Sahay Sales AI
Privacy Policy
Last Updated: April 20, 2026 | Effective Date: April 20, 2026
Sahay (“we,” “our,” or “us”) operates the Sahay Sales AI mobile application (the “App”) and website at www.sahay.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and website. Please read this Privacy Policy carefully. By using the App or website, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Name — Used for display and identification within your organization
- Email address — Used for authentication and communication
- Organization name — Used for multi-tenant data isolation
- Password (hashed) — Used for authentication
1.2 Call Recording Data
The App is designed to help sales teams analyze call recordings. When you use the App, we process:
- Audio files — Call recordings created by your device’s built-in call recorder that the App detects in a folder you choose
- Phone numbers — Parsed from the recording filename or matched from your device’s call log
- Contact names — Resolved from your device’s phonebook when the call’s phone number matches a saved contact
1.3 Call Log Metadata
To correctly classify each call and build an accurate sales pipeline, the App reads entries from your device’s call log. Specifically:
- Call timestamp and duration — Used to match a recording file to the exact call it came from and to distinguish inbound from outbound calls
- Call direction (inbound / outbound) — Read from the call log entry so dashboards and reports are accurate
- Call status (answered / missed / rejected / unanswered outbound) — Used to show the full call history on a lead’s timeline and trigger callback reminders for missed inbound calls
- Cached contact name (if any) — Taken from the call log entry to label the lead correctly
The App does not read call log entries for any number you have added to the App’s block-list. Only calls from the moment the permission is granted are read — historical call log is never backfilled.
1.4 Contacts
When you permit access to your contacts, the App reads contact information solely to match phone numbers from your call recordings and call log to the display names saved on your device. Specifically:
- Contact name and phone number — Looked up only for phone numbers that already appear in a call recording or call log entry the App has processed
- Contact picker — When you manually add a lead or block a number, you may select a contact via the Android system contact picker
The App does not upload your entire contact list to our servers. Only the name and phone number of contacts that correspond to a call you have recorded or a lead you have added are stored in your Sahay account.
1.5 Automatically Processed Data
When you upload call recordings, our AI systems automatically generate:
- Transcriptions — Text transcripts of call recordings
- Call analytics — Sentiment analysis, conversation summaries, action items, follow-up suggestions
- Lead profiles — Holistic profiles built from multiple interactions
- Identified contact names — Names spoken during a call may be extracted by our AI to upgrade a placeholder lead name to the real name
1.6 Device and Permission Information
We collect minimal device information required for App operation:
- Device recording path — The file system path where your phone stores call recordings
- FCM token — Firebase Cloud Messaging token for push notifications (if enabled)
- Phone state — The App listens for “call ended” events so a new recording can be processed immediately; no call audio is captured via this permission
1.7 Information We Do NOT Collect
- We do not record calls — the App processes recordings that your device’s own call recorder has already created
- We do not upload your full contact list — contacts are read only to resolve names for numbers you have called or been called by
- We do not collect location data
- We do not collect device identifiers for advertising purposes
- We do not share or sell personal data to advertisers or data brokers
- We do not read or send SMS messages
2. How We Use Your Information
We use the information we collect to:
- Provide the App’s core functionality — Upload, transcribe, and analyze call recordings
- Generate AI-powered insights — Create lead profiles, sentiment analysis, follow-up recommendations
- Enable team collaboration — Allow organization members to view shared leads and analytics
- Send notifications — Follow-up reminders and processing status updates
- Improve our services — Understand usage patterns and improve AI accuracy
- Authenticate users — Verify identity and manage access
2A. Android Permissions
The Sahay App requests the following Android permissions. Each permission is only used for the stated purpose; none are used for advertising, analytics, or data brokering.
| Permission | Why Sahay needs it |
|---|---|
READ_MEDIA_AUDIO / READ_EXTERNAL_STORAGE | To detect and read call recording audio files that your device’s built-in call recorder creates in the folder you select. |
READ_CALL_LOG | To correctly label each call as inbound or outbound, to match a recording to the right caller, and to show missed, rejected, or unanswered calls on the lead timeline so the rep can follow up. No historical call log is backfilled — only calls that happen after you grant the permission are read. Blocked numbers are always skipped. |
READ_CONTACTS | To resolve a phone number from a call recording or call log entry to the contact name saved on your device, so leads are labelled with real names rather than raw phone numbers. The full contact list is not uploaded — only the name and number of contacts that correspond to an actual call or lead are stored. |
READ_PHONE_STATE | To receive a “call ended” signal from the OS so a newly-saved recording file can be picked up and processed immediately. This permission does not give Sahay the ability to record, listen to, or access the content of any call. |
POST_NOTIFICATIONS | To deliver follow-up reminders, upload status, and daily activity notifications (you can disable these at any time). |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC | To keep a lightweight background service running that watches for new call recordings and uploads them while the App is not in the foreground. A persistent notification is always shown while this service is active. |
RECEIVE_BOOT_COMPLETED | To automatically restart the recording monitoring service after your phone reboots, so calls made after a reboot are not missed. |
REQUEST_INSTALL_PACKAGES | To install app updates you download directly from Sahay (used only during the pre-Play-Store distribution phase). This will be removed once the App is listed on the Google Play Store. |
INTERNET, ACCESS_NETWORK_STATE | Standard permissions required to communicate with the Sahay backend. |
You can review or revoke any of these permissions at any time from Android Settings → Apps → Sahay → Permissions. Revoking a permission may reduce or disable related features.
3. Data Storage and Security
3.1 Storage
- Audio files are stored in Microsoft Azure Blob Storage with encryption at rest
- Application data (leads, analytics, user accounts) is stored in Azure SQL Database with encryption
- All data is stored in Microsoft Azure data centers
3.2 Security Measures
- All data transmission uses TLS/HTTPS encryption
- Passwords are hashed using bcrypt before storage
- Authentication uses JWT tokens with secure signing
- Database access is restricted through Azure security groups
- Multi-tenant isolation ensures organizations cannot access each other’s data
3.3 Data Retention
- Call recordings and analytics are retained as long as your account is active
- You may request deletion of your data at any time (see Section 7)
- Upon account deletion, all associated data is permanently removed within 30 days
4. Third-Party Services
We use the following third-party sub-processors to operate the App. Each handles only the data needed for its stated purpose and is bound by its own privacy and security terms.
| Service | Purpose | Data Shared |
|---|---|---|
| Microsoft Azure (Blob Storage, SQL, App Service) | Primary cloud hosting, audio storage, application database | All application data, audio recordings |
| Soniox | Speech-to-text transcription for call recordings | Audio file, participant first names (for speaker identification) |
| OpenAI | AI analysis of transcribed text (summaries, action items, conversion scoring) | Transcription text (audio is never sent to OpenAI) |
| Google Sign-In | Optional authentication | Email address, display name from your Google account |
| Google Calendar | Optional follow-up calendar sync (when you connect it) | Follow-up event title, description, time |
| Firebase Cloud Messaging (FCM) | Push notifications (stage changes, daily report, follow-up reminders) | Device FCM token, notification payload |
| Twilio | Optional WhatsApp messages (only when server-side sending is enabled for your organization — see Section 6) | Recipient phone number, message text |
| SMTP (Gmail / Azure Communication Services) | Transactional email (daily reports, stage-change alerts) | Your email address, report content |
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.
5. Data Sharing Within Organizations
- Organization owners and admins can view all team members’ leads and analytics
- Team members can only view their own leads and analytics
You are responsible for managing access within your organization through the invite system.
6. WhatsApp Integration
Sahay supports two optional ways to send WhatsApp messages related to your leads. Both are strictly opt-in, and we do not read or access your personal WhatsApp messages or contacts at any time.
6.1 Device Deep-Link Mode (default)
- Messages are opened in the WhatsApp app on your device via a
wa.medeep link - The message content is pre-filled; you must manually tap “send” inside WhatsApp
- No data is sent from our servers to WhatsApp in this mode
6.2 Server-Side Sending via Twilio (optional, organization-controlled)
- Your organization administrator may enable automated WhatsApp sending through Twilio for follow-up reminders and scheduled messages
- When enabled, Sahay sends the recipient’s phone number and the message text to Twilio, which delivers it on your behalf via WhatsApp Business
- Incoming WhatsApp replies are not read or processed by Sahay
- This mode can be turned off at any time by your administrator
7. Your Rights and Choices
7.1 Access and Portability
- You can export your recordings data as CSV from the App
- You can request a copy of all data we hold about you
7.2 Deletion
- You can delete your account and all associated data at any time
- You can selectively delete your lead data without deleting your account
- Upon account deletion, all associated data is permanently removed within 30 days
7.3 Notification Preferences
- You can enable or disable push notifications through your device settings
- Follow-up reminders can be snoozed or dismissed within the App
7.4 Account Management
- You can update your profile information at any time through the App
- You can disconnect third-party integrations (Google Calendar) at any time
8. Children’s Privacy
The App is designed for business use and is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy within the App
- Updating the “Last Updated” date at the top of this document
Your continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy.
10. Applicable Law
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Information Technology Act provisions.
11. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise any of your data rights, please contact us at:
Sahay
Email: sales@sahay.io
Website: www.sahay.io
12. Consent
By using the Sahay Sales AI app, you consent to:
- The collection and processing of call recordings you choose to upload
- AI-based analysis of your uploaded recordings
- Storage of your data on cloud servers as described above
- Receiving follow-up reminders and notifications (which you can disable)
You may withdraw your consent at any time by deleting your account.