Privacy Policy

Chariot Artificial Intelligence Pvt Ltd is an Indian company with its registered office at:

For privacy, data protection, legal, abuse, or support-related requests, you may contact us at [email protected], unless we provide a different contact method.

This Privacy Policy applies to information we process in connection with the Services, including our website, platform, APIs, dashboards, free-tier services, paid self-serve services, demos, trials, stock voices, text-to-speech features, automatic speech recognition features, transcription features, custom voice features, voice cloning features, voice agents, call-related features, and other speech or AI systems that we may make available.

When Chariot processes account, billing, website, analytics, support, security, and platform administration data, Chariot generally acts as an independent data fiduciary, controller, or similar responsible party under applicable law.

When Chariot processes Customer Content submitted by or on behalf of a business customer through the Services, Chariot may process such data on behalf of that customer, subject to our Terms of Use, this Privacy Policy, and any applicable order form, Data Processing Addendum, or other written agreement.

This Privacy Policy does not apply to third-party websites, products, services, platforms, payment processors, telecom providers, cloud providers, or integrations that are not owned or controlled by Chariot. Their privacy practices are governed by their own policies.

“Personal Data” means information that relates to an identified or identifiable individual, and includes similar concepts such as “personal information” where applicable.

“Customer Content” has the meaning given in our Terms of Use and includes data, text, prompts, scripts, audio, recordings, voice samples, files, phone numbers, call data, metadata, transcripts, instructions, generated outputs, or other content submitted to, processed through, generated by, or stored in the Services by you or on your behalf.

“Voice Data” means voice recordings, audio samples, speech data, voice characteristics, generated voices, voice models, voice profiles, and related audio-derived information processed through the Services.

We may collect the following categories of information.

4.1 Account and Contact Information

When you create an account, contact us, subscribe, purchase credits, or use the Services, we may collect information such as name, email address, phone number, company or organization name, job title or role, account login details, billing and tax information, communication preferences, and support, legal, privacy, and abuse correspondence.

4.2 Payment and Billing Information

Payments may be processed by third-party payment processors such as Razorpay or other providers we may use from time to time. We may receive limited payment-related information such as payment status, transaction ID, plan, invoice details, billing address, tax information, and partial payment method information.

We do not intentionally collect or store full payment card numbers through the Services unless expressly stated. Payment processors may process payment information under their own terms and privacy policies.

4.3 Customer Content

When you use the Services, you may submit, process, or generate information including text prompts, scripts, input text, generated audio, uploaded audio, voice samples, short or long voice recordings, custom voice data, voice models or voice profiles, ASR audio, transcripts, call recordings, call transcripts, call scripts, phone numbers, call metadata, instructions, files, generated outputs, and other data submitted to or generated by the Services.

Customer Content may include Personal Data relating to you, your employees, your customers, your users, call recipients, speakers, or other third parties.

4.4 API, Usage, and Log Data

We may collect technical and usage information such as API requests and responses, API keys and account identifiers, timestamps, model, voice, and feature usage, request IDs, latency, error, and performance data, device and browser information, IP address, approximate location derived from IP address, operating system, referral URLs, pages viewed, session data, dashboard activity, security logs, abuse-prevention logs, product analytics, and other diagnostic, operational, and usage information.

4.5 Voice and Audio Data

Our Services involve speech and voice technologies. Voice recordings, audio samples, generated voices, custom voice models, transcripts, and call recordings may identify or be associated with a person and may be regulated differently across jurisdictions.

Chariot may process Voice Data to provide, operate, secure, evaluate, train, improve, and develop the Services; generate speech or transcripts; support custom voice features where available; prevent abuse; investigate unauthorized cloning or impersonation; detect synthetic or manipulated audio; comply with law; and enforce our policies.

You must not submit a person’s voice, recording, or other Personal Data unless you have all required rights, permissions, consents, notices, and legal bases to do so.

4.6 Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage, session replay tools, analytics tools, and similar technologies to operate, secure, improve, and analyze the Services, remember preferences, understand usage, and support marketing or attribution. Please see our Cookie Notice for more information.

4.7 Device and Browser Permissions

If you use browser or device features such as microphone access, file upload, audio recording, camera access, or media permissions, your browser or device may ask for permission. You can change permissions through your browser or device settings. Some Services may not function properly if permissions are disabled.

4.8 Information from Third Parties

We may receive information from third parties such as payment processors, cloud providers, telecom providers, analytics providers, authentication providers, support tools, business partners, resellers, security providers, publicly available sources, licensed or third-party datasets, and users who invite or refer you to the Services.

We may use publicly available, licensed, purchased, or third-party datasets to train, evaluate, and improve our models and systems, subject to applicable law and applicable license terms.

Depending on the context and applicable law, we process Personal Data based on consent, performance of a contract, compliance with law, legitimate business interests, or other lawful grounds available under applicable law.

We may use information to provide and operate the Services; create and manage accounts; authenticate users; provide APIs, dashboards, models, voices, outputs, transcripts, and related features; process text, audio, recordings, transcripts, and other Customer Content; generate speech, audio, transcripts, and outputs; manage credits, subscriptions, billing, invoices, and payments; provide customer support; communicate with you; maintain service functionality; improve, train, evaluate, and develop models and services; maintain safety, security, and abuse prevention; comply with law; enforce rights; and protect Chariot, users, third parties, and the public.

Unless you opt out as described below, we may use Customer Content and usage data, including inputs, outputs, prompts, scripts, audio, transcripts, generated audio, call data, Voice Data, metadata, and other information processed through the Services, to improve, evaluate, train, fine-tune, test, secure, and develop our models, products, systems, and Services.

Where practical, we may use filtering, aggregation, de-identification, or other measures designed to reduce direct identifiability in training, evaluation, analytics, and product improvement workflows.

Free-tier, demo, trial, playground, or unpaid usage may be used for product improvement, analytics, safety, evaluation, training, and model development unless prohibited by applicable law or separately agreed in writing.

We may review, analyze, or use automated systems to evaluate Customer Content, inputs, outputs, Voice Data, transcripts, and metadata for abuse prevention, fraud prevention, security, debugging, policy enforcement, and safety. We may share limited data with vendors or service providers who assist with moderation, security, abuse prevention, or compliance.

You may request to opt out of our use of Customer Content for model training and improvement by contacting [email protected] or by using any opt-out setting we may make available in the platform.

Opt-out requests may apply prospectively and may be subject to reasonable processing time, technical limitations, and any separate written agreement between you and Chariot.

Even if you opt out of model training, we may still process Customer Content and usage data as necessary to provide the Services, generate outputs, debug and troubleshoot, ensure safety and security, prevent abuse, fraud, or unauthorized use, comply with law, enforce our Terms, and maintain business, billing, and security records.

Opting out does not affect uses of Customer Content before the opt-out is processed, or materials, learnings, aggregated data, de-identified data, model improvements, safety improvements, or system improvements already created before the opt-out is processed.

You are responsible for determining whether your Customer Content or use of the Services involves sensitive, regulated, confidential, or legally protected information, including health information, financial information, government identifiers, children’s data, biometric data, voice data, or other regulated data.

You must ensure that you have all required rights, permissions, consents, notices, lawful bases, and safeguards required for Chariot to process such data in connection with the Services.

Chariot may require additional terms, consents, safeguards, verification, approvals, or a separate written agreement for certain regulated, sensitive, high-risk, enterprise, healthcare, financial, children’s, biometric, or similar use cases.

You may not submit or process such data through the Services in violation of applicable law, our Terms of Use, this Privacy Policy, or any applicable Supplemental Terms.

We may share information with service providers and vendors who help us operate the Services, such as cloud hosting providers, storage providers, GPU and infrastructure providers, payment processors such as Razorpay, telecom and communications providers, analytics providers, customer support tools, email and notification providers, authentication and security providers, logging, monitoring, and observability tools, moderation, safety, and abuse-prevention providers, and professional advisers such as lawyers, accountants, auditors, and consultants.

If you use the Services through an organization, use an organization-owned email address, or access the Services under a company account, we may share account, usage, billing, security, and Customer Content information with that organization or its administrators where appropriate.

We may disclose information if we believe it is necessary or appropriate to comply with law, respond to legal process or government requests, enforce our Terms and policies, investigate fraud or abuse, respond to rights complaints or takedown requests, or protect the rights, property, safety, or security of Chariot, users, third parties, or the public.

We may share or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, due diligence, or similar transaction involving all or part of our business.

We may share information when you direct us to do so, integrate with a third-party service, invite another user, authorize disclosure, or otherwise consent.

We do not sell your Personal Data to third parties for money. We may share information with service providers, vendors, business partners, and other parties as described in this Privacy Policy.

We are based in India, but we may process, store, or transfer information in India and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we will take appropriate steps to support lawful transfers of Personal Data.

We retain information for as long as reasonably necessary to provide, operate, secure, improve, and support the Services; comply with law; resolve disputes; prevent fraud or abuse; enforce agreements; collect payments; maintain backups; and satisfy legitimate business needs.

Because our Services are in beta and evolving, specific retention periods may vary depending on the type of data, feature, plan, customer settings, legal requirements, and operational needs.

We may retain certain information for longer periods where necessary for security, fraud prevention, billing, tax, accounting, legal compliance, dispute resolution, enforcement, backup, or legitimate business purposes.

We may retain de-identified, aggregated, anonymized, or non-identifying data for longer periods and use it for lawful purposes, including analytics, research, product improvement, safety, model development, and business operations.

You may request access, correction, deletion, consent withdrawal, or other action regarding certain Personal Data by contacting [email protected].

We may provide self-service account, export, deletion, or data-use controls in the platform from time to time. Until such controls are available, requests may be submitted by email.

We will respond to requests as required by applicable law. We may need to verify your identity and authority before processing a request.

Deletion requests may be subject to technical limitations, backup retention, billing records, fraud-prevention needs, legal obligations, security requirements, and legitimate business record retention. We may not be able to delete all data immediately or completely from backups, logs, archives, or records we are required or permitted to retain.

If you submit Personal Data relating to other people through the Services, you are responsible for handling requests from those people unless applicable law or a written agreement requires otherwise.

If you are in India, you may have rights under applicable law, including the right to access information about processing, request correction or erasure, withdraw consent where processing is based on consent, nominate another individual to exercise your rights in the event of death or incapacity, and raise grievances regarding our processing of your Personal Data.

You are responsible for ensuring that you have all required rights, permissions, consents, notices, and legal bases for any Personal Data, audio, voice recording, phone number, call recording, transcript, script, prompt, output, or other Customer Content that you submit to or process through the Services.

This includes responsibility for obtaining speaker consent for voice recordings and custom voices; providing call recording notices where required; obtaining consent for calls, outreach, telemarketing, or communications where required; honoring opt-outs and stop requests; complying with DND, telecom, privacy, consumer protection, and sector-specific rules; and ensuring that your use of Customer Content and outputs is lawful.

Chariot is not responsible for your failure to obtain required rights, consents, notices, or legal bases.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, logging, monitoring, restricted access to production systems, and other safeguards appropriate to the nature of the Services.

However, no system, network, model, API, storage system, or transmission method is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

You are responsible for securing your account, passwords, API keys, access tokens, systems, and integrations.

If we become aware of a security incident involving Personal Data, we will take steps we consider appropriate under the circumstances, which may include investigation, mitigation, user or customer notice, regulator notice, or other actions required by law.

The Services are not intended for direct use by individuals under 18 unless Chariot expressly permits such use.

You must not submit Personal Data, voice recordings, audio, transcripts, call recordings, or other data relating to children unless you have all required rights, consents, notices, lawful bases, and safeguards required by applicable law and any applicable Supplemental Terms.

We may use cookies and similar technologies for purposes such as essential site and platform functionality, authentication, security, fraud prevention, remembering preferences, analytics and performance measurement, product improvement, session replay or product usage analytics where used, marketing attribution, debugging, and performance monitoring. Please see our Cookie Notice for more information.

The Services may integrate with or rely on third-party services, including payment processors, cloud providers, telecom providers, analytics tools, authentication providers, customer support tools, and other vendors.

We are not responsible for the privacy practices, security practices, or content of third-party services. You should review their privacy policies and terms.

We may update this Privacy Policy from time to time. We may notify you by posting the updated Privacy Policy on our website or platform, sending an email, displaying a dashboard notice, or using another reasonable method.

The updated Privacy Policy will be effective when posted or as otherwise stated. Your continued use of the Services after the effective date means you acknowledge the updated Privacy Policy.

Disputes relating to this Privacy Policy are subject to the dispute resolution provisions in our Terms of Use, unless applicable law requires otherwise.

For privacy questions, data requests, grievances, abuse reports, legal notices, or support-related matters, contact:

Please include enough information for us to understand and respond to your request, including your name, account email, organization if applicable, the nature of your request, and any relevant details.