HDGElabshdgelabs
Legal · Draft

Privacy Policy

Last updated: 4 June 2026

This is a working draft. The legally-binding version will be reviewed by Indian counsel before production use. If you have urgent privacy questions, email privacy@hdgelabs.com.

Who we are

HDGELabs builds AI tools for Indian SMBs. We operate two products under this brand: HDGEbot (AI customer support) and HDGEcalls (auto-sync of call recordings and transcripts). This policy covers both.

What we collect

  • Account data: email, name, organisation, hashed password.
  • HDGEbot data: chat transcripts between your customers and the bot, knowledge-base documents you upload, conversation metadata.
  • HDGEcalls data: call-log entries (numbers, timestamps), call recordings synced from your team's phones, transcripts produced by our transcription pipeline.
  • Billing data: processed by Polar.sh; we never store full card numbers.
  • Operational telemetry: page views, error logs, anonymised performance metrics (PostHog, Google Analytics).

Where it lives

  • HDGEbot database: Neon Postgres, region aws-ap-southeast-1 (Singapore).
  • HDGEcalls database + storage: Supabase, region ap-south-1 (Mumbai).
  • API: DigitalOcean droplet, region Bangalore.
  • Web traffic: Cloudflare + Vercel edge nodes.

Sub-processors

We share necessary data with these third parties under their own privacy terms:

  • Polar.sh — billing and subscriptions.
  • Neon, Supabase — databases.
  • Upstash — Redis cache.
  • Vercel — frontend hosting.
  • DigitalOcean — backend hosting.
  • Google (Gemini API) — LLM inference.
  • OpenAI Whisper (self-hosted) — call transcription.
  • PostHog, Google Analytics — anonymised product analytics.

How long we keep it

Account data is retained for the life of your account plus 90 days. Chat transcripts and call recordings are retained per your plan's retention policy (default 12 months). On account deletion, we permanently erase all customer data within 30 days, except where retention is required by law (e.g. tax records).

Your rights

Under India's Digital Personal Data Protection Act (DPDP) 2023, you can request access, correction, erasure, and a portable export of your personal data. Email privacy@hdgelabs.com and we'll respond within 30 days.

Contact

HDGELabs · India · privacy@hdgelabs.com