Privacy policy

Damaruka is made by 4UGUSTA Systems Private Limited (CIN U62011BR2026PTC084868), A.P. Colony, Gaya, Bihar 823001, India. Write to augusta@4ugusta.agency about anything in this policy; Augusta Bhardwaj, our director, answers privacy questions and complaints himself.

Businesses that use Damaruka, and the people they sign in: for this information we decide what is collected and why, and this policy describes it.

People who call a business that uses Damaruka: we handle their calls for that business and on its instructions, as its service provider (a processor, or under HIPAA a business associate). The business decides what happens to its calls. If you called a business, ask it first; if you ask us, we pass your request to it and help it answer.

• From a business owner: your name and email address from Google when you sign in; your business's name, address, hours, services and answers, including what we read from the website you ask us to read; the email addresses and phone numbers you want alerts sent to (a code confirms each number, and we keep only the code's fingerprint); a sealed token for the calendar you connect; sealed keys for apps you connect; your plan and its status.
• Payments: our payment processors take your card or bank details directly. We see the plan, the amounts and whether a payment went through, never your card number.
• An access log: each time a call is opened, played or deleted, each sign in and sign out, and each change to what is kept or where it is sent, with the person, the time and the internet address it came from.
• From a caller, for the business they called: the recording (from just before Damaruka's greeting, which says the call is recorded), the transcript, a summary, what Damaruka wrote down (such as a name, a number, a reason and an appointment) and the number the call came from.
• From visitors to this site: nothing for analytics or advertising. If you use Talk to Damaruka, we keep your internet address for two days to limit how often the demo can be used; the demo call itself is never recorded or kept.

One cookie keeps a signed in owner signed in, and a second lasts a few minutes while a calendar is connected. Your browser also remembers one choice you make while setting up. We use no advertising, analytics or tracking cookies, so there is nothing to opt out of; we treat a Global Privacy Control or Do Not Track signal as the choice it expresses.

• To answer the business's calls, book and change its appointments, take messages and tell it about each call.
• To show the business its calls, recordings and transcripts, and nobody else.
• To bill for the plan, keep accounts secure (the access log, limits on codes and demo calls) and answer support requests.
• To meet legal duties.

We do not sell personal information, share it for targeted advertising, or use calls or anything a caller says to train AI models.

Only the service providers we need to run Damaruka, each bound by contract to use the information only for us:

• A real time voice platform and the AI providers it connects us to, in the United States, which carry the call's audio, turn speech into text, write Damaruka's replies and speak them.
• For Hindi calls in India, a speech provider in India.
• Telephone carriers in the United States and India, for calls and texts.
• An email delivery provider in the United States, and for Indian businesses that turn it on, WhatsApp.
• Hosting providers, in the United States.
• Payment processors, for plans paid in dollars and in rupees.
• The calendar and the apps a business connects, which receive what that business sends them.
• Professional advisers, authorities when the law requires it, and a buyer if the company is ever sold (with notice to you first).

• Calls, recordings and transcripts: 90 days, or the 7, 30, 180 or 365 days the business chooses. A business can delete any call at any time.
• Messages Damaruka sent about a call: 30 days after sending, or sooner if the call is deleted.
• The access log: six years, the period HIPAA asks records like it to be kept. It never holds what a caller said.
• Demo visitors' internet addresses: two days.
• An account and its business: until the owner deletes the business, which deletes every call, recording and setting it holds at once. Backups of deleted information expire within 35 days.

Every clinic in the United States has health privacy on, and any other business can turn it on: emails and texts about a call then carry no caller's name, number, reason or summary, apps that would receive call details are off, and the console signs its user out after 30 minutes without use. Damaruka does not claim HIPAA compliance and does not sign business associate agreements yet; the recording and safety page will say so the day it does.

Wherever you live, you can ask us what we hold about you, to correct it, to delete it, or for a copy; and you can withdraw a consent you gave. Write to augusta@4ugusta.agency. We may need to confirm it is you, and we answer within 30 days. We do not treat you differently for asking.

In India, under the Digital Personal Data Protection Act, 2023, you may also nominate someone to act for you, and if we do not resolve a complaint you may take it to the Data Protection Board of India. Our grievance officer is Augusta Bhardwaj, at the address above.

In US states with privacy laws, these are the rights to know, access, correct and delete. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of.

Calls are shown only to the people signed in to the business, through Google; every opening is logged; the tokens and keys a business gives us are encrypted before they are stored; and information travels encrypted. No system is perfectly secure. If a breach affects you, we will tell you, or the business you called, as the law requires.

We are based in India. Our hosting and most of our service providers are in the United States; calls to Indian businesses also pass through providers in India. When information moves between countries, our contracts require the same care.

Damaruka accounts are for businesses and adults. Anyone may call a business that uses Damaruka, and those calls are handled for that business as described above.

When this policy changes, the new version is posted here with its date, and owners are emailed about any change that matters to them before it takes effect.