DPDP Act 2023 · Indian Privacy Standard

Privacy Policy

How 7Silicon Group protects personal identifiers, customer call audio, speech transcripts, and voice telemetry in strict accordance with the Digital Personal Data Protection Act, 2023.

Policy Version: 4.2•Effective Date: September 2026•Statute: DPDP Act 2023 & IT Rules 2011
100% Indian Residency

All data centers located in Mumbai & Hyderabad. Zero foreign egress.

Zero AI Model Training

Your conversations & voice files are never fed into public foundation models.

Automated PII Redaction

Real-time masking of Aadhaar, PAN, card numbers, and banking OTPs.

01

Data Fiduciary vs. Data Processor Roles

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"):

  • Customer as Data Fiduciary: When an enterprise client uses our IVR numbers, concurrent channels, and AI voice agents to communicate with their customers or leads, the client acts as the Data Fiduciary who determines the purpose and lawful basis for collecting customer data.
  • 7Silicon Group as Data Processor: We act strictly as a Data Processor, processing call audio, CDRs (Call Detail Records), and speech synthesis on behalf of and per the authenticated instructions of our enterprise clients.
02

Information Collected & Telephony Metadata

We process the following categories of information:

  • Account Identity Data: Corporate name, GSTIN, PAN, registered office address, authorized signatory KYC, contact phone number, and billing records.
  • Telephony Metadata (CDRs): Calling Line Identification (CLI), dialed number (DID), call timestamp, duration, SIP termination cause codes, packet telemetry (MOS, jitter).
  • Speech Audio & Transcripts: Ephemeral streaming audio packets, synthesized TTS output, and optional speech recognition transcripts processed through our private speech nodes.
03

Zero AI Model Training Guarantee

We maintain an unequivocal, legally binding guarantee regarding proprietary business conversations:

Zero Training Covenant: Neither your customer call recordings, live voice streams, nor speech-to-text transcripts are ever used to train, retrain, or improve foundational commercial LLMs (public or proprietary). Any custom fine-tuning performed for your enterprise (e.g. Dedicated Sovereign VPC LLM) produces private LoRA adapter weights isolated exclusively within your dedicated tenant VPC.
04

Data Retention, Masking & Ephemeral Processing

  • Statutory CDR Retention: Telecommunications regulations framed by the Department of Telecommunications (DoT) mandate that Call Detail Records (CDRs) be retained for a statutory minimum period of two (2) years for lawful verification.
  • Audio Retention Configurator: Enterprise administrators can configure call audio storage retention rules (e.g., 7 days, 30 days, 90 days, or Ephemeral Stream-Only Mode where raw audio is purged from memory buffers immediately upon call termination).
  • PII Masking: Automated redaction filters detect and mask 12-digit Aadhaar numbers, 10-digit PAN cards, and 16-digit credit card sequences in real-time transcripts before logs are saved to database disks.
05

Rights of Data Principals

Under Section 11–14 of the DPDP Act 2023, Data Principals enjoy specific statutory entitlements:

  • Right to access a summary of personal data being processed.
  • Right to correction, completion, and updating of inaccurate data.
  • Right to erasure of personal data that is no longer necessary for the statutory purpose.
  • Right of grievance redressal with response within statutory timelines.
06

Statutory Grievance Officer & DPO

In compliance with the DPDP Act 2023 and Information Technology (Intermediary Guidelines) Rules, our designated Grievance Officer is:

Name: Grievance Redressal Officer

Company: 7Silicon Group

Email: privacy@7silicon.com

Direct Escalations: dpo@7silicon.com

Response Window: Within 48 business hours