Privacy Policy

This policy explains how Ampli5 Tech Labs Private Limited (“Ampli5”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, ask us for a demo, talk to our demo agent, or use Ampli5, the AI calling software we build and set up for businesses. It is written to meet the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and the rules made under it.

1. Who we are

Ampli5 Tech Labs Private Limited is a company incorporated in India under the Companies Act, 2013 (CIN U62011MH2026PTC475456). Our registered office is at A/603 Zee Tulsi CHS Ltd., Dadabhai Cross Road No. 3, Vile Parle (West), Mumbai 400056, Maharashtra, India.

Before the company was incorporated on 8 September 2026, the Ampli5 service was operated by Coffee Digital, a sole proprietorship. Our Meta business portfolio, which we use for WhatsApp messaging, is verified under that name.

2. The two roles we play

We are a Data Fiduciary for personal data that we decide how to use: about people who visit our website, contact us, ask for a demo or talk to our demo agent, and about the people at our customers who use Ampli5 or deal with us, such as account holders, users and billing contacts.
We are a Data Processor for personal data that our customers process through Ampli5 about their own leads, callers and contacts. The customer is the Data Fiduciary for that data and decides why and how it is used. Section 4 explains this.
Licensed deployments. When a customer runs Ampli5 on infrastructure it owns, its data is stored in its own systems and processed through provider accounts held in its name. We see that data only if the customer asks us to provide support, and only as far as that support needs.

3. Personal data we collect, and why

When you ask for a demo or contact us: your name, work email, phone number, company, how many leads you handle, when to call you and anything you write to us. We use it to reply, arrange a demo and follow up with you about Ampli5.
When you talk to our demo agent: your voice is sent in real time to our speech and AI providers so the agent can hear you and reply, and the conversation is shown as text on your screen. We do not record demo calls or keep a transcript of them. We use your IP address for a short time to stop the demo being abused.
When you use Ampli5 as a customer: account details (name, work email, phone number, role and company), sign-in and security information, settings, and records of how the software is used. We use it to provide and secure the software, support you, bill you and tell you about changes.
When you pay us: billing contact, company details, GSTIN, invoices and payment references. Payments are handled by our payment gateway; we do not store full card numbers or banking passwords. We use this to invoice you, collect payment and meet tax and accounting law.
When you ask for support: your emails, messages and support conversations, including with our in-app support assistant, which uses AI to suggest answers. We use them to help you and to improve our support.
When you visit our website: technical information such as your IP address, browser and device type, the pages you visit and the page that referred you. We use it to keep the website secure, fix problems and understand which pages are useful.
Business contacts: we may contact people at businesses that could use Ampli5, using business contact details they have made public or shared with us. You can ask us to stop at any time, and we will.

We process this personal data with your consent, which you give when you submit a form or start a demo call; because you gave it to us for that purpose; or where the law requires it. You can withdraw your consent at any time, as easily as you gave it, by writing to privacy@ampli5.in. Withdrawing consent does not affect processing already done.

4. Data we process for our customers

When a business uses Ampli5, it processes personal data about its own leads, callers and contacts through the software: names, phone numbers, email addresses and enquiry details; call audio, recordings and transcripts; summaries and answers to its qualifying questions; appointments and callbacks; WhatsApp messages; and do-not-call, consent and audit records. We call this Customer Data.

For Customer Data, the business is the Data Fiduciary and we are its Data Processor. We process Customer Data only to provide the software to that business, on its documented instructions and under our agreement with it. We do not sell Customer Data, use it for our own marketing, share one customer’s data with another, or use it to train AI models that serve other customers.

The business is responsible for having a lawful basis to contact its leads and for the notices it gives them. The software helps it meet those duties: every call made through our hosted service opens by saying that the caller is an AI and that the call is recorded; calls are placed only within permitted calling hours; numbers are checked against the business’s do-not-call list before they are dialled, and against the national Do Not Disturb registry where the business has connected a scrubbing provider; and a request not to be called again is recorded and honoured.

If a business called or messaged you using Ampli5, please contact that business about your data first. You can also write to privacy@ampli5.in, and we will pass your request to the business and help it respond. If you tell the agent on a call that you do not want to be called again, that business will not call you again through Ampli5.

We share personal data only as this policy describes. We do not sell personal data.

Service providers that process data for us under contract, in these categories: cloud hosting and databases; speech recognition and voice synthesis; AI language models; telephony carriers and number providers; WhatsApp messaging through Meta; email delivery; payment processing through Razorpay; cookie-free website analytics; and support tools. They may use the data only to provide their service to us. Customers can ask for our current list of providers under our data processing terms.
The business you dealt with. If you are a lead of one of our customers, your data is available to that business, because it is the business’s data.
Authorities and advisers: when the law requires it, to comply with an order of a court or government authority, to protect the rights, property or safety of Ampli5, our customers or others, or to prevent fraud and abuse; and our professional advisers, such as auditors and lawyers, who are bound to keep it confidential.
A buyer or successor, if Ampli5 is involved in a merger, acquisition or sale of assets, with the same protections as this policy.

6. Where your data is processed

We store and process personal data in India and in other countries where our service providers operate, for example to host our software or to run speech and AI processing. When personal data leaves India, we transfer it only as the DPDP Act allows, never to a country the Government of India has restricted, and under contracts that require our providers to protect it.

7. How long we keep it

Enquiries and demo requests: up to 24 months after our last contact with you, unless you become a customer.
Demo agent conversations: not recorded and not stored.
Customer account data: while the account is open and for up to 12 months after it closes, to deal with questions and disputes.
Billing, tax and accounting records: for at least eight years, as Indian company and tax law requires.
Call recordings made through our hosted service: deleted automatically after 180 days. A customer can ask us to delete them sooner.
Other Customer Data: for as long as the customer’s agreement with us lasts, then deleted within 60 days of it ending, unless the customer asks us to return it first or the law requires us to keep it.
Audit records and logs: the audit record of each call and compliance decision is kept for as long as the customer’s agreement lasts, because it is the proof of what was called and why. Technical logs are kept only for the short period needed to secure and troubleshoot the software, and for longer where the law requires it.
Do-not-call and erasure records: for as long as needed to make sure a number that asked not to be called is not called again. We keep only what that requires.

When we no longer need personal data, we delete it or make it anonymous. Copies held by our service providers are removed on their own deletion schedules.

8. How we protect it

We use reasonable security safeguards, including encryption of data in transit and at rest, separation of each customer’s data at the database level, access limited to the people who need it, secure storage of credentials, an append-only audit log of compliance decisions, and monitoring to detect misuse. When a call recording is saved, the carrier’s copy is deleted. No system is perfectly secure. If a personal data breach occurs, we will inform the people affected and the Data Protection Board of India as the DPDP Act and Rules require, and for Customer Data we will tell the customer without undue delay so that it can meet its own duties.

9. Your rights

Under the DPDP Act, you can:

ask for a summary of the personal data we process about you, how we process it, and who we have shared it with;
ask us to correct, complete or update it, or to erase it once it is no longer needed for the purpose it was collected for, unless the law requires us to keep it;
withdraw your consent at any time;
nominate another person to exercise your rights if you die or become unable to;
have a grievance heard by our Grievance Officer, and, if you are not satisfied, complain to the Data Protection Board of India.

To use any of these rights, write to privacy@ampli5.in from the email address or phone number linked to your data, or tell us how we can confirm it is you. We will verify your identity before acting and respond within 30 days. For Customer Data, we will pass your request to the business that controls it and help it respond. You can also ask us how to delete your data on our Data Deletion page.

10. Children

Ampli5 is for businesses and is not meant for anyone under 18. We do not knowingly collect children’s personal data. Our customers must not use Ampli5 to call or message a child without the verifiable consent of a parent or lawful guardian, as the DPDP Act requires.

11. Cookies and similar technologies

Our website analytics do not use cookies or follow you across other websites. With your consent, and only then, our website loads the Meta Pixel and the LinkedIn Insight Tag, which set cookies so we can show our ads to people who visited and measure which ads lead to a demo request. We ask the first time you visit; declining loads nothing, and you can change your answer at any time with Cookie settings at the foot of every page. The Ampli5 app uses essential browser storage to keep you signed in and secure. You can clear it in your browser settings, but you will then need to sign in again.

12. Calls made by AI

Calls made through Ampli5 are placed or answered by an AI agent, and each call made through our hosted service opens by saying that the caller is an AI and that the call is recorded. The agent asks the questions the business has set, notes the answers, and can book an appointment or a callback. It does not make decisions that have legal or similar effects on you, such as approving a loan; those decisions are made by the business and its staff.

13. Changes to this policy

We may update this policy. When we do, we will change the date at the top, and we will tell customers about material changes by email or in the app before they take effect.

14. Contact us and our Grievance Officer

Ampli5 Tech Labs Private Limited (CIN U62011MH2026PTC475456)
Registered office: A/603 Zee Tulsi CHS Ltd., Dadabhai Cross Road No. 3, Vile Parle (West), Mumbai 400056, Maharashtra, India
Email: privacy@ampli5.in
Phone: +91 99875 80501 (Monday to Saturday, 10:00 to 19:00 IST)

Grievance Officer: Kamlesh Subodh Mehta, privacy@ampli5.in. We acknowledge a grievance within 7 days and aim to resolve it within 30 days of receiving it.