Privacy Policy — Vagary Voice
Effective date: 2026-07-29 · Version: v2.0
Operated by: Vagary Labs LLP ("we", "us", "our"), an Indian Limited Liability Partnership (LLPIN ADA-4675), registered office House No. 418 Ward No. 38, Chandni Takij Road, Satna, Kotwali, Raghurajnagar, Satna - 485001, Madhya Pradesh, India.
Applies to: vagaryvoice.cloud, portal.vagaryvoice.cloud, and the Vagary Voice product.
This policy describes how we collect, use, share, and protect your personal data, and your rights as a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDP) of India. For users in the European Union/EEA, our GDPR posture is set out separately (see "EU/EEA users" below).
1. Who we are (Data Fiduciary)
Vagary Labs LLP is the Data Fiduciary for Vagary Voice. Contact: [email protected].
2. Grievance Officer / DPDP contact (mandatory)
For privacy questions, consent withdrawal, or to exercise your rights, contact our Grievance Officer: Chinmay Ramraika — [email protected]. We will acknowledge and respond within the timeline required by law.
3. What data we collect
- You provide: account and billing details, contact info, and content/inputs you submit — including voice recordings, transcripts, and prompts you provide to the service.
- Collected automatically: device/usage/log data, IP address, and cookies or similar identifiers (see our Cookie Policy at vagaryvoice.cloud/cookie-policy). On our public pages this includes analytics and advertising identifiers, which are set only after you consent to the relevant cookie category.
- Payment and subscription data: your subscription tier, billing period, invoice and payment-event records. Card details are entered directly with our payment processor; we neither receive nor store card numbers.
- From third parties: our payment processor (payment status and subscription events), and the AI, voice and telephony providers named in §7, which return processing results to us.
- We do not collect more than is necessary for the stated purposes (data minimisation).
4. Why we use it & our lawful basis
We process your data on the basis of your consent or a legitimate use permitted by DPDP. Our purposes are:
- Providing and securing the service — including processing your voice inputs to produce outputs, authentication, abuse prevention and reliability. Basis: performance of the service you asked for / legitimate use.
- Billing and payments. Basis: performance of the contract and our legal obligations.
- Support and service communications. Basis: performance of the service. Marketing messages only where you opt in.
- Measuring and improving the product (product analytics). Basis: your consent, given through the cookie consent control described in §5. Analytics do not run until you consent.
- Advertising on our public pages — we carry third-party advertising on vagaryvoice.cloud and portal.vagaryvoice.cloud, and those partners measure ad delivery. Basis: your consent. Advertising tags do not load until you consent.
- Legal compliance. Basis: our legal obligations.
We will not use your data for a new, incompatible purpose without fresh notice and consent. We do not use your voice recordings, transcripts or prompts to train our own models.
5. Consent & withdrawal
Consent is collected in two distinct places.
- Cookies, analytics and advertising. On your first visit we show a consent banner that names each non-essential category — analytics and advertising — and lets you accept or reject them individually. Nothing outside the strictly-necessary category loads until you opt in. We record your choice with a timestamp, this policy's version, and the categories you selected, both in your browser and in a server-side consent log.
- Your account. When you create an account you accept these documents as a whole. That acceptance is a single act and is not itemized by purpose.
You may withdraw consent at any time, as easily as you gave it. Use the Cookie settings control available on every page to re-open the consent banner and change or withdraw any category, or write to [email protected] or Chinmay Ramraika — [email protected]. Withdrawal does not affect processing already carried out lawfully. On withdrawal we stop the relevant processing and erase the relevant data unless retention is legally required.
6. Children's data
We require verifiable parental/guardian consent before processing the personal data of a child and do not direct the service at children.
7. Sharing & disclosure — our sub-processors
We share data only with: Data Processors acting on our instructions under contract; legal or regulatory authorities where required by law; and successors in a corporate transaction. We do not sell personal data.
These are the processors Vagary Voice engages today:
| Provider | Purpose | Data categories received | Processing location |
|---|---|---|---|
| Hostinger operations, UAB | Virtual private server hosting for every Vagary Voice service and database | All data the service stores or processes | Lithuania (European Union) |
| Cloudflare, Inc. | Content delivery, DNS and edge security for our domains | IP address, request metadata, security signals | Global edge network |
| Deepgram, Inc. | Speech-to-text transcription of session audio | Voice audio and the resulting transcripts | Outside India — see the provider's own privacy policy |
| ElevenLabs Inc. | Text-to-speech synthesis of the service's spoken output | Text to be spoken, and the synthesised audio | Outside India — see the provider's own privacy policy |
| OpenAI, L.L.C. | Language-model processing of conversation content | Prompts, transcripts and conversation context | Outside India — see the provider's own privacy policy |
| Google LLC (Gemini API) | Language-model processing of conversation content | Prompts, transcripts and conversation context | Global (Google infrastructure) |
| Twilio Inc. | Telephony — inbound and outbound calls and phone numbers | Phone numbers, call metadata, call audio in transit | Outside India — see the provider's own privacy policy |
| Stripe, Inc. | Payment processing and subscription billing | Name, email, billing address, payment method and transaction records; card data is collected by Stripe, not by us | Outside India — see the provider's own privacy policy |
| Google LLC (Analytics 4, Tag Manager, AdSense) | Website analytics and advertising on our public pages, after consent | Cookie and advertising identifiers, IP address, page-view and interaction data | Global (Google infrastructure) |
| PostHog, Inc. | Product analytics, after consent | Pseudonymous device or user identifier, product events, IP address | United States (us.i.posthog.com) |
Where a specific region is not stated above, processing takes place outside India on that provider's own infrastructure, as described in that provider's privacy policy.
Error reporting is not shared with a third party. The service reports application errors to our own self-hosted error store, running on the infrastructure described above. Personal fields are scrubbed before an error is sent. No error-tracking vendor receives your data.
Providers the platform supports but does not currently engage. Vagary Voice can be configured to use further providers — Telnyx, Plivo, Vonage, Exotel, Ozonetel and Smartflo for telephony, Cartesia for speech synthesis, Anthropic for language models, and Google Sign-In for social login. None of them is configured for the service as operated today and none receives any data. If we engage one, we will update this policy and the table above before doing so.
8. Cross-border transfer
Your data is processed outside India. Our servers and databases are hosted in Lithuania, in the European Union. Our product-analytics provider processes data in the United States. The AI, voice, telephony and payment providers named in §7 process data on their own infrastructure outside India, in the regions described in their own privacy policies.
We transfer personal data only as permitted by DPDP and not to any country restricted by the Government of India. For EU/EEA users, transfers out of the EEA rely on the transfer mechanism in each provider's data-processing agreement.
9. Retention
We keep personal data only as long as necessary for the purposes above or as required by law, then erase or anonymise it. The service's default retention periods are:
| Data | Default retention |
|---|---|
| Voice recordings | 90 days |
| Transcripts | 90 days |
| Product and usage analytics | 365 days |
| Account activity logs | 90 days |
| Billing and invoice records | As required by Indian tax and company law |
Automatic deletion is off by default. You can set your own retention periods and switch automatic deletion on in your account privacy settings. Until you do, data is kept until you delete it or ask us to. You may request erasure at any time under §11, and we act on that request whatever these settings say.
10. Security
We apply reasonable technical and organisational safeguards (encryption in transit, access control, secret management, monitoring). No method is perfectly secure; we will notify you and the Data Protection Board of India of a reportable personal-data breach as required by law.
11. Your rights (Data Principal)
You have the right to: access a summary of your data and processing; correct/complete/update it; erase it; nominate another individual to exercise your rights in case of death/incapacity; and grievance redressal. Exercise any right — including nomination, which we record on request — via Chinmay Ramraika — [email protected]. If unsatisfied, you may complain to the Data Protection Board of India.
12. Cookies & tracking
See the Vagary Voice Cookie Policy at vagaryvoice.cloud/cookie-policy.
13. EU/EEA users (GDPR)
If you are in the EU/EEA, GDPR rights apply in addition to those in §11: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority. Where GDPR applies, references to "Data Principal/Data Fiduciary" map to "data subject/controller", and our lawful bases map as set out in §4 — consent for analytics and advertising, contract and legitimate interests for the service itself.
14. Changes to this policy
We may update this policy; material changes will be notified and the effective date and version revised. Continued use after the effective date constitutes acceptance where permitted.
15. Contact
Vagary Labs LLP, House No. 418 Ward No. 38, Chandni Takij Road, Satna, Kotwali, Raghurajnagar, Satna - 485001, Madhya Pradesh, India. Email: [email protected]. Grievance Officer: Chinmay Ramraika — [email protected].
© 2026 Vagary Labs LLP. Vagary Voice is a product of Vagary Labs LLP.