Privacy Policy

Last updated: 29 September 2026

1. What we collect

Account details you provide (name, email, organisation), the content and configuration of your agents and workflows, the messages your agents exchange with your customers, and usage/technical logs needed to run and secure the Service.

2. How we use it

To provide and operate the Service, run your AI agents, process payments, secure the platform, provide support, and — only if you opted in — send you product updates and news. We do not sell your personal data.

3. AI & third-party processing

To generate agent responses and speech in Indian languages, message content may be processed by AI/model providers (e.g. Sarvam and other LLM providers) and by the messaging channels you connect (WhatsApp, Telegram) and your payment provider. These are processed to deliver features you enable.

4. Storage & security

Data is stored per-tenant in isolated database schemas. Provider keys and channel secrets are encrypted at rest. Access is authenticated via Keycloak (OAuth2/OIDC with PKCE) and served over HTTPS. See the Security section on our homepage.

5. Email & communications

We send transactional email (verification, password reset, account notices). Marketing/news email is sent only to accounts that opted in, and you can opt out at any time.

6. Your rights

You can access and update your information in-product, export your tenant data, and request erasure of your account and data. Contact us to exercise these rights.

7. Retention

We retain data for as long as your account is active or as needed to provide the Service and meet legal obligations. On account deletion we remove your tenant data as described in our data-erasure process.

8. Cookies

We use essential cookies/local storage for authentication and preferences (such as your language). We keep non-essential tracking to a minimum.

9. Health data (VegaDūta Sentinels)

Sentinels in the VegaDūta mobile app read only the kinds of health data you choose when you add a sentinel (for example heart rate, sleep, steps or blood pressure), read-only, to compare your readings with your own usual range, alert you when something changes and write a short daily brief. This data is stored in an app-private database on your phone, and summaries are written by an on-device model or a fixed template, so no health data is sent to any AI service. Sync is off by default: only if you turn it on for a sentinel and your workspace admin allows it are that sentinel's findings uploaded to your own VegaDūta workspace, and raw readings only if you also choose that. Caregiver alerts go only to people you enter yourself, and only after you miss an "Are you OK?" check-in. Health data is never used for advertising, sold, or used to train models. You can pause all agents, delete a sentinel, or erase all sentinel data at any time, and revoke access in Health Connect. Sentinels is a wellness tool, not a medical device, and does not diagnose or treat any condition.

10. Third-party AI providers

Messages you send to cloud agents (chat, quick tasks and cloud assist, on the web and in the mobile apps) are processed by third-party AI model providers (for example OpenAI, Anthropic and Google) selected by your workspace, under contract, to generate replies. The mobile apps ask for your agreement before the first cloud request, you can change that choice in Settings, and on-device mode keeps everything on your phone. Health data from Sentinels is never included unless you paste it yourself.

11. Deleting your account

You can request deletion of your account by contacting us, or from within the mobile app where your deployment offers it. If you are the only person in your workspace, the whole workspace is deleted; in a shared workspace, your account and the data attributable to you are deleted and content owned by the organisation stays with it. See /account-deletion for the full details.

12. Contact

Privacy questions or requests? Email [email protected].