you can withdraw consent you gave us. Write to info@exocall.io; we reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

10. Deleting your data

To ask us to delete your data:

  • Email info@exocall.io with the subject "Delete my data", or WhatsApp +91 73597 19164. Send it from the email or phone number linked to your account or enquiry, so we can confirm it is you.
  • If you connected WhatsApp or Facebook to ExoCall, you can also remove ExoCall under Facebook Settings → Business integrations. This stops our access immediately; email us as well if you want the data we already stored deleted.
  • If a business called or messaged you through ExoCall, tell us the phone number. We will add it to that business's Do Not Call list and pass your deletion request to the business.

We confirm the request and delete your account data, call recordings and transcripts, WhatsApp messages and synced contacts within 30 days, except records we must keep by law (section 8). We will confirm by email or WhatsApp when it is done.

11. Changes and contact

We may update this policy; the effective date at the top shows the current version, and we will tell customers about material changes by email or in the dashboard.

Questions, requests or complaints about privacy (grievance contact): info@exocall.io or WhatsApp +91 73597 19164.
Exasys Educational Services Pvt Ltd, 3rd Floor, A-308, Megh Malhar Residency, VT Nagar Road, Gate No 1, Simana, Surat-395006, Gujarat