Privacy Policy

Last updated: 23 June 2026

LazyRabbit (“LazyRabbit”, “we”, “us”) provides an AI voice-calling and messaging platform that lets businesses place and receive phone calls, send WhatsApp/email/SMS, and manage the resulting customer records. This policy explains what data we handle, why, and your rights over it.

For data about your customers (the people you call or message), you are the data controller and LazyRabbit is your processor — we handle that data only to provide the service to you and on your instructions.

1. Information we handle

Account data: your name, business name, username, email, phone, billing details and GSTIN.
Call data: call recordings, transcripts, AI-generated summaries, call metadata (numbers, time, duration, outcome) and token/usage counts.
Customer (CRM) data: the name, phone and conversation history of the people you call or message, plus follow-up schedules.
Messaging data: WhatsApp / SMS / email content you send through the platform and inbound replies.
Integration credentials: the keys, tokens and passwords you enter to connect providers (telephony, WhatsApp, SMTP, payment, Google, custom APIs).
Payment data: handled by our payment processor (Razorpay); we store invoices and the amount, not card details.
KYC data (only if you request a phone number): business name and PAN; Aadhaar is stored masked (last 4 digits only) — never in full.

2. How we use it

To place/receive calls and messages and transcribe, summarise and store them so you can review and follow up.
To run connected integrations you enable (e.g. check a calendar, send an email) during or after a call.
To bill you, prevent abuse, and provide support.
We do not sell your data or your customers’ data, and we do not use it to train third-party models beyond what is needed to generate a single response.

3. Sub-processors

We rely on a small number of trusted service providers to deliver the service. Each processes only the data needed for its function, under contract, and only to provide the service to you:

Cloud database and file storage — to store your account, call and customer records (hosted in the India region).
Telephony and messaging providers — to place and receive calls and deliver WhatsApp/SMS.
AI speech and language providers — for real-time speech-to-text, language understanding and text-to-speech.
Payment processor — to handle billing and process payments securely; we do not store card details.
Integrations you connect — only if you enable them (e.g. calendar, spreadsheets, email/SMTP, chat, custom APIs), and only the data needed to perform the action you set up.

A current list of our named sub-processors is available on request at info@lazyrabbit.in.

4. Where data is stored

Your data is stored on Supabase infrastructure in the Mumbai (India) region. Some sub-processors may process data in other regions to deliver their service.

5. Security

All traffic is encrypted in transit (HTTPS/TLS).
Each account’s data is logically isolated — you can only access your own calls, customers and recordings.
Access is protected by authentication and per-account scoping.

6. How long we keep it

We retain your account data, call recordings, transcripts and customer records for as long as your account is active, so you can review past activity. You can delete any call, recording or customer record at any time from your dashboard. On account closure or written request, we delete your data within a reasonable period, except where we must retain it to meet legal, tax or fraud-prevention obligations.

7. Your rights

You can access, export, correct or delete your data. To exercise these rights, or for any privacy question, contact us at info@lazyrabbit.in.

8. Call recording and consent

Calls placed or received through the platform may be recorded and transcribed. You are responsible for providing any disclosure or obtaining any consent required by law in the jurisdictions you call, and for using the platform only for lawful, consented outreach.

9. Cookies

We use a minimal set of storage (an authentication token) needed to keep you signed in. We do not use third-party advertising cookies.

10. Children

The service is for businesses and is not directed to anyone under 18.

11. Changes

We may update this policy; we’ll revise the “last updated” date above and, for material changes, notify you.

12. Contact

LazyRabbit — info@lazyrabbit.in