Privacy Policy

This policy explains what personal data Welanto collects and how we use and protect it, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

• Account data: email, mobile number, date of birth (to verify you are 18+), and your chosen anonymous username.
• Profile data (listeners): languages, topics, rate, bio.
• Usage data: calls, requests, ratings, token balance and transactions.
• Call recordings: voice calls may be recorded and retained for a limited period strictly for safety and moderation.
• Journal entries: any private journal/mood entries you create (visible only to you).

2. How we use your data

• To run the service — verify you, match you, process token payments;
• To keep the community safe — moderation, investigating reports;
• To improve the product and provide support.

Your username is shown to others; your email, phone, and DOB are not.

3. Who we share data with

We do not sell your data. We share only with service providers that help us run Welanto, under contract: hosting and database (Supabase, Vercel), voice calling (100ms), payments (Razorpay), and email/SMS providers. We may disclose data where required by law.

4. Security

Data is encrypted in transit and access is restricted. Passwords are hashed; we never store your card details (handled by Razorpay). No system is perfectly secure, but we take reasonable safeguards.

5. Retention

We keep data for as long as your account is active or as needed to provide the service and meet legal obligations. Call recordings are kept only for a short moderation window, then deleted.

6. Your rights (DPDP Act)

• Access and correct your personal data;
• Request erasure of your data;
• Withdraw consent; and
• Raise a grievance with our Grievance Officer.

7. Children

Welanto is for adults (18+) only. We do not knowingly collect data from minors.

8. Grievance Officer / Contact

Grievance Officer: [Name], [email]. General privacy queries: privacy@welanto.com.