Draft for review. This text has not yet been reviewed by a lawyer and may change before launch.

Privacy policy

Last updated 28 October 2026

MK Solutions ("we") provides an AI phone receptionist to hotels and travel agents ("businesses"). This policy explains what we do with personal data of people who call those businesses ("callers") and of the businesses' staff who use our dashboard. It is written to meet the Digital Personal Data Protection Act, 2023.

Who decides what happens to caller data

The business you call decides why your call is handled and what happens to your enquiry. We process caller data on the business's behalf and only to handle that enquiry.

What we collect

  • Your phone number (from caller ID).
  • A recording of the call and a written transcript.
  • Details you give for your enquiry, such as your name, travel or stay dates, number of guests, destination and budget.
  • Whether your number is on WhatsApp, and WhatsApp messages you send in reply.
  • For dashboard users: name, email or phone, and actions taken in the dashboard.

How you are told

Every call starts with the agent saying that it is an AI assistant and that the call is recorded. You can end the call or ask for a person at any time.

Why we use it

  • To answer your enquiry and pass it to the business as a lead.
  • To send you the details you asked for on WhatsApp, only if you said yes on the call.
  • To bill the business for usage and to keep the service secure and working.

We do not sell personal data and do not use it for advertising.

WhatsApp messages

Reply STOP to any of our WhatsApp messages and we will not send you further messages. Reply START to receive them again.

How long we keep it

  • Call recordings: deleted automatically after 90 days by default. Each business can choose between 30 and 180 days.
  • Transcripts and leads: kept while the business uses our service, and deleted 60 days after the business cancels.
  • Billing records: kept as long as tax law requires.

Who else processes it

We use these service providers, each only for the part of the service they run:

  • Telephony: Vobiz (and Exotel as a backup).
  • Speech recognition, voice and language model: Sarvam AI.
  • Database, sign-in and storage: Supabase.
  • Web hosting: Vercel.
  • WhatsApp messages: Meta (WhatsApp Business Platform).
  • Payments by businesses: Razorpay.

[Confirm: where each provider stores data, and state the data location here.]

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can ask the business you called, or write to . Businesses can delete a caller's data from their dashboard; we act on requests made to us within 30 days.

Security

Data is encrypted in transit. Each business can see only its own callers. Staff access is limited to what their role needs, and administrative access is logged.

Grievances

[Confirm: grievance officer name and contact, as required by the DPDP Act.] Until then, write to .

Changes

We will update this page when our practices change and show the date of the last change at the top.