Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how SERVITI AI (OPC) PVT LTD ("Serviti", "we", "us") collects, uses, shares and protects personal data when you visit serviti.ai, request a demo, or use our AI agent and dashboard.

We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the California Consumer Privacy Act (CCPA/CPRA). Section 9 below lists our regional privacy contacts.

Two roles, in plain terms:

1. For our own marketing site and sales enquiries, Serviti is the Data Fiduciary — we decide how your data is used.

2. When a customer (a business) uses Serviti to run their AI agent, that business is the Data Fiduciary for the leads and visitors it collects, and Serviti acts as a Data Processor on their behalf.

1. Information we collect

When you contact us or book a demo

Name, work email, phone / WhatsApp number
Business type, website, and what you'd like the AI agent to handle
Any message content you choose to send us

When you use our website

Standard log and device data (IP address, browser, pages viewed, approximate location for currency display)
Cookies and similar technologies used for basic analytics and to remember preferences

When your business is a Serviti customer

Account and billing details, the content you upload to train your agent, and the conversations and leads your agent captures

2. How we use your data

To respond to demo requests and provide the information you asked for
To set up, deliver, secure and improve the Serviti service
To send lead and service notifications via email and WhatsApp to the relevant team
To meet legal, accounting and regulatory obligations

We do not sell your personal data.

3. Legal basis & consent

We process personal data with your consent (for example, when you submit the demo form) and where processing is necessary to provide a service you requested or to comply with law. You may withdraw consent at any time by contacting us (see Section 9); withdrawal does not affect processing already carried out.

4. Sharing & disclosure

We share personal data only with:

Service providers who help us operate (cloud hosting on Microsoft Azure, email/SMS/WhatsApp delivery, analytics), bound by confidentiality and data-protection terms
Authorities where required by law or to protect our rights

5. International transfers & data residency

Our production infrastructure runs on Microsoft Azure in the South India region. Personal data you provide is stored and processed in India by default.

Transfers to India from the EEA, UK, or Switzerland. Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to India, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the UK International Data Transfer Addendum, together with supplementary technical and organisational measures (encryption in transit and at rest, access controls, tenant isolation, and secret management through Azure Key Vault).

Data Processing Agreement. If you are a business customer subject to GDPR or UK GDPR and require a signed Data Processing Agreement covering our role as processor of end-user personal data, request one at [email protected].

Sub-processors. We use Microsoft Azure (cloud hosting), Razorpay (payment processing for all currencies), and our email delivery provider as sub-processors. A current list is available on request.

6. Data retention

We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. Sales-enquiry data is retained for a reasonable period to follow up on your request.

7. Security

We use industry-standard safeguards — encrypted transport, access controls, secret management (Azure Key Vault), and tenant isolation — to protect personal data. No method of transmission is fully secure, but we work to protect your information and review our controls regularly.

8. Your rights

8.1 Rights available to all users

Access and obtain a summary of the personal data we hold about you
Request correction, completion or updating of your data
Request erasure of your data where it is no longer required
Withdraw consent for processing that relies on consent (withdrawal does not affect prior processing)
Raise a complaint or grievance with us (see Section 9)

8.2 Additional rights for users in India (DPDP Act)

Nominate another person to exercise your rights on your behalf in the event of your death or incapacity
Escalate an unresolved grievance to the Data Protection Board of India

8.3 Additional rights for users in the EEA, UK, or Switzerland (GDPR / UK GDPR)

Right of access to a copy of your personal data
Right to rectification of inaccurate personal data
Right to erasure ("right to be forgotten") in specified circumstances
Right to restriction of processing in specified circumstances
Right to data portability for data provided under consent or a contract
Right to object to processing based on legitimate interests, and to object to direct marketing at any time
Right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects
Right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner's Office in the UK, or the data protection authority in your EU member state)

8.4 Additional rights for California residents (CCPA / CPRA)

Right to know what personal information we collect, use, share, or sell
Right to delete personal information collected from you, subject to legal exceptions
Right to correct inaccurate personal information
Right to opt out of the sale or sharing of personal information — as noted in Section 2, Serviti does not sell personal data
Right to limit use of sensitive personal information
Right to non-discrimination for exercising any of these rights

California residents may exercise these rights by contacting [email protected]. Verified requests are actioned within 45 days.

8.5 How to exercise your rights

Email [email protected] from the address associated with your account, or write to the postal address in Section 9. We may ask you to verify your identity before actioning a request. There is no charge for exercising your rights, unless requests are excessive or repetitive, in which case a reasonable administrative fee may apply.

9. Contacting us & regional contacts

SERVITI AI (OPC) PVT LTD
CIN: U62013TS2026OPC211320
Registered office: LIG Plot No. 267, Nallagandla HUDA, Gachibowli, Lingampalli, Serilingampally, K.V. Rangareddy – 500019, Telangana, India

General enquiries: [email protected] · Phone/WhatsApp: +91 85558 11800

Privacy and data protection: [email protected]

9.1 Grievance Officer (India — DPDP Act)

For grievances relating to the processing of your personal data under the DPDP Act, contact our Grievance Officer at [email protected] with subject line "DPDP Grievance". If unresolved within 30 days, you may escalate to the Data Protection Board of India.

9.2 EU / UK / Switzerland

For enquiries relating to the GDPR or UK GDPR, contact [email protected]. Serviti does not currently appoint a mandatory Data Protection Officer (DPO) under Article 37 GDPR because our processing scale and nature do not require one; a dedicated privacy contact is provided at the address above. If you consider our response inadequate, you have the right to complain to your local supervisory authority.

9.3 California, USA

California residents may exercise CCPA/CPRA rights by contacting [email protected] with subject line "California Privacy Request".

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be highlighted on this page.

Read our Terms of Service →