Privacy Notice

Who is responsible

Oditly Technologies Pvt Ltd, based in India and trading as Oditly, is the data controller for the personal data described here. For privacy questions or requests, email robert.weir@oditly.com.

What we collect and why

• Account and contact details, such as names, work email addresses, login information and team roles, to create accounts, manage access and send service messages. We rely on contract performance and security-related legitimate interests.
• Workspace and audit information, such as property names, reservation-line numbers, calling preferences, reports, recordings, transcripts and audit outcomes, to place and assess calls, provide evidence and analytics, and support customers. We rely on contract performance. Workspace owners are responsible for any notices or permissions required for calls they arrange.
• Support communications, including messages and related account details, to respond to enquiries and resolve problems. We rely on contract performance and legitimate interests in supporting the service.
• Technical and usage data, such as IP address, device/browser information, security events and service activity, to operate the site, prevent abuse and improve reliability. We rely on legitimate interests in security and service improvement, or consent where required.
• Order information, such as transaction references, purchased credits and billing status, to fulfil purchases, maintain your balance and meet legal obligations. Paddle processes payment details as Merchant of Record. We rely on contract performance and legal obligations.

Who receives data

We share information as needed with service providers that help us host the platform, place and analyse calls, deliver emails, and provide support and security. Paddle receives order and customer information to sell the product, manage payments and any subscriptions, handle taxes, invoicing and refunds. We may also share information with legal or accounting advisers and with authorities when law requires it. We do not sell your personal data.

Retention and security

We retain account, workspace and audit data, including recordings and transcripts, while needed to provide the service and manage your account. On closure or a valid deletion request we delete or anonymise data when it is no longer needed, except where law, disputes or legitimate security needs require longer retention. Transaction records may be kept to meet tax and accounting requirements. We use appropriate technical and organisational safeguards, including access controls and encryption, to protect personal data.

International processing

Some of our providers may process data outside India, the UK or the European Economic Area. Where applicable law requires safeguards for international transfers, we use appropriate measures, such as contractual protections or recognised adequacy arrangements where available. Contact us for more information about transfers relevant to your data.

Your rights

Depending on where you live, you may request access to your data, correction, deletion, restriction of processing or a portable copy, and object to certain uses. Where processing relies on consent, you may withdraw it. UK and EEA users may also complain to their local data protection authority. We aim to respond to UK and EEA rights requests within one month, subject to lawful extensions. Indian users may exercise applicable rights to access, correct and erase their data, raise a grievance, or nominate another person as provided by Indian law. Email robert.weir@oditly.com to make a request. We may need to verify your identity.

Cookies and local storage

The platform uses essential browser storage to keep you signed in and maintain your session. Your browser settings can clear or block this storage, although sign-in may then stop working. We do not use marketing cookies on the public website. If non-essential analytics or marketing cookies are introduced, we will update this notice and provide controls where required.