Legal

Privacy Policy

Effective date: 1 June 2026

Synvolve Intellis Private Limited (“Riya”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information in relation to the Riya platform. It applies to platform operators (our customers) and, where applicable, their end-users.

This policy is aligned with India's Digital Personal Data Protection Act (DPDPA) 2023.

1. Information We Collect

Account & Registration Data: When you create a workspace, we collect your name, email address, company name, and billing information. This is necessary to provide and invoice the Service.

Usage Data: We collect data on how you interact with the platform — pages visited, features used, agent configurations, and API call logs. This helps us improve the Service and diagnose issues.

Conversation Data: Conversations handled by agents you deploy are logged and stored encrypted in your tenant's isolated data store. You, as the platform operator, are the data controller for your end-users' conversation data.

Knowledge Base Content: Documents you upload (PDFs, URLs, text) are stored and processed to power your agents' retrieval capabilities. This content remains yours.

Technical Data: IP addresses, browser type, device identifiers, and session identifiers collected automatically for security, fraud prevention, and platform stability.

2. How We Use Your Information

To provide, maintain, and improve the Riya platform.
To process billing and send invoices.
To send service notifications, product updates, and security alerts.
To respond to support requests and troubleshoot issues.
To monitor for abuse, fraud, and policy violations.
To comply with legal obligations under applicable Indian law.

We do not use your tenant's conversation data or uploaded documents to train any shared or public AI models. AI inference runs on your data solely to serve your configured agents.

3. Data Sharing

We do not sell your personal data. We share data with the third-party sub-processors listed at /subprocessors, each bound by a data processing agreement. In summary, we may share data with:

Infrastructure providers — Google Cloud, which hosts the platform in its Mumbai region.
AI inference providers — Google (Gemini), which generates agents' replies and may process conversation content outside India; and Sarvam AI, which turns callers' speech into text and agents' replies into speech on calls that use Basic voices, in India.
Communications providers — Plivo (calls, SMS and WhatsApp, through your own Plivo account), and Meta and Telegram when you connect WhatsApp Cloud API, Instagram, Messenger or Telegram — to deliver the conversations you run on those channels.
Email delivery — Brevo, for transactional email such as verification codes, invoices and alerts.
Payment processors — Razorpay, for billing only and limited to what is necessary to complete the transaction.
Legal authorities where required by law, court order, or to protect the rights and safety of users or the public.

4. Data Retention

Account data is retained for the duration of your subscription and for 30 days after termination, during which you may request a data export. Conversation logs are retained per your configured retention setting (default: 365 days). Billing records are retained for 7 years as required by Indian tax law.

5. Security

Our security measures include: encryption at rest (AES-256, provided by our cloud provider) and in transit (TLS 1.2 or higher), per-tenant data isolation, role-based access controls, multi-factor authentication, IP allowlists, audit logs and rate limiting. While we strive to protect your data, no method of transmission over the internet is 100% secure.

6. Your Rights

Under applicable law, you have the right to:

Access personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data (subject to legal retention obligations).
Export your conversation and configuration data.
Withdraw consent where processing is based on consent.

To exercise these rights, contact us at support@riyabot.com.

7. Cookies

We use only essential cookies — for authentication, session management and remembering your language choice. We do not use advertising or analytics cookies.

8. Third-Party Integrations

To generate your agents' replies, conversation content is sent to our AI inference provider (Google Gemini) and may be processed outside India. If you configure your own AI provider in your workspace (for example OpenAI, Anthropic or Azure OpenAI), that provider processes the content under your own agreement with them. Channels you connect (such as Plivo, Meta or Telegram) process the messages and calls they carry under their own terms. You can turn on PII masking so that card, Aadhaar and PAN numbers are masked in chat transcripts.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after the effective date of changes constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact our Data Protection contact at support@riyabot.com.

You also have the right to lodge a complaint with India's Data Protection Board once operational under the DPDPA 2023.