Privacy Policy

This Privacy Policy explains how Nikhil Kumar, a sole proprietor operating under the trade name “Edunod / NodCall” (“Edunod”, “we”, “us”) collects, uses, stores, shares and protects information when you use NodCall — our cloud dashboard at call.edunod.com, the NodCall agent application for Android, and our related APIs and services (together, the “Service”).

It is an electronic record under the Information Technology Act, 2000 and is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It does not require a physical or digital signature.

By creating an account, installing the agent app, or otherwise using NodCall, you confirm that you have read and agree to this Policy. If you do not agree, please do not use the Service. This Policy forms part of, and should be read together with, our Terms of Service.

NodCall is a business tool. This Policy applies to everyone who interacts with the Service, including:

• Customers (admins & managers) — the business that subscribes to NodCall and configures it for its team.
• Team members (agents) — employees whose company phones are paired with the agent app so their work call activity is synced.
• Contacts & leads — individuals whose numbers appear in your team's business calls and records.

Important — your responsibility as the employer. When you deploy NodCall on your team's phones, you are the owner (data controller) of the call data you collect. You are responsible for using it only on company-issued phones for legitimate business purposes, informing your employees that their business calls are tracked and recorded, and obtaining any consent required by law. Edunod acts only as your software and processing provider.

We collect information you provide, information generated as your team uses the Service, and technical information sent automatically by your browser or device:

We only collect information relevant to operating the Service for you. Some fields are optional — you can choose not to provide them, though certain features may then be unavailable. We do not ask for, or intentionally collect, personal calls, personal messages, photos, or files unrelated to your team's business call activity.

If you choose to sign in using a third-party provider (such as Google), we read only the basic profile information needed to authenticate you — your name, email address and profile picture. We do not read your emails, contacts, files, Drive, or any other private data from that account, and we do not store your provider password.

You can revoke NodCall's access at any time from your provider's security or connected-apps settings. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

The NodCall agent app requests only the permissions it needs to sync work call activity. Each is used for the specific purpose below and nothing else:

Recording and location features are optional and controlled by the account admin. Where your device or dialer does not create recordings, none are uploaded.

We use the information we collect to:

• Provide the Service — sync call logs and recordings, generate reports and analytics, and power dashboards, notes, pins and exports;
• Set up, secure and maintain your account, verify identity, and prevent fraud, abuse and unauthorised access;
• Provide customer support and respond to your requests and grievances;
• Send service and transactional messages (for example, sync status, security alerts, billing and renewal notices);
• Improve the Service — diagnose issues, understand feature usage in aggregate, and develop new features;
• Comply with applicable law and enforce our Terms of Service.

We may send you product updates and offers only where permitted; you can opt out of such messages at any time (see “Your Rights & Choices”). We do not use your call recordings or call data to build advertising profiles.

Our web dashboard uses cookies and similar browser storage to keep you signed in, remember your preferences, and understand aggregate usage so we can improve the product. We use only cookies that are necessary for the Service to function and basic analytics — we do not use third-party advertising cookies.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from staying signed in or using certain features.

We do not sell or rent your personal information. We share it only in these limited circumstances:

• Within your workspace. Call data is visible to the admins and managers of your account, according to the role-based access your admin configures.
• Service providers. We use trusted vendors for cloud hosting, object storage, push notifications, email and payment processing. They may process data only to provide their service to us and are bound by confidentiality and security obligations.
• Payment processors. When you pay, your card and transaction details are handled directly by the payment gateway under its own policy. We receive confirmation of payment, not your full card number.
• Legal & safety. We may disclose information if required by law, court order, or a valid request from a lawful authority, or to protect the rights, safety and property of our users, the public or Edunod.
• Business transfer. If the business is reorganised, merged or transferred, information may pass to the successor, who will remain bound by this Policy.

Your data is hosted on reputable, access-controlled cloud infrastructure. Call recordings are kept in secured object storage with restricted, tenant-scoped access so one customer's data is never exposed to another.

We retain your information for as long as your account is active and as needed to provide the Service. On cancellation or expiry, you are responsible for exporting your data and reports within 60 days, and call recordings remain available for 7 days after expiry. After the applicable retention window, account data may be permanently deleted. We may retain limited records where required to meet legal, tax or security obligations.

Trial accounts that do not convert, and expired subscriptions that are not renewed, may have their data deleted after these periods.

We follow reasonable security practices consistent with Rule 8 of the SPDI Rules, 2011, including:

• Encrypted connections (HTTPS/TLS) for data in transit;
• Password-protected accounts with role-based access control and multi-tenant isolation;
• Tenant-scoped storage so recordings and data are segregated per customer;
• Access restricted to authorised personnel bound by confidentiality;
• Firewalls, server hardening and monitoring on our hosting environment.

No method of transmission or storage is completely secure. You are responsible for keeping your login credentials and paired devices safe. If we become aware of a breach affecting your personal data, we will inform affected customers and take reasonable steps to remediate, as required by law.

Subject to applicable law, you can:

• Access & correct your account information from your dashboard settings, or by contacting us.
• Opt out of promotional messages using the unsubscribe option in those messages, or by writing to us — you will still receive essential service messages.
• Withdraw consent for the processing of sensitive personal data by writing to us at the address below. Withdrawing consent may mean we can no longer provide the Service.
• Request deletion of your account and associated data. Because call data and reports are essential business records, deletion is handled on verified request rather than self-service, to prevent accidental loss. On a verified request from your registered email, we will delete the data within a reasonable period, typically 7 working days, except where retention is legally required.

To protect your privacy, we verify your identity before acting on a request. If you are an employee with a question about how your employer uses NodCall, please contact your employer, who owns and controls that data.

The Service may link to, or integrate with, third-party websites, apps and APIs that operate under their own privacy policies. We do not control those services and are not responsible for their practices. We encourage you to review the privacy policy of any third-party service before providing it your information.

NodCall is a business tool intended only for persons who can enter into a legally binding contract under the Indian Contract Act, 1872. It is not directed to, and must not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in the Service, technology or law. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you within the Service. Your continued use of NodCall after an update means you accept the revised Policy. Please review it periodically.

In accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011, the details of our Grievance Officer are set out below. If you have any question, concern or complaint about this Policy or how your information is handled, please reach out — we aim to acknowledge grievances promptly and resolve them within the timelines required by law.