Privacy Policy

This Privacy Policy explains how WorkDial Pvt Ltd, an Indian private limited company ("WorkDial", "we", "us") handles personal data in connection with the WorkDial service and website. WorkDial is a Salesforce-native CTI platform: a managed package you install in your own Salesforce org.

WorkDial is operated by WorkDial Pvt Ltd, an Indian private limited company, with its registered office at 1st Floor, Flat No. 103, D.No 8-4-300/1/A, Tower-B, Kalpataru Residency, Ameerpet, Hyderabad, Telangana 500018, India. For privacy questions, contact privacy@workdial.io.

We handle personal data in two different roles, and it matters which one applies:

• As a controller for the personal data of our website visitors, marketing leads, and customers (for example, the work email of an admin who signs up). We decide how that data is used.
• As a processor for your call data: the records, transcripts, sentiment, and contacts in your Salesforce org, and the recordings in your own Twilio account or storage. You are the controller of that data; we process it on your behalf, governed by the Data Processing Addendum.

• Website and marketing data: the information you give us when you fill in a form, request a demo, or contact us, plus basic usage data from the site.
• Account data: the names and work emails of the people in your organisation who administer or use WorkDial.
• Customer Data we process on your behalf: transcripts, sentiment, and the contact identifiers on a call held inside your Salesforce org, and call recordings held in your own Twilio account or storage.
• Support and billing data: the information needed to support your account and bill your subscription.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service); legitimate interests (to secure, support, and improve the Service and to market to businesses); consent (where required, for example certain cookies); and legal obligation (to meet our legal duties). For Customer Data we process as a processor, your instructions and the DPA govern.

We use personal data to provide, secure, support, and improve the Service: to run calling, WhatsApp voice, and AI call analysis inside your org; to administer your subscription; to answer your questions; and to protect the Service from abuse. We do not sell personal data, and we do not use the content of your calls to train third-party AI models.

Sub-processors

We share Customer Data with the sub-processors needed to run the features you enable, each under a contract that restricts their use of it. We currently engage 2, listed with purpose and location in the Data Processing Addendum, and we give 30 days' notice before adding a new one.

Vendors, telephony, and Salesforce

Your own Twilio account carries your calls; Twilio is your vendor, not our sub-processor. Salesforce hosts your org and the native records; it is not our sub-processor, because your data already lives there. We also use ordinary business vendors (for example for our website, payments, and analytics) under appropriate contracts.

Legal and business transfers

We may disclose data where required by law, to protect rights and safety, or in connection with a merger or acquisition (with notice where required). We do not sell personal data.

WorkDial is established in India. Where we transfer personal data across borders, we use an appropriate safeguard such as the Standard Contractual Clauses or the UK International Data Transfer Addendum. Your Customer Data stays in your Salesforce org and inherits its data residency; transient AI processing happens on Amazon Web Services (US East, us-east-2).

Under GDPR and UK GDPR

You may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing. You can exercise many of these by contacting us, and you can manage Customer Data directly in your Salesforce org.

Under California law (CCPA / CPRA)

If you are a California resident, you have the right to know, delete, and correct personal data we hold about you, and to opt out of its sale or sharing. We do not sell personal data or share it for cross-context behavioural advertising. To exercise your rights, email privacy@workdial.io. We will not discriminate against you for exercising them.

Your Customer Data lives in your Salesforce org, so your retention and deletion rules apply to it directly; we keep no external copy. For data we hold as a controller:

• Account data: kept for the life of your account and deleted within 90 days of account closure, unless the law requires us to keep it longer.
• Billing records: kept for as long as tax and accounting law requires, which for an Indian company is up to 8 years.
• Website and marketing data: kept until you unsubscribe or object, then deleted, and in any case no longer than 24 months of inactivity.

We use a small set of cookies on our website. How we use them, and how you manage them, is set out in our Cookie Policy.

Your call data is stored as native Salesforce records, so it is encrypted inherited from Salesforce, in transit and at rest and governed by your own sharing rules, permission sets, and field-level security. Audit runs through Salesforce field history plus login and event monitoring on the native records. WorkDial operates no external customer-data store to secure separately. Transient AI processing uses TLS 1.2 or higher in transit.

WorkDial uses automated processing to generate transcripts, sentiment, and summaries from calls. This produces analysis for the business that operates the WorkDial account; it does not make solely automated decisions about a caller that produce legal or similarly significant effects. If you spoke with a business that uses WorkDial and have a question about how a call was analysed, contact that business.

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. If a change is material, we will give reasonable notice.

For privacy questions or to exercise a right, email privacy@workdial.io or write to us at 1st Floor, Flat No. 103, D.No 8-4-300/1/A, Tower-B, Kalpataru Residency, Ameerpet, Hyderabad, Telangana 500018, India.