Trust at Zvani
How we handle data, the law, and your callers.
Last updated: 16 May 2026 • Frameworks: CCPA · GDPR · DPDP · PDPL • privacy@zvaniai.com
Zvani is operated by QBRAIN TECHNOLOGIES LLP. Our privacy team is reachable at privacy@zvaniai.com. We honour data-subject requests under the GDPR, India’s DPDP Act, and other applicable laws — acknowledging within 48 hours and resolving within 30 days.
Legal & policies
The terms that govern your use of Zvani and our handling of your data.
Privacy Policy
AvailableWhat we collect, why, and your rights.
Terms of Service
AvailableCommercial terms of using Zvani.
Data Processing Agreement
AvailableHow Zvani handles caller data on your behalf as a processor.
Working draft published; enterprise customers may request a counter-signed version.
Acceptable Use Policy
AvailableWhat Zvani must not be used for.
Cookie Notice
AvailableCookies and similar technologies on our website.
Version history
AvailableEvery published version of every legal document.
Operations & vendors
Where data goes and how the service runs day-to-day.
Sub-processors list
AvailableNamed third-party vendors that handle data on our behalf.
Sub-processor change notifications
Available30-day advance notice of new vendors.
Email subscription — backend automation coming.
System status
Coming soonReal-time and historical uptime.
Incident history
Coming soonPublic post-mortems of customer-impacting incidents.
Security
Technical and organisational measures we take to protect data.
Security overview
AvailableEncryption, access control, monitoring, incident response.
SOC 2 Type 1
RoadmapIndependent attestation of security controls.
Planned: 2027.
ISO 27001
RoadmapInternational standard for information security.
Planned: 2027.
Penetration test summary
On requestAnnual third-party security test, executive summary.
Vulnerability disclosure
AvailableHow to report a security issue you have found in our service.
Privacy rights
Channels to exercise the rights guaranteed by DPDP, GDPR, and other privacy laws.
Privacy & data requests
AvailableAccess, correct, delete, or complain — global rights plus region-specific routes (EU GDPR, India DPDP, and more).
Data deletion instructions
AvailableHow to request deletion of personal data Zvani holds about you.
Self-service dashboard control still in build; email is the canonical channel today.
Data Subject Access Request (non-customer)
Coming soonIf you have interacted with a Zvani-powered call or message and want to exercise your rights.
Industry & regional addenda
Sector-specific or country-specific terms layered on top of the global baseline.
Healthcare overlay
Coming soonAdditional terms for clinics and providers handling caller health information.
India data-residency tier
Coming soonOptional enterprise tier where all data and inference stay in India.
Available now to enterprise customers on request.
EU / UK annex
RoadmapGDPR-specific terms and EU representative details.
On entry into EU market.
UAE / KSA annex
RoadmapPDPL-specific terms with Arabic notice support.
On entry into Middle East markets.
Missing something? Email privacy@zvaniai.com and we will get back to you within two business days.