Last updated 17 August 2026
Privacy
Hridaya answers phone calls and WhatsApp messages for local businesses. Doing that means handling the phone number of whoever calls, so this page explains exactly what is kept, why, who else sees it, and how to have it deleted. It is written to be read, not to be skipped.
Who we are
Hridaya is a product of Dial Vola, based in Pune, Maharashtra, India. You can reach us at WhatsApp.
Two different people are involved
It matters which one you are, because the answers differ.
- The business — the salon, clinic or hotel that signs up for Hridaya. It decides what Hridaya says and what happens to its customers' details. In the language of India's Digital Personal Data Protection Act, 2023, the business is the Data Fiduciary.
- The caller — a customer of that business, who rings or messages and speaks to Hridaya. Their details belong to the business, not to us. We only hold them so that Hridaya can do the job the business asked it to do. We are the Data Processor.
Practically: we never sell, rent or share a client's customer list, and we never use one business's customers to market to anybody, including on our own behalf.
What we collect, and why
From the business
- The name of the business, its address, its owner's name, email and phone number — so we can set the service up and contact you about it.
- The information you type in for Hridaya to use: prices, opening hours, services, staff names, the daily note. This is what Hridaya answers from, and it is the only thing it answers from.
From your callers
- Their phone number, which arrives with the call or message. This is the point of the product — a missed call with no number is a lost customer.
- What they asked and what Hridaya replied, as text. We keep the words so you can see what was said on your behalf, and so a wrong answer can be traced and fixed.
- Booking details they give — a first name, and the day and time they want.
- How long the call lasted, because your plan is counted in minutes.
We do not ask for and do not want payment card details, identity numbers, Aadhaar, or medical information. If a caller volunteers something like that, Hridaya is not built to act on it.
Calls are answered by an assistant, not a person
Hridaya is software. If a caller asks whether they are speaking to a real person, it says that it is not. We will not pretend otherwise to your customers — beyond being the right thing to do, a customer who feels tricked blames the shop, not the software.
Hridaya also will not invent an answer. If something has not been written down by the business, it says so, takes the caller's number, and tells the owner to call back.
Outbound calls to your own customers
On the Growth plan, Hridaya can ring a business's existing customers with an offer. Three rules apply, and they are not optional:
- The business must upload only its own customers — people who have already dealt with it. Bought lists and scraped numbers are not allowed.
- Anyone who asks not to be called again is added to a do-not-call list and is never rung again. That list is checked before every single call, and if the check cannot be completed the call does not go out.
- Calls are made only during ordinary daytime hours, and TRAI's regulations on commercial calling in India apply.
Who else sees it
We do not run every part of this ourselves. These are the companies involved, and what each one handles:
- ElevenLabs — the voice. It processes the words spoken on a call in order to hear and speak them.
- Google — the language model that works out the reply to a WhatsApp message.
- Twilio and Plivo — connecting the actual phone calls and WhatsApp messages.
- Supabase — the database where bookings, leads and message history are stored.
- Vercel and Render — the hosting the website, dashboard and service run on.
Some of these process data on servers outside India. Each is used under its own terms and only for the job listed above. Nobody on this list is given data to use for their own purposes, and nobody buys data from us, because we do not sell it.
How long we keep it
- While you are a client — bookings, leads and message history stay available in your dashboard, because that is what makes them useful.
- If you leave — tell us and we delete your business's data, including your customers', within 30 days. Ask for an export first and you will get one.
- Do-not-call entries are kept even then. A number that asked never to be called again has to survive, or the request would quietly expire.
Your rights
Under the DPDP Act you may ask what we hold about you, ask for it to be corrected, and ask for it to be erased. Write to us at WhatsApp and we will answer within 30 days.
If you are a caller rather than a business, ask the business you rang — the details are theirs, so they decide, and we will act on their instruction. If you cannot get anywhere with them, contact us and we will help.
Security
Everything travels over encrypted connections. The database enforces row-level security, so one business physically cannot read another's rows even if something goes wrong in the application above it. Access to the systems is limited to the people who need it — at Dial Vola's present size, that means Harsh.
No system is perfect. If we ever discover a breach affecting your data we will tell you and the Data Protection Board, as the law requires, rather than hope you do not notice.
Children
Hridaya is sold to businesses and is not intended for children. We do not knowingly collect data about anyone under 18 beyond a phone number that happens to ring in.
Changes
If this page changes in a way that affects you, we will tell you rather than quietly edit it. The date at the top always reflects the current version.