Privacy Policy

1. Introduction

This Privacy Policy explains how Atharva Technologies (“FirstRing”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use the FirstRing website and platform (the “Service”). It should be read together with our Terms & Conditions.

We act as a data fiduciary for information about our own account holders and visitors, and as a data processor for the lead and contact data that Customers upload and process through the Service.

2. Information We Collect

2.1 Information you provide

• Account & business details— name, business name, work email, phone/WhatsApp number, and billing information.
• Customer Data— lead and contact records you upload or import (such as names and phone numbers), call scripts, and notes.
• Enquiries— information you submit through contact or demo forms.

2.2 Information generated through the Service

• Call recordings and transcripts of calls placed or received through the Service.
• WhatsApp messages exchanged through a WhatsApp Business number connected to the Service, including attachments and delivery status (see Section 7).
• AI-derived data such as lead scores, call outcomes, and summaries.
• Usage and device data such as log data, IP address, browser type, and interactions with the Service.
• Cookies and similar technologies used to operate and secure the Service (see Section 12).

3. How We Use Information

• To provide, operate, secure, and maintain the Service;
• To place and manage calls and messages on your behalf and to qualify, score, and route leads;
• To generate transcripts, analytics, and reporting for your account;
• To process payments and manage billing;
• To provide support and respond to enquiries;
• To improve and develop the Service, including improving accuracy and performance;
• To comply with legal obligations and enforce our Terms.

4. Call Recording & AI Processing

Calls placed or received through the Service may be recorded, transcribed, and analysed using AI and speech-processing technology for quality, training, and analytics. Where you use the Service to contact your leads, you are responsible for providing any notice and obtaining any consent required from those individuals for such recording and processing.

5. Google User Data

If you connect Google Drive, FirstRing asks Google for access only to the spreadsheet files you pick in Google’s file picker (the drive.filepermission), plus your Google account email so we can show which account is connected. We read those files on the schedule you choose and copy their rows into your FirstRing workspace as leads. If you add an “Update Google Sheet” step to a workflow, we also write the results you choose (such as the call outcome, the call summary, and details captured on the call) into the columns you pick in that sheet, creating those columns if they do not exist and, if you choose, adding a row for a lead who is not yet in the sheet. We do not access any other file in your Drive, and we never delete your files.

This data is used only to provide the lead import and sheet updates you set up. It is not sold, not used for advertising, and not used to train AI models. The Google credential that lets us reach your files is stored encrypted and kept only until you disconnect the file or remove our access. People at FirstRing do not read your Google data except with your permission, where needed for security, or as required by law. FirstRing’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a file in FirstRing at any time, and remove FirstRing’s access to your Google account at myaccount.google.com/permissions. To have data imported from Google deleted, contact us at admin@firstring.in.

6. Shopify Store Data

If a merchant installs the FirstRing Commerce Assistant app on their Shopify store, FirstRing reads, with the merchant’s permission granted in Shopify: checkouts and orders (items, totals, status and the checkout link), fulfilments and delivery status, the store’s discounts, and the store’s customers’ name, phone number, email and address. We use this data only for the features the merchant turns on: calling or messaging a customer on WhatsApp about a checkout they did not complete, answering questions about products, store policies and their own order (an order is described only after the caller confirms the order’s email or order number), asking for feedback after delivery, and handing conversations to the merchant’s team.

This data is shared only with the service providers that deliver those features (telephony carriers, AI and speech model providers, WhatsApp Business Solution Providers and cloud hosting, see Section 9). It is not sold, not used for advertising and not used to train AI models. When Shopify sends us a merchant’s customer or store data-deletion request (including after the app is uninstalled), we delete that data within 30 days, except records we must keep by law, such as billing records; when Shopify asks for a customer’s data on the merchant’s behalf, we provide it to the merchant. Shoppers can ask the merchant, or us at admin@firstring.in, to stop calls and messages or to delete their data.

7. WhatsApp Business Messaging

A business can connect its own WhatsApp Business number to FirstRing, either directly through Meta’s WhatsApp Business Platform (Cloud API) or through a WhatsApp Business Solution Provider. For a connected number, FirstRing receives from Meta, with the business’s permission: the messages its customers send to that number (text, images, voice notes, videos, documents and other attachments); each sender’s WhatsApp phone number and profile name; the delivery and read status of messages sent from the number; and, when a chat starts from a Click-to-WhatsApp ad, the ad referral details Meta provides. We also receive information about the business’s WhatsApp account: its phone numbers, display name, quality rating and messaging limits, its message templates and their approval status, and whether it can send messages, including payment-method problems.

We use this data only to provide the features the business sets up: showing conversations in the FirstRing inbox; sending replies written by the business’s team or its AI assistant; sending the message templates the business chooses; reading images, voice notes and documents with AI so the assistant can answer them (for example, transcribing a voice note); scoring, tagging and routing leads and scheduling the follow-ups the business configures; and showing the health of the business’s WhatsApp account. If the business turns on ad-result reporting, we send Meta conversion events for chats that started from the business’s own Click-to-WhatsApp ads (for example, that a chat became a qualified lead or a purchase, with the ad’s click identifier); these events do not contain message content.

Messages are exchanged with Meta, which operates WhatsApp, to deliver them; Meta’s own processing is governed by WhatsApp’s terms and policies. Message content is also processed by the AI and speech model providers that generate replies, transcripts and summaries (see Section 9). We do not sell WhatsApp data or use it for advertising. The access tokens that let us reach a business’s WhatsApp account are stored encrypted.

The business is responsible for obtaining its customers’ opt-in before it messages them first, and for complying with the WhatsApp Business Messaging and Commerce Policies. A business can disconnect its number from FirstRing at any time, which stops new data from being received.

Deletion on request. A business can ask us to delete the WhatsApp data we hold for it, and anyone who has messaged a business through FirstRing can ask that business, or us at admin@firstring.in, to stop messages and to delete their data. We delete the WhatsApp messages, attachments and related data covered by the request within 30 days of receiving it, except records we must keep by law, such as billing records.

8. Legal Basis & Consent

We process personal data on the basis of your consent, the performance of our contract with you, our legitimate business interests, and compliance with applicable law, including the Digital Personal Data Protection Act, 2023 and other applicable Indian regulations. You may withdraw consent where processing is based on consent, subject to legal and contractual limits.

9. How We Share Information

We do not sell personal data. We share it only as needed to operate the Service:

• Service providers (sub-processors)— telephony carriers, AI and speech-model providers, Meta (the WhatsApp Business Platform) and WhatsApp Business Solution Providers, payment processors, and cloud hosting providers, who process data on our behalf under appropriate obligations;
• Legal and safety— where required by law, legal process, or to protect rights, safety, and the integrity of the Service;
• Business transfers— in connection with a merger, acquisition, or sale of assets, subject to this Policy.

10. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Call recordings and transcripts are retained according to your plan and settings, after which they are deleted or anonymised. WhatsApp messages and attachments are kept while the business’s account is active, and are deleted within 30 days of a deletion request (see Section 7).

11. Data Security

We use reasonable technical and organisational measures, including encryption in transit and access controls, to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Cookies

We use cookies and similar technologies that are necessary to operate and secure the Service and, where applicable, to understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

13. Your Rights

Subject to applicable law, you may have the right to access, correct, update, or request deletion of your personal data, to withdraw consent, and to nominate another person to exercise your rights in the event of death or incapacity. To exercise these rights, contact us at admin@firstring.in. Where we process data on behalf of a Customer (as a processor), requests from individuals will be referred to the relevant Customer.

14. Children

The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from children.

15. International Transfers

Some of our service providers may process data outside India. Where data is transferred internationally, we take steps to ensure it remains protected consistent with this Policy and applicable law.

16. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

17. Contact & Grievances

For any questions, requests, or grievances regarding this Policy or your personal data, contact us at admin@firstring.in. We will respond within the timelines required by applicable law.