Privacy policy

Who this policy covers

Hyperdial is a business communications platform, and this policy covers two different relationships. If you visit this site, or hold an account with us, we decide what happens to your data and this page describes it.

If you are a customer of one of our customers — somebody whose call was handled by a team using Hyperdial — then that team decides what happens to your data and we act on their instructions. Contact them first. We will help them answer you.

What we collect

• Account data: name, work email, phone number, company and role, given when an account is created.
• Usage data: which features an account uses, when, and from which address — used to run the service and keep it secure.
• Communications data: calls, recordings, transcripts, messages and their metadata, processed on behalf of the customer whose account they belong to.
• Billing data: the plan an account is on and what it was invoiced. Card details are handled by our payment processor and do not reach our servers.
• Website data: pages read and referrer, in aggregate. There are no advertising or cross-site tracking cookies on this site.

Why we process it

To provide the service you asked for, to bill for it, to keep it secure, and to meet legal obligations. Where we rely on legitimate interests — security monitoring, fraud prevention, product analytics in aggregate — we have weighed that against your interests, and you can object.

We do not sell personal data and we do not share it with advertisers. Recordings and transcripts are never pooled into a model that other customers benefit from: a playbook learned from an account's calls is used for that account only.

How long we keep it

• Recordings and transcripts: for the retention period the customer sets per campaign. When it expires, the audio and the derived text are both deleted.
• Account data: for as long as the account exists, and for the period afterwards set out in the agreement.
• Billing records: for as long as tax and company law requires them to be kept.
• Security logs: for a rolling window, after which they are deleted or aggregated beyond identification.

Where it is stored

Data residency is chosen when an account is created and does not move afterwards. Indian customers are provisioned in the Mumbai region, and backups stay in the same region as the primary. Sub-processors are listed in the data processing agreement, with what each one receives, and customers are notified before a new one is added.

Your rights

Depending on where you are, you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask us to restrict it. Under India's DPDPA and under the GDPR these rights are broadly the same in effect, and we do not make anyone prove which regime applies before we act.

Write to us at sales@hyperdial.io, or through the contact page. We respond inside the statutory window, and where we cannot do what was asked we say why rather than going quiet.

Cookies

This site sets the cookies it needs to work, and a small number that tell us in aggregate which pages are read. There are no advertising or cross-site tracking cookies. You can change your choice at any time from the cookie preferences link in the footer.

Changes to this policy

When this policy changes materially we say so on this page, and account holders are told by email before the change takes effect. The date at the top of the page is the date of the current version.

Questions about this policy, or a request about your own data, go to sales@hyperdial.io. If you are covered because a company you dealt with uses Hyperdial, contact that company first — they hold the relationship, and we act on their instructions.