Trivox ("we") is the Data Fiduciary for the personal data you share with us. This notice explains, in plain language, what we collect, why, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Personal data we collect
- Identity and contact details: name, phone number, email address, company and address.
- Communication records: messages you send us by WhatsApp, SMS, RCS, email or phone, and call logs.
- Billing details needed for quotes, invoices and payments.
- Technical data such as IP address when you use our website or customer portal.
2. Why we use it (purposes)
- To respond to your enquiry and provide the services you ask for (service communications).
- To prepare quotes, invoices and receipts, and to meet tax and legal obligations.
- To provide customer support.
- To send offers and updates only if you give consent (marketing communications).
3. Your consent
Where we rely on consent, it is free, specific and informed, and you can withdraw it at any time as easily as you gave it, by replying STOP, using the "Manage consent" page, or writing to our Grievance Officer. Withdrawal does not affect processing already done.
4. Your rights
- Access: get a summary of your personal data and the processing we do.
- Correction and completion: have inaccurate or incomplete data corrected or updated.
- Erasure: have your data erased when it is no longer needed, unless the law requires us to keep it (for example GST invoices).
- Grievance redressal: raise a complaint with our Grievance Officer.
- Nomination: nominate a person to exercise your rights in case of death or incapacity.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
5. Sharing
We share data only with service providers who process it for us (for example messaging, email, telephony, cloud hosting and payment providers), under contract and only for the purposes above. We do not sell personal data.
6. Retention and security
We keep data only as long as needed for the purpose or as required by law, and then erase it. We use reasonable security safeguards such as encryption of credentials, access control and audit logs. If a personal data breach happens we will inform you and the Data Protection Board as required.
7. Children
Our services are meant for persons aged 18 or above. We do not knowingly process a child's data without verifiable consent of a parent or lawful guardian.