What we collect from callers, businesses, and website visitors — and what we deliberately don't.
Last updated: August 2026
This policy applies to three groups: visitors to this website, callers whose phone calls are handled by a HeadStart AI voice agent on behalf of a subscribing business, and the owners and staff of businesses that use the HeadStart AI dashboard.
Website visitors: we don't run analytics or advertising trackers on this site. The one third-party resource loaded is Google Fonts (fonts.googleapis.com / fonts.gstatic.com) for the typefaces used here, which may receive your IP address per Google's own policies when your browser fetches them.
Callers: when you call a business using HeadStart AI, we process your phone number and the spoken content of the call (converted to text) to book appointments, answer questions, and prepare a brief for the business. Your name, phone number, and address are treated as personal data and are stripped from the transcript before any AI model processes it — see our privacy architecture for exactly how.
Business owners and staff: we collect the account information needed to operate your dashboard — your name, contact details, business details, and the client/appointment records your team creates while using the product.
Data is used solely to operate the calling, booking, and notification service for the business you called or work for. We do not use call data to train third-party AI models, and we do not sell or rent any personal data to advertisers or data brokers.
All data is stored exclusively on AWS infrastructure in Mumbai, India. It does not leave India.
AES-256 encryption at rest and TLS 1.3 in transit on every request. Caller identity (name, phone, address) is scrubbed from the transcript before any AI model sees it, and is only re-attached inside the authorized business's own dashboard.
Call recordings are automatically deleted after 90 days, with no exceptions. Client and appointment records created by a business are retained for as long as that business's account is active, and are deleted within 30 days of account closure on request.
Verbal consent is logged with a timestamp at the start of every AI-handled call. If a caller would prefer to speak with a person instead, the call is transferred to the business's own front desk.
WhatsApp (operated by Meta) is used only to deliver the booking confirmations and reminders a business configures — it receives the phone number and message content needed to send that notification, nothing more. Beyond that, and Google Fonts as noted above, we do not share personal data with third parties.
You have the right to access, correct, and request erasure of your personal data, and to withdraw consent at any time. See our DPDP compliance page for the full detail on our role as a data processor. To exercise any of these rights, contact us using the details below — we aim to respond within 30 days.
If this policy changes in a way that affects how your data is handled, we'll update the date at the top of this page and, where the change is material, notify business account holders directly.
Questions, requests, or grievances about this policy can be sent to info@headstartai.in or via WhatsApp.