Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how SERVITI AI (OPC) PVT LTD ("Serviti", "we", "us") collects, uses, shares and protects personal data when you visit serviti.ai, request a demo, or use our AI agent and dashboard.

We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the California Consumer Privacy Act (CCPA/CPRA). Section 9 below lists our regional privacy contacts.

1. Information we collect

When you contact us or book a demo

• Name, work email, phone / WhatsApp number
• Business type, website, and what you'd like the AI agent to handle
• Any message content you choose to send us

When you use our website

• Standard log and device data (IP address, browser, pages viewed, approximate location for currency display)
• Cookies and similar technologies used for basic analytics and to remember preferences

When your business is a Serviti customer

• Account and billing details, the content you upload to train your agent, and the conversations and leads your agent captures

2. How we use your data

• To respond to demo requests and provide the information you asked for
• To set up, deliver, secure and improve the Serviti service
• To send lead and service notifications via email and WhatsApp to the relevant team
• To meet legal, accounting and regulatory obligations

We do not sell your personal data.

3. Legal basis & consent

We process personal data with your consent (for example, when you submit the demo form) and where processing is necessary to provide a service you requested or to comply with law. You may withdraw consent at any time by contacting us (see Section 9); withdrawal does not affect processing already carried out.

4. Sharing & disclosure

We share personal data only with:

• Service providers who help us operate (cloud hosting on Microsoft Azure, email/SMS/WhatsApp delivery, analytics), bound by confidentiality and data-protection terms
• Authorities where required by law or to protect our rights

5. International transfers & data residency

Our production infrastructure runs on Microsoft Azure in the South India region. Personal data you provide is stored and processed in India by default.

Transfers to India from the EEA, UK, or Switzerland. Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to India, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the UK International Data Transfer Addendum, together with supplementary technical and organisational measures (encryption in transit and at rest, access controls, tenant isolation, and secret management through Azure Key Vault).

Data Processing Agreement. If you are a business customer subject to GDPR or UK GDPR and require a signed Data Processing Agreement covering our role as processor of end-user personal data, request one at privacy@serviti.ai.

Sub-processors. We use Microsoft Azure (cloud hosting), Razorpay (payment processing for all currencies), and our email delivery provider as sub-processors. A current list is available on request.

6. Data retention

We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. Sales-enquiry data is retained for a reasonable period to follow up on your request.

7. Security

We use industry-standard safeguards — encrypted transport, access controls, secret management (Azure Key Vault), and tenant isolation — to protect personal data. No method of transmission is fully secure, but we work to protect your information and review our controls regularly.

8. Your rights

8.1 Rights available to all users

• Access and obtain a summary of the personal data we hold about you
• Request correction, completion or updating of your data
• Request erasure of your data where it is no longer required
• Withdraw consent for processing that relies on consent (withdrawal does not affect prior processing)
• Raise a complaint or grievance with us (see Section 9)

8.2 Additional rights for users in India (DPDP Act)

• Nominate another person to exercise your rights on your behalf in the event of your death or incapacity
• Escalate an unresolved grievance to the Data Protection Board of India

8.3 Additional rights for users in the EEA, UK, or Switzerland (GDPR / UK GDPR)

• Right of access to a copy of your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten") in specified circumstances
• Right to restriction of processing in specified circumstances
• Right to data portability for data provided under consent or a contract
• Right to object to processing based on legitimate interests, and to object to direct marketing at any time
• Right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects
• Right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner's Office in the UK, or the data protection authority in your EU member state)

8.4 Additional rights for California residents (CCPA / CPRA)

• Right to know what personal information we collect, use, share, or sell
• Right to delete personal information collected from you, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information — as noted in Section 2, Serviti does not sell personal data
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising any of these rights

California residents may exercise these rights by contacting privacy@serviti.ai. Verified requests are actioned within 45 days.

8.5 How to exercise your rights

Email privacy@serviti.ai from the address associated with your account, or write to the postal address in Section 9. We may ask you to verify your identity before actioning a request. There is no charge for exercising your rights, unless requests are excessive or repetitive, in which case a reasonable administrative fee may apply.

9. Contacting us & regional contacts

9.1 Grievance Officer (India — DPDP Act)

For grievances relating to the processing of your personal data under the DPDP Act, contact our Grievance Officer at privacy@serviti.ai with subject line "DPDP Grievance". If unresolved within 30 days, you may escalate to the Data Protection Board of India.

9.2 EU / UK / Switzerland

For enquiries relating to the GDPR or UK GDPR, contact privacy@serviti.ai. Serviti does not currently appoint a mandatory Data Protection Officer (DPO) under Article 37 GDPR because our processing scale and nature do not require one; a dedicated privacy contact is provided at the address above. If you consider our response inadequate, you have the right to complain to your local supervisory authority.

9.3 California, USA

California residents may exercise CCPA/CPRA rights by contacting privacy@serviti.ai with subject line "California Privacy Request".

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be highlighted on this page.

Read our Terms of Service →