Privacy Policy

This Privacy Policy explains how AIforge Tech Private Limited ("Finn", "we", "us", "our") processes personal and communications data. We provide an AI voice agent platform ("Software" or "Platform") accessible via hirefinn.ai.

We comply with applicable global data protection frameworks, including the Digital Personal Data Protection Act, 2023 (DPDP, India), the General Data Protection Regulation (GDPR, EU/UK), and the California Consumer Privacy Act (CCPA, USA).

1. Our Role: Controller vs. Processor

To clarify our legal responsibilities, Finn operates in two distinct capacities:

• Data Controller: We act as the Controller for the personal data of our direct customers ("Users") who register for an account, manage billing, and interact with our Website.
• Data Processor: We act strictly as a Processor for all data relating to the individuals our Users interact with via the Agents ("End Customers"). The User is the Controller of End Customer data and is responsible for obtaining any necessary consent for telephonic communication and recording.

2. What Data We Collect

We collect data across three primary categories to operate our Platform:

A. Account and Billing Data (User Data)

To register for our services, we collect the following personal data:

• First and last name
• Email address
• Company name
• If you choose a paid service, we also collect your payment details.

Purpose: To fulfill our SaaS contract, manage subscriptions, and provide customer support.

B. Communications and Voice Data (End Customer Data)

Audio Recordings & Transcripts: Real-time audio inputs, voice recordings, and text transcripts generated during interactions with the AI Agents.

Telephonic Metadata: Specific Caller and Recipient phone numbers, routing data, call duration, and timestamps.

Analytics: Sentiment and mood detection analysis generated by the AI.

Purpose: To execute the core functionality of the AI voice agents on behalf of the User.

C. Visiting Our Website

When you visit our Website for informational purposes, we automatically collect and store certain "log data". This data is stored temporarily and anonymously as server log files to ensure the stability and security of the Website. The data includes:

• IP address
• Browser and operating system information
• Referral URL
• Time and duration of access
• Retrieved files and services used

Purpose: The legal basis for this data processing is our legitimate interest in ensuring the proper operation of the Website.

D. Cookies and Third-Party Tracking

Our Website uses cookies to improve functionality and analyze your usage. You can manage cookie preferences via your browser settings or our cookie banner. We use two types of cookies:

• Session Cookies: These are deleted after your visit.
• Persistent Cookies: These remain on your device until deleted manually.
• For product analytics we use PostHog, and we use Intercom to provide in-app support. These tools may set cookies to track usage and improve your experience; you can manage or revoke your consent at any time via the cookie banner.

E. Contact Form

When you use our contact form, we collect:

• Your name
• Email address

Purpose: This data is used solely to respond to your queries and will not be shared with third parties unless explicitly stated in this policy.

F. Third-Party Services

We use third-party services, such as PostHog, Sentry, Intercom, and Cloudflare, to help improve and monitor our services. These services may collect and process data, including cookies and usage information, to optimize user experience. A complete, current list of the third parties that process data on our behalf — including the purpose and region of each — is published at hirefinn.ai/subprocessors. For more information on how these services process your data, you can consult their respective privacy policies.

3. AI Models and Your Data

We do not use your Input, Output, or transcripts to train, retrain, or fine-tune any AI model. Our conversational AI is provided through third-party models accessed via Zero-Data-Retention APIs, under which your data is not retained by the provider or used for model training.

Users retain ownership of their data. Finn receives only a license to process that data as needed to provide the service, as set out in our General Terms and Conditions and Data Processing Agreement.

4. Industry-Specific Compliance and Security

We provide enterprise-grade infrastructure designed to meet the strict security requirements of the healthcare, financial services, insurance, and debt collection sectors.

Security Measures: We implement robust technical and organizational safeguards, including data encryption in transit and at rest, and role-based access controls.

Compliance Frameworks: We hold ISO/IEC 27001:2022 (Information Security Management), ISO/IEC 20000-1:2018 (IT Service Management), and ISO 9001:2015 (Quality Management) certifications, issued by UKBIZ Certification Inc and independently verifiable. Our infrastructure is additionally aligned with SOC 2 standards, with a Type II audit in progress.

Healthcare & Finance: For Users processing Protected Health Information (PHI) or highly sensitive financial data, specific obligations are governed by our separate Data Processing Agreement (DPA) and, where applicable, a Business Associate Agreement (BAA).

5. Data Retention and Deletion

We retain User account data for the duration of the active subscription and as required by tax and commercial laws. Communications Data (including audio recordings and transcripts) processed on behalf of Users is retained according to the User's configured retention window — 90 days by default — or until the User requests deletion. On termination, this data is deleted within thirty (30) days as set out in our Data Processing Agreement.

Automatic Inactivity Wipe: To enforce strict data minimization, if a User account remains entirely inactive for a period of twelve (12) months, all associated End Customer Communications Data (including audio and transcripts) will be automatically and permanently deleted.

6. Your Data Protection Rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("Right to be Forgotten").
• Restrict or Object to certain processing activities, including marketing.
• Data Portability to receive your data in a machine-readable format.
• Withdraw Consent at any time where processing is based on consent.

To exercise these rights, End Customers must contact the User (the Controller) directly. Users can contact Finn to exercise their own rights.

7. International Data Transfers

If we transfer personal data outside of its originating jurisdiction (e.g., outside the EEA or India), we ensure appropriate legal safeguards are in place, such as Standard Contractual Clauses (SCCs), to maintain data security.

8. Security Measures

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or manipulation. These measures are continually updated to reflect new security developments.

9. Contact Information

For data protection inquiries, to exercise your rights, or to access our Data Processing Agreement (DPA) — published at hirefinn.ai/dpa — please contact:

• AIforge Tech Private Limited (CIN U62099RJ2025PTC099494), D-253, Kardhani Govindpura, Kalwar Road, Jaipur, Rajasthan - 302012, India.
• Email: support@hirefinn.ai
• EU Representative (Article 27 GDPR): We have appointed Prighter Group as our EU representative for data protection matters. If you are located in the European Union, you may contact our representative directly to exercise your data subject rights (such as access or erasure of your personal data) at https://app.prighter.com/portal/portier
• UK Representative (UK GDPR): We have appointed Prighter Group as our UK representative for data protection matters. If you are located in the United Kingdom, you may contact our representative directly to exercise your data subject rights (such as access or erasure of your personal data) at https://app.prighter.com/portal/portier