Legal

Privacy Policy

How TheFrontDeskAI collects, uses, and protects your personal information when you use our AI virtual receptionist platform.

Last updated: July 2025
Effective: July 1, 2025
Applies to: thefrontdeskai.in
Section 01

Who We Are

TheFrontDeskAI is an AI-powered virtual receptionist service operated by TheFrontDeskAI (a proprietary business registered in India). Our platform provides 24/7 automated voice and WhatsApp-based guest communication services to short-term rental hosts in India.

Our registered office is in Delhi, India. For all privacy-related matters, you can reach us at privacy@thefrontdeskai.in.

Plain language summary: TheFrontDeskAI is an Indian company that gives Airbnb and Booking.com hosts an AI receptionist. This policy explains what data we collect from hosts, guests, and website visitors — and what we do with it.

Section 02

Information We Collect

We collect different categories of information depending on your relationship with our platform:

A. Property Host Account Data

  • Full name, email address, and mobile number used to create your account
  • Business name, GST number, and billing address (for invoicing)
  • Payment instrument details — processed and stored by Razorpay; we do not store full card numbers
  • Subscription tier, active plan dates, and minute balance history
  • Property knowledge base content you provide: property name, address, Wi-Fi credentials, lock codes, house rules, caretaker number, and check-in/out times

B. Guest Data (provided by Channel Partner Integration)

  • Guest name, phone number, check-in and check-out dates — synced from Airbnb or Booking.com via Channex.io on behalf of the host
  • Inbound caller ID at the time of calling the virtual receptionist number
  • WhatsApp sender ID when a guest messages the platform number

C. Call & Conversation Data

  • Audio recording of AI-handled calls (host-configurable; on by default)
  • Full speech-to-text transcript of every call in Hindi/Hinglish/English
  • AI-generated call summary sent to the host after each interaction
  • WhatsApp message content exchanged between guest and AI
  • Call metadata: duration, timestamp, call outcome (resolved / escalated)

D. Website & Dashboard Usage Data

  • Browser type, IP address, pages visited, and time on page (via analytics tools)
  • Login timestamps and dashboard feature usage (for product improvement)
  • Contact form submissions and support ticket content
Section 03

How We Use Your Information

PurposeData UsedBasis
Deliver the AI receptionist service — answer guest calls and WhatsApp messagesGuest phone, booking dates, property knowledge baseContract performance
Route inbound calls to the correct propertyCaller ID, Active Bookings databaseContract performance
Send post-call WhatsApp summary to hostHost mobile number, call transcriptContract performance
Manage your subscription, billing, and invoicesHost billing details, payment historyContract performance
Send low-balance alerts and auto top-up notificationsHost mobile, minute balanceLegitimate interest
Improve AI accuracy and voice model trainingAnonymised call transcripts (no personal identifiers)Legitimate interest
Fraud prevention and platform securityIP address, login activity, payment signalsLegitimate interest
Regulatory compliance and legal obligationsAll data categories as required by lawLegal obligation
Send product updates and service announcementsHost email and mobile numberConsent (opt-out available)

We do not sell your data. We do not use your data or your guests' data for advertising purposes. We do not allow third-party advertisers to access any personal information on our platform.

Section 04

Legal Basis for Processing

Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable data protection principles, we process personal data under the following lawful bases:

  • Consent: When you sign up and accept these terms, you consent to the processing described herein. You may withdraw consent at any time by contacting us, subject to active contractual obligations.
  • Contract Performance: Processing necessary to deliver the service you subscribed to.
  • Legitimate Interest: Platform security, fraud prevention, product analytics, and service improvement — where our interest does not override your fundamental rights.
  • Legal Obligation: Compliance with TRAI regulations, Indian tax laws (GST), and any court or regulatory order.
Section 05

Guest Data — Special Notice for Property Hosts

When you connect your Airbnb or Booking.com account to TheFrontDeskAI via our channel partner, your guests' booking data (name, phone number, stay dates) is automatically synced to our platform to enable the AI receptionist service.

Host responsibility: As the property owner and the person who has a direct contractual relationship with your guests, you are responsible for informing your guests that an AI-powered virtual receptionist service handles inbound enquiries. We recommend adding a note in your Airbnb listing description or your check-in welcome message: "Guest queries are handled by an AI virtual receptionist service. Calls and messages may be recorded and transcribed for service quality purposes."

Guest data received via Channex.io is processed strictly for the purpose of routing calls and WhatsApp messages to the correct property AI. We do not contact your guests directly for any marketing purpose.

Guest phone numbers and booking data are automatically deleted from our Active Bookings database 30 days after the check-out date. Call transcripts are retained for 90 days unless the host deletes them earlier from their dashboard.

Section 06

AI Voice Calls & WhatsApp Interactions

All inbound guest calls are handled by our AI system. In compliance with TRAI (Telecom Regulatory Authority of India) regulations, every call begins with a disclosure that the caller has reached an AI-powered virtual assistant.

  • Call recordings: Calls are recorded and transcribed by default. Hosts may disable recording from their dashboard settings.
  • Transcripts: Full Hindi/Hinglish/English transcripts are stored in the host's dashboard and accessible only to the account owner.
  • Emergency escalation: If a guest uses pre-configured emergency keywords (e.g., fire, flood, medical emergency), the AI immediately send a WhatsApp Message to the human caretaker number on file. In this case, normal AI call handling is suspended.
  • WhatsApp messages: Message content is processed through Meta's WhatsApp Cloud API. Meta's own privacy policy governs their handling of messages. We do not share WhatsApp message content with any third party other than the host.
  • No marketing on service calls: In accordance with TRAI's No Cross-Selling rule, the AI receptionist will never attempt to upsell products or services during a guest interaction.
Section 07

Data Sharing & Third-Party Partners

We share your data only with service providers necessary to operate the platform. All partners are bound by data processing agreements and are prohibited from using your data for their own purposes.

PartnerRoleData Shared
Vapi.aiVoice orchestration platformCaller audio stream, property system prompt
Sarvam AISpeech-to-text & text-to-speechAudio stream (no personal identifiers retained post-processing)
OpenAIAI language model (GPT-4o)Transcribed guest query + property context (anonymised)
ExotelCloud telephony, Indian virtual numbersCaller ID, call duration metadata
Meta (WhatsApp Cloud API)WhatsApp message deliveryGuest phone number, message content
Channex.ioOTA booking data sync (channel manager)Guest name, phone, booking dates — received from Airbnb/Booking.com
RazorpayPayment processingBilling details, transaction ID
Bubble.ioPlatform database & dashboard hostingAll account and operational data

We may disclose personal data if required by law, court order, or a regulatory authority (including TRAI, RBI, or the Ministry of Electronics and Information Technology).

Section 08

Data Retention

Data CategoryRetention Period
Host account and profile dataDuration of subscription + 2 years after account closure
Guest booking records (Active Bookings)30 days after check-out date, then automatically deleted
Call transcripts and recordings90 days (host may delete earlier from dashboard)
WhatsApp message logs90 days
Billing and invoice records7 years (Indian tax law requirement)
Website analytics data (anonymised)26 months
Support correspondence3 years from last interaction
Section 09

Data Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

  • All data in transit is encrypted using TLS 1.2 or higher
  • Dashboard access is protected by passwordless email authentication (magic links) with session expiry controls
  • Sensitive fields (Wi-Fi passwords, lock codes) are masked in the dashboard UI and access-controlled at the database level
  • Multi-tenant data isolation is enforced at the backend database layer — no client can access another client's data
  • Payment data is processed exclusively by Razorpay and is never stored on our servers
  • Regular security reviews and access audits are conducted on our Bubble.io platform

If you suspect a data security incident, please contact us immediately at security@thefrontdeskai.in. We will acknowledge all security reports within 24 hours and notify affected individuals within 72 hours if a breach is confirmed, in line with India's DPDPA obligations.

Section 10

Your Rights

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights in relation to your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (subject to legal retention obligations)
  • Right to Withdraw Consent: Withdraw your consent at any time — this will not affect processing already carried out
  • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details in Section 13)
  • Right to Nominate: Nominate another individual to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, email privacy@thefrontdeskai.in with the subject line "Data Rights Request — [Your Name]". We will respond within 30 days.

Property hosts may also delete their call logs, transcripts, and guest booking records directly from their dashboard at any time.

Section 11

Cookies & Analytics

Our marketing website (thefrontdeskai.in) uses cookies and similar tracking technologies for the following purposes:

  • Essential cookies: Required for the website and dashboard to function. Cannot be disabled.
  • Analytics cookies: Help us understand how visitors use our website (pages visited, time on page, referral source). We use anonymised analytics data only.
  • Preference cookies: Remember your language and display preferences.

You can control cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use the platform.

We do not use advertising or retargeting cookies. TheFrontDeskAI does not display third-party advertisements and does not participate in ad networks.

Section 12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Send a notification to all active host accounts via email and WhatsApp at least 14 days before the changes take effect
  • For significant changes, require fresh consent where required by law

Continued use of the platform after the effective date of an updated policy constitutes acceptance of the revised terms.

Section 13

Contact & Grievance Officer

For any questions, requests, or complaints relating to this Privacy Policy or your personal data, please contact:

Grievance Officer — TheFrontDeskAI
Email: privacy@thefrontdeskai.in
WhatsApp / Phone: Available to subscribed hosts via the dashboard support channel
Address: Delhi, India

We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt, as required under India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

If you are not satisfied with our resolution, you may approach the Data Protection Board of India once established under the DPDPA, 2023.

Have a privacy question?

Our team responds to all privacy queries within 48 hours. You can also manage your data directly from your host dashboard.

Email Privacy Team →

What's Coming Next

Starting with hosting.
Scaling to every front desk in India.

TheFrontDeskAI is being built for any business where a missed call means a lost guest, patient, or customer. Airbnb and villa hosts are first — you're shaping the foundation everything else will be built on.

Airbnb & Villa Hosts LIVE NOW
Clinics & Hospitals COMING SOON
Banquet & Event Venue COMING SOON
Boutique Hotels COMING SOON
Small Businesses COMING SOON