Privacy Policy

1. Who we are

telik.ai ("telik", "we", "us", "our") is a platform that lets businesses build AI agents that talk to their customers over phone calls, website chat and messaging apps. telik.ai is owned and operated by Nuvark Technologies (Pvt) Ltd (Nuvark Group), 69/2 St Jude Place, Thaladuwa, Negombo, Sri Lanka.

This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to our website (telik.ai), our web application (https://dev-app.telik.ai/), and the agents our customers run on our platform.

2. Our role: controller and processor

We handle personal information in two different roles:

• As a controller for information about our website visitors and our customers' account holders (for example, your name, email address and billing details).
• As a processor (service provider) for information about the people our customers' agents talk to — callers, website visitors and people who send messages ("end users"). The business that deployed the agent decides why and how that information is used, and its own privacy notice also applies. We process end-user information only on that business's instructions and to provide our service to it.

If you spoke to or messaged a business that uses telik.ai and have a question about your information, please contact that business first. We will help them respond, and you can also contact us directly.

3. Information we collect

Account and contact information

• Name, email address, password (stored in hashed form by our authentication provider) and profile photo.
• If you sign in with Google: your name, email address and profile picture from your Google account.
• Organisation and workspace names, team members you invite, and their roles.
• Messages you send us, such as support requests.

Billing information

Payments are processed by Stripe. We do not store full card numbers. We receive limited details from Stripe (such as card brand, last four digits, expiry date and billing country), together with invoices, payment status and your usage records (voice minutes and messages).

Content you add to the platform

• Agent settings, prompts, workflows and voice choices.
• Knowledge-base files and web pages you upload or link.
• Contacts you add, and phone numbers you connect or buy.
• Voice samples you provide for voice cloning.

Conversation information (processed for our customers)

• Voice audio, processed in real time to transcribe speech and generate replies.
• Transcripts and messages exchanged with an agent, and any details the agent collects during the conversation (for example, a name, appointment time or order number).
• Phone numbers, caller ID and channel identifiers (such as a Telegram user ID, or a WhatsApp phone number and profile name).
• Conversation metadata: date, time, duration, channel, status and outcome.

Information from services you connect

When you connect a calendar (Google Calendar, Cal.com, iCalendar), a CRM or workspace tool (HubSpot, Salesforce, Zoho CRM, Slack), a telephony provider (Twilio, Vonage, Telnyx, Exotel, SIP) or a messaging channel, we store the access tokens or credentials needed for that connection and process the data needed to perform the actions you configure — for example, checking calendar availability, creating a booking or adding a contact to your CRM.

Information from Meta (WhatsApp)

When a business connects its WhatsApp Business Account to telik.ai, we receive the following through the WhatsApp Business Platform: the business's WhatsApp Business Account ID, phone number ID and display name; and, for people who message that business, their WhatsApp phone number, profile name, message content (text and, where supported, media) and message metadata such as timestamps and delivery status. See section 6 for how we limit its use.

Technical and usage information

IP address, browser and device type, pages viewed, log data and error reports, and information stored in your browser's local storage (see section 12).

4. How we use information

• To provide the service: running agents, transcribing speech, generating replies, sending messages, placing and receiving calls, and performing the actions you configure.
• To show conversations, transcripts, analytics and usage in your dashboard.
• To bill you, including calculating usage and processing payments.
• To keep the service secure, prevent fraud and abuse, and enforce our Terms and Acceptable Use Policy.
• To provide support and send service messages such as security alerts, billing notices and changes to our terms.
• To improve and fix the service, using aggregated or de-identified information where possible.
• To send product news and marketing, only where permitted by law. You can unsubscribe at any time.
• To comply with legal obligations and respond to lawful requests.

5. Legal bases for processing

Where data protection law requires a legal basis, we rely on:

• Performance of a contract — to provide the service you signed up for.
• Legitimate interests — to secure, support and improve the service, balanced against your rights.
• Consent — for optional marketing and where the law requires it. You can withdraw consent at any time.
• Legal obligation — for example, keeping tax and accounting records.

For end-user information, the business that deployed the agent is responsible for having a valid legal basis and for giving end users any required notices (for example, that a call is handled by an AI or is being recorded).

6. What we don't do

• We do not share WhatsApp or other Meta Platform data with data brokers or advertising networks.
• We do not use customer conversation content to train our own AI models.
• We do not access customer content except as needed to provide the service, give support you ask for, keep the service secure, or comply with the law.

7. How we share information

We share personal information only as described below:

• Service providers (sub-processors) that help us run telik.ai, under contracts that limit their use of the data: cloud hosting and storage; authentication (Supabase); payments (Stripe); email delivery; AI speech and language providers used by an agent (for example, OpenAI, Deepgram and ElevenLabs, depending on the agent's configuration); and telephony and messaging providers (for example, Twilio, Vonage, Telnyx, Exotel, Telegram and Meta).
• Services you connect, such as your calendar, CRM or Slack workspace, when your agent or workflow sends data to them.
• The business you interacted with: conversation information is available to the business that deployed the agent.
• Nuvark Group companies, to operate and support the service.
• Legal and safety: where required by law, or to protect the rights, property or safety of our users, the public or us.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, subject to this Policy.

8. Google user data

telik.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to check availability and to create, update or cancel bookings that you configure your agent to make.

9. International transfers

We are based in Sri Lanka, and our service providers may process information in other countries, including the United States and countries in the European Union. When we transfer personal information across borders, we use appropriate safeguards required by applicable law, such as contractual commitments from our providers.

10. How long we keep information

• Account information: for as long as your account is open. After you close your account, we delete or anonymise it within 90 days, except where we must keep it longer.
• Conversation information: for as long as the business that owns it keeps its account, unless the business deletes it sooner or asks us to.
• Billing and tax records: for as long as tax and accounting law requires.
• Security logs: for a limited period needed to protect the service.
• Deleted information may remain in backups for a short period until those backups are overwritten.

11. Security

We protect information with measures that include encryption in transit (TLS), access controls based on least privilege, workspace-level separation of customer data, verification of third-party credentials before they are stored, and monitoring for misuse. No system is perfectly secure, so we cannot guarantee absolute security. If we become aware of a personal-data breach that affects you, we will notify you and the relevant authorities as the law requires.

12. Cookies and local storage

Our website stores your light or dark theme preference in your browser. Our web application uses browser storage to keep you signed in and to remember your settings. We do not use advertising cookies or cross-site tracking. You can clear this information in your browser settings at any time; if you clear the app's storage you will be signed out.

13. Your rights

Depending on where you live — including under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and the EU and UK GDPR — you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that is inaccurate or incomplete;
• have your information deleted;
• restrict or object to certain processing, including direct marketing;
• receive your information in a portable format;
• withdraw consent where we rely on it; and
• ask for a review of a decision based solely on automated processing that significantly affects you.

To exercise these rights, email operator@telik.ai. We may need to verify your identity. We respond within 30 days. If your request concerns end-user information that a business controls, we will pass it to that business and help it respond. You also have the right to complain to a data protection authority, including the Data Protection Authority of Sri Lanka or your local authority.

14. Deleting your data

Account holders, end users and people who messaged a business through WhatsApp or another channel can ask us to delete their data. Step-by-step instructions are on our Data Deletion Instructions page.

15. AI and automated responses

Agents on telik.ai generate spoken and written replies automatically using AI models. Businesses decide what their agents say and do, and are responsible for telling end users that they are talking to an AI where the law requires it. We do not use telik.ai agents to make decisions about you that have legal or similarly significant effects.

16. Children

telik.ai is a service for businesses and is not directed at children. You must be at least 18 to create an account. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

17. Changes to this policy

We may update this Policy from time to time. We will post the new version on this page and update the date at the top. If the changes are significant, we will tell account holders by email or in the app before they take effect.