DPDP / GDPR · Data Subject Rights

Your data, your call.

Whether you're our direct customer or one of their end-users (someone they called via CallFunnel.ai), you can exercise the following rights at any time. Identity verification takes 1-2 business days; the action itself is usually within 30 days of verification.

How to reach the DPO

One email: dpo@callfunnel.ai. Include: your name, the phone number / email you want us to act on, and which right you're exercising.

Your rights

• Right to access — A JSON copy of every record we hold about you. Includes call transcripts, timeline events, ledger entries, and metadata. Programmatic equivalent: POST /dsr/export.
• Right to correction — If anything is wrong (a mislabelled call, wrong name, etc.) — tell us; we'll fix it.
• Right to erasure — We delete everything we hold, subject to financial-record retention requirements (typically 7 years for ledger). Transcript erasure is immediate. Programmatic equivalent: POST /dsr/erase.
• Right to data portability — Same JSON output as access; you own it.
• Right to object — To processing for direct marketing. We don't market to end-users, so this is moot in practice, but it's still your right.
• Right to nominate — DPDP specifically: you can nominate someone to exercise these rights on your behalf.
• Right to grievance redressal — If you're not satisfied with our response, you can escalate to the Data Protection Board of India (when operational) or your local DPA.

Identity verification

We verify identity before acting — otherwise anyone could erase anyone else's data. Verification = a one-time code sent to the phone number or email on file, plus a question only the data subject would know (e.g. last call date, last top-up amount). We don't ask for government ID.

Response times

• Acknowledgement: within 72 hours of receipt
• Identity verification: 1-2 business days
• Action: within 30 days of verification (DPDP statutory window)
• Complex requests (large data volumes): up to 60 days, with reasons in writing

Calls + recordings

Inbound and outbound calls placed via CallFunnel.ai may be recorded for transcription + quality. We require our customers to play a recording-disclosure preamble on calls — but they're the ones who play it; if you weren't notified, that's a complaint against them, not us. We'll honor your erasure request either way.

DNC + opt-out

Three ways to stop getting calls from a CallFunnel-powered campaign:

• Tell the bot during the call ("don't call me again") — it adds you to that tenant's DNC list immediately
• Say "stop calling me" on any call — your number is added to the Do-Not-Call list immediately
• Email dpo@callfunnel.ai with the number — we'll add it to every tenant's DNC, platform-wide