This Privacy Policy describes how Hathavajra Technologies Private Limited ("Company", "we", "our", or "us") collects, uses, protects, and handles your data when you download, install, and use the Baba AI mobile application on the Google Play Store, our website (baba.ai), and associated AI coworker services.
Hathavajra Technologies Private Limited ("Hathavajra", "we", "us", or "our") is a technology company incorporated under the laws of India. We develop and distribute the Baba AI software platform, including our Android mobile application published on the Google Play Store, associated web dashboards, APIs, conversational voice agents, and business automation toolkits.
This Privacy Policy applies to all merchants, business owners, enterprise employees, and individual users who interact with the Baba AI mobile application and associated web interfaces. We respect your fundamental right to privacy and are committed to maintaining the highest standards of data governance, transparency, and security in strict compliance with the Google Play Developer Program Policies (including User Data & Permissions policies) and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
Section 2
2. Information We Collect
We collect information strictly necessary to provide, optimize, and secure the AI coworker capabilities you configure. We do not engage in covert background data harvesting.
A. Personal & Account Information (Provided by You)
Profile Data: Your name, business name, business address, email address, and mobile / WhatsApp phone number.
Authentication Credentials: Secure OTP verification codes, password hashes, and OAuth tokens used to access your account.
Commercial Data: Product catalog listings, price lists, inventory records, and invoicing metadata you choose to import into Baba AI.
B. Communications & AI Voice Interactions
Conversational Content: Business queries, WhatsApp order text, transcripts of conversations handled by your Baba AI assistant on your behalf.
Voice Audio Data: Temporary audio streams recorded solely during active voice calls or push-to-talk interactions with the AI assistant for speech-to-text processing and intent execution. Audio streams are discarded immediately after transcription unless explicit analytical retention is activated by the user.
C. Device, Network & Diagnostics Information (Automatically Collected)
Device Identifiers: Android operating system version, hardware model, unique device identifiers (Android Advertising ID where consented, Firebase Cloud Messaging token for push alerts).
Log & Performance Data: IP address, network connection status (WiFi/4G/5G), app crash reports, latency metrics, and feature interaction logs used strictly for debugging and service stability.
Section 3
3. Android App Permissions (Google Play Disclosure)
In accordance with Google Play Developer Policy on Sensitive Permissions, below is the comprehensive declaration of runtime and manifest permissions requested by Baba AI and their specific functional purpose:
Microphone (RECORD_AUDIO)
Purpose: Enables real-time speech input for conversing with Baba AI in Hindi, English, Hinglish, and regional languages, and handling AI phone calling features. Never used for covert background eavesdropping.
Notifications (POST_NOTIFICATIONS)
Purpose: Delivers instant alerts for incoming customer orders, high-value inquiries, low stock notifications, and completed autonomous tasks.
Storage / Media Access
Purpose: Used solely when you manually choose to upload catalog spreadsheets (Excel/CSV), product photos, or invoice PDFs to your Baba workspace.
Phone & Contacts (Optional)
Purpose: Requested only when you configure outbound AI order verification calls or customer contact lookup. We do not harvest or synchronize your full address book.
Section 4
4. Artificial Intelligence & Voice Data Processing
Our AI Safety & Non-Training Commitment
Hathavajra Technologies leverages enterprise-tier Large Language Models (LLMs) and custom neural speech synthesis engines to power Baba AI.
No Public Model Training on Private Data: Your proprietary business catalog, customer conversations, and internal price sheets are never used to train public foundation models.
Zero Audio Retention for Third Parties: Real-time voice streams are securely processed in memory over encrypted WebRTC/TLS channels and are never shared with unauthorized third-party commercial data brokers.
Contextual Isolation: Multi-tenant isolation ensures your business data is strictly siloed and accessible only by authenticated members of your organization.
Section 5
5. How We Use Your Information
We process collected data exclusively for legal and legitimate business purposes:
Executing customer service automation, WhatsApp ordering, and catalog queries.
Connecting with your authorized business tools (Tally, ERPs, UPI gateways, Shopify).
Authenticating user accounts, billing, and verifying software subscriptions.
Preventing fraud, unauthorized security intrusions, and service abuses.
Section 6
6. Third-Party Data Sharing & Disclosures
We DO NOT sell, rent, or trade your personal or business data to advertisers or data brokers. We share data only with trusted service sub-processors under rigorous confidentiality agreements:
Cloud Infrastructure & HostingEnterprise cloud providers (e.g. AWS / Google Cloud Platform / Indian data center regions) providing encrypted compute and database hosting.
Communication & Telephony GatewaysOfficial WhatsApp Business Solution Providers (BSPs) and telecom gateway partners for dispatching verified messages, SMS OTPs, and phone calls.
Payment ProcessorsRBI-authorized payment gateways (e.g., Razorpay, Cashfree, UPI aggregators). Hathavajra never stores raw credit/debit card numbers or bank PINs on its servers.
Legal MandatesWe may disclose information if required to do so by applicable Indian court orders, law enforcement requests, or regulatory statutes.
Section 7 (Play Store Compliance)
7. Data Retention & Account Deletion Policy
In compliance with Google Play's Account Deletion Policy, users have full control over the lifespan and deletion of their accounts and associated personal data.
How to Request Account & Data Deletion
You can request complete deletion of your Baba AI account, catalog records, conversation logs, and all associated personal information through either of the following methods:
Option 1: In-App Deletion
Open the Baba AI App → Go to Settings → Select Account & Security → Click Delete Account & Data.
Option 2: Email Request
Send an email from your registered email address to privacy@baba.ai with the subject line Account Deletion Request.
Processing Timeframe: Account and personal data deletion is completed within 30 calendar days of receiving the verified request.
What is Deleted: User profile, contact credentials, catalog records, voice transcripts, conversation histories, and push tokens.
Exceptions: Anonymized transaction records may be retained for statutory tax/financial compliance as mandated under Indian GST and Income Tax regulations.
Section 8
8. Data Security & Storage Architecture
We enforce bank-grade security protocols to protect information against unauthorized access, alteration, disclosure, or destruction:
Encryption in Transit
All data exchanged between your Android device and our backend servers is encrypted using modern TLS 1.3 protocols.
Encryption at Rest
Databases, backups, and catalog files are encrypted with industry-standard AES-256 bit keys.
Access Controls
Strict principle of least privilege (PoLP) and multi-factor authentication for operational engineers.
The Baba AI application is a commercial B2B productivity tool built exclusively for commercial businesses and adult professionals. It is not intended for or directed toward children under the age of 18 (or under 13 in relevant international jurisdictions). We do not knowingly collect personal identifiable information from children. If you believe a child has provided personal information to us, please contact privacy@baba.ai, and we will promptly purge such data from our systems.
Section 10
10. Your Rights (DPDP Act 2023 & GDPR)
Subject to Indian data privacy laws, you possess the following rights regarding your personal data:
Right to Access:Request a summary of personal data processed by Hathavajra and processing activities.
Right to Correction:Correct, complete, or update inaccurate or misleading personal records.
Right to Erasure:Request the immediate removal and deletion of your personal data.
Right to Grievance Redressal:Access an expeditious grievance mechanism regarding our data processing conduct.
Section 11 (Statutory Notice)
11. Grievance Redressal & Data Protection Officer
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are set forth below:
Grievance & Data Privacy Officer
Hathavajra Technologies Private Limited
Official Desk
Company Name:Hathavajra Technologies Private Limited
We may periodically revise this Privacy Policy to reflect enhancements to the Baba AI application, updates to statutory data regulations, or modifications to Google Play policies. When changes are made, we will update the "Last Updated" timestamp at the top of this page. In the case of material changes, we will provide prominent in-app notification or send a direct notice to your registered email address before the changes become effective.
Have questions about your data?
Our security and privacy team is available to assist you with compliance inquiries, data export, or deletion.