Privacy Policy

Dhiti processes personal data under the purpose-limitation principle of the DPDP Act 2023. We collect only what a request needs, store it in-region (Mumbai / ap-south-1 by default), and never sell it.

Voice-concierge (Vaani) sessions: audio and transcript are stored in Mumbai for 90 days, used only to answer you and follow up, and never used to train models. Every follow-up email carries a one-click delete link that purges the audio and transcript and tombstones the record.

Your key material's physical location is a legal question under DPDP. We answer it before you ask: region-pinned at the schema level, keys by handle only inside the HSM.

Data-principal requests (access, correction, erasure, withdrawal of consent) can be made at privacy@dhiti.in.