Legal
Privacy policy
In short
We collect what we need to run your account and put your agent on a phone number, including identity checks before a number is issued. For the people your agent calls, your organization decides why they are called; we process their data on your instructions, disclose at the start of every call that they are speaking with an AI, and honour opt-outs. We never sell personal data. Data lives on Amazon Web Services in India and the United States. You can ask us for access, correction or deletion at any time and we answer within 30 days.
01Who is responsible
Propgent is offered by two affiliated companies. Which one you deal with depends on where you are:
| If your billing address is | Your Propgent entity is | You pay in |
|---|---|---|
| India | Medigent Technologies LLP, a limited liability partnership registered in India under the Limited Liability Partnership Act, 2008, registered office Nawabganj, Barabanki, Uttar Pradesh 225001, India | Indian rupees through PayU |
| Anywhere else | 711webservices LLC, a limited liability company, organized under the laws of the State of New Mexico, United States, registered address 2201 Menaul Blvd NE, Suite A, Albuquerque, NM 87107, United States | US dollars through Stripe |
Both companies are referred to as “Propgent”, “we” or “us”. Where a right or obligation belongs to your contracting entity, it also protects the other entity to the extent it helps provide the Service to you. Contact for both: hello@propgent.io.
For visitors to propgent.io and for account holders, your contracting entity is the data controller (in India, the “data fiduciary”). For the people our customers call and message (End Users), the customer is the controller and Propgent is its processor; the customer’s own privacy notice applies alongside this one.
02What we collect from you
When you visit the website
- Demo requests: the name, phone number and email you type into the demo form, and the IP address the request came from.
- Demo line calls: calls to the demo number are recorded and transcribed. You hear a disclosure at the start of the call.
- Server logs: path, status, timestamp and IP address, kept for security and troubleshooting.
When you create an account
- Business name, your name, email, mobile number and password.
- Verification before a number is issued: business registration details and, for individuals, a government identity document (for example a passport, Aadhaar, PAN, driving licence or Emirates ID), the document number, a live selfie that is compared with the document photo, and a one-time code sent to your mobile. Identity documents and selfies are stored in a private bucket, readable only through short-lived signed links by staff who review verification.
- Payment details are collected by Stripe or PayU on their own pages. We receive the transaction reference, amount, status and the last digits of the card or the payment method type, never the full card number.
- Usage: which features you use, call counts and durations, error reports and device information, so we can run, secure and improve the Service.
Customer Data you bring into the app
Contacts and leads, project material (brochures, price lists, payment plans), recordings, transcripts, Interest Meter scores, notes, and data from integrations you connect (Meta lead forms, Google Sheets, Zapier, webhooks). We process this only on your instructions under the Data processing addendum.
03If a Propgent agent called or messaged you
A real estate business that uses Propgent asked us to call you, usually because you enquired about a property through an ad, a portal, a website form or a phone call. On that business’s behalf we process your phone number and name, what you say on the call (recorded and transcribed), the requirement and budget you describe, a lead score, and any WhatsApp or SMS messages exchanged.
- The agent tells you at the start of the call that you are speaking with an AI assistant for the named business.
- Calls are placed between 08:00 and 21:00 in your local time.
- To stop calls, tell the agent, reply STOP to a message, or email hello@propgent.io with the number that was called. We add the number to that business’s do-not-call list and pass your request to the business, which remains responsible for its own records.
- To see, correct or delete what the business holds about you, contact the business directly. If you write to us instead, we forward your request within 5 working days and help the business respond.
04Why we use personal data
| Purpose | Examples | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Providing the Service | Running your agent, CRM, notifications and billing | Contract |
| Verification and fraud prevention | Identity checks before issuing a phone number; abuse limits on forms | Legal obligation; legitimate interests |
| Security and reliability | Logs, monitoring, backups | Legitimate interests |
| Communicating with you | Service emails, low-balance alerts, support replies | Contract; legitimate interests |
| Marketing to you | Product news, only if you opted in; unsubscribe any time | Consent |
| Improving the Service | Aggregated usage statistics; reviewing demo-line calls | Legitimate interests |
| Complying with law | Tax records, lawful requests from authorities | Legal obligation |
Under India’s Digital Personal Data Protection Act, 2023 we rely on your consent given at sign-up and on the legitimate uses the Act permits, such as performing the contract you asked for and complying with law. Under the CCPA we do not “sell” or “share” personal information for cross-context advertising.
05Who we share it with
We share personal data only with providers that help us run the Service, each bound by contract to protect it. The full list is in the Data processing addendum; the main ones are:
| Provider | What for | Location |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups, email delivery (SES) and interest scoring (Bedrock) | India (Mumbai) and United States |
| Supabase (self-hosted on AWS) | Database, authentication and file storage | India (Mumbai) |
| Plivo | Phone numbers, calls, SMS, WhatsApp delivery and one-time codes | United States, with regional carriers |
| Google (Vertex AI) | The language model that runs the conversation, and the text-to-speech voices | United States |
| Deepgram | Speech-to-text | United States |
| Anthropic | The Manager assistant in your account, and identity-document checks | United States |
| Meta Platforms | Lead-form delivery and WhatsApp Business messaging | United States and EU |
| Google Sheets sync when you connect it | United States | |
| Zapier | Automation, only if you connect it | United States |
| Stripe / PayU | Payments | United States / India |
We also share data between Medigent Technologies LLP and 711webservices LLC to operate the Service, with law enforcement or regulators when legally required, and with a buyer if our business is sold, under the same protections. We do not sell personal data.
06International transfers
Your data is stored on Amazon Web Services in India (Mumbai region) with backups in the United States, and is processed by the providers above in the countries listed. Where data leaves the EU, UK or Switzerland we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) with each provider. Transfers out of India follow the Digital Personal Data Protection Act and any countries notified as restricted.
07How long we keep it
| Data | Kept for |
|---|---|
| Account and billing records | Life of the account, then 7 years for tax and accounting law |
| Identity documents and selfies | Until verification is decided, then up to 12 months for fraud prevention and carrier audits, then deleted |
| Call recordings, transcripts and CRM data | Life of the account or until you delete them; deleted within 30 days of account closure and within a further 30 days from backups |
| Demo requests and demo-line recordings | Up to 90 days |
| Server logs | Up to 90 days |
| Do-not-call entries | Kept as long as needed to honour the request |
08Security
Data is encrypted in transit and at rest. Every customer’s data is isolated by organization at the database level. Access tokens for integrations are encrypted and shown once. Identity documents live in a private bucket with time-limited links. Staff access is limited to what their role needs and is logged. If a breach affects you we will notify you and the relevant regulator without undue delay, and within 72 hours where the law requires.
09Your rights
Depending on where you live you can ask us to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent, or to nominate someone to act for you (India). Email hello@propgent.io. We verify your identity, respond within 30 days, and do not charge unless a request is clearly excessive. You can also complain to your data protection authority: in India the Data Protection Board of India, in the EU your national supervisory authority, in the UK the ICO, and in California the Attorney General.
Grievance Officer (India): John, Medigent Technologies LLP, john@medigent.io. We acknowledge grievances within 24 hours and resolve them within 15 days as required by Indian law.
10Cookies
The website sets only strictly necessary cookies. The application sets session cookies to keep you signed in. Details and choices are in the Cookie policy.
11Children
The Service is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a child’s data has reached us, email us and we will delete it.
12Changes
We will post updates here and change the effective date. For material changes we will also notify account holders by email.