Privacy policy

1. Who we are

Crystal Ball Insights Private Limited*Company is under the process of incorporation. is an AI-first technology company based in Noida, Uttar Pradesh, India. We operate the Shrota™ platform, an AI-powered Computer-Assisted Telephone Interview (CATI) system, marketed under the GetAICATI™ brand. For the purposes of applicable data protection law, we act as a Data Fiduciary when processing personal data.

2. Data we collect

• Contact information: Name, email address, phone number, and organisation details provided when you request a demo, contact us, or use our services.
• Survey respondent data: Phone numbers, voice recordings, and survey responses collected during telephone interviews conducted through the Shrota™ platform. This data is collected on behalf of our clients (the commissioning organisations).
• Usage data: Information about how you interact with our website, including IP address, browser type, pages visited, and referring URLs.
• Device & technical data: Device identifiers, operating system, and network information collected automatically when you visit our website.

3. How we use your data

• To provide, operate, and improve the Shrota™ platform and our services
• To conduct AI-powered telephone interviews on behalf of our clients
• To respond to your enquiries and provide customer support
• To send service-related communications
• To comply with legal obligations, including TRAI regulations
• To analyse website usage and improve user experience
• To ensure security and prevent fraud

4. Legal basis for processing

We process personal data based on: (a) your consent, where required; (b) performance of a contract or to take steps at your request; (c) compliance with legal obligations under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDPA) and TRAI regulations; and (d) our legitimate interests in operating and improving our services, provided these do not override your fundamental rights.

5. Data sharing & third parties

We do not sell personal data. We may share data with: (a) our clients who commission surveys, limited to aggregated and anonymised survey results unless otherwise specified in the client agreement; (b) technology service providers who assist in operating our platform, bound by strict confidentiality obligations; (c) legal and regulatory authorities when required by law; and (d) professional advisors such as auditors and legal counsel.

6. Data storage & security

All personal data is processed and stored on servers located in India. We employ industry-standard security measures including encryption at rest and in transit, access controls, and regular security assessments. Voice recordings are encrypted and stored securely, with access restricted to authorised personnel only.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Survey data is retained in accordance with client agreements and is securely deleted upon expiry of the retention period or upon client request. Website usage data is retained for a maximum of 24 months.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to: (a) access your personal data held by us; (b) request correction of inaccurate personal data; (c) request erasure of your personal data, subject to legal obligations; (d) withdraw consent at any time, where processing is based on consent; and (e) lodge a complaint with the Data Protection Board of India. To exercise any of these rights, please contact our Grievance Officer using the details below.

9. Cookies & tracking

Our website uses Google Analytics to understand how visitors interact with our site. This involves cookies that collect anonymised usage data. You can control cookie preferences through your browser settings. We do not use cookies for advertising or profiling purposes.

10. Children's privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website. The “Effective Date” at the top of this policy indicates when it was last revised.

12. Grievance officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Grievance Officer: