1. Scope and controller
This Privacy Policy explains how Qultured Media Private Limited, trading as Agentic Universe, handles personal data through the Site, public demonstrations, Experience Centre, lead forms and related communications. For these activities, we generally act as controller. For contracted customer deployments, roles and instructions are set in the applicable agreement and may differ.
2. Data we collect
- Contact and professional data: name, work email, phone or WhatsApp number, company, role, interests, message and communication preferences.
- Verification and access data: one-time-passcode challenge data, verification time, work email, access-session token, attempt and expiry information.
- Demo and conversation data: prompts, selections, typed messages, browser speech transcripts, generated replies, and, where a real voice or telephony feature is activated, audio or recordings, transcripts, phone numbers, timestamps, duration, call status and routing metadata.
- Technical and usage data: IP-derived region, device and browser details, language, time zone, referring page, viewed pages, clicks, approximate location, identifiers and diagnostics.
- Communications: emails, support requests, phone or WhatsApp correspondence, feedback, and vulnerability reports.
- Campaign attribution: where a tracked link is used, campaign, email, name or company fields embedded in that link may be associated with visits and analytics sessions.
Please do not submit real customer data or sensitive personal data to a public demo. Some Experience Centre screens contain synthetic sample data and should not be treated as real records.
3. How we receive data
We receive data directly from you, from your browser or device, from your organisation, and from service providers that deliver hosting, analytics, email, messaging, AI or calls. We may also receive business contact details from lawful public or professional sources when communicating with organisations.
4. Why we use data
- provide the Site, verify access, operate demos and respond to requests;
- place requested calls and deliver requested email, phone or WhatsApp follow-up;
- generate AI or voice responses and maintain conversation context;
- secure systems, detect abuse, debug failures and enforce terms;
- understand Site use, attribute campaigns and improve content and experience;
- maintain business records, establish or defend legal claims, and comply with law; and
- send relevant business communications where permitted, with opt-out rights.
Depending on applicable law, we rely on performance of a contract or steps requested before a contract, legitimate interests in operating and improving a business Site, consent where required, and compliance with legal obligations. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.
5. AI, speech and call processing
Browser voice features may use your browser or operating system speech-recognition service to turn microphone input into text. The Site can send that text, prior conversation turns and selected demo context to an AI provider to generate a response. Google Gemini may be used for response generation or text-to-speech. A configured routing service may be used before a Gemini fallback.
For a real voice demo, telephony may be provided by Twilio, Exotel, Ozonetel or another activated provider. Not every listed provider is active in every flow. Call audio, recordings and transcripts are processed only where the flow enables them, subject to feature notices and applicable consent requirements. Browser-generated speech may remain within the browser provider's flow, while the resulting transcript can be sent to us.
Do not share passwords, payment-card data, health records, government identifiers, confidential customer information or other sensitive data. Tell anyone else participating that an AI system is involved and that recording may occur where indicated.
6. Retention
We keep data only as long as reasonably needed for its purpose, security, legal obligations and dispute resolution. Retention is context-based rather than one period for everything. OTP challenges generally expire in about 10 minutes, and Experience Centre access sessions in about 8 hours. Lead and business correspondence may be kept while a relationship is active and for a reasonable period afterward. Security and server logs are generally shorter-lived. Demo conversations, call metadata, audio or transcripts are retained only when operationally necessary or configured for follow-up, quality, security or legal purposes, then deleted or de-identified.
Backups and provider systems may take additional time to cycle out. We may retain minimal suppression records to respect opt-outs.
7. International processing
We and our providers may process data in India, Singapore, the United States and other countries where they operate. Those countries may have different privacy laws. Where required, we use contractual, organisational or other lawful transfer safeguards and assess provider protections.
8. Security
We use reasonable technical and organisational controls appropriate to the data and feature, including limited access, HTTPS, short-lived verification records and signed access sessions. No method is risk-free. If you find a security issue, follow our Vulnerability Disclosure Policy.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, opt out of certain sharing or marketing, and complain to a data protection authority. You may also ask about applicable transfer safeguards.
Send requests to xerxes@agenticuniverse.ai. We may verify identity and authority before acting. Rights can be limited by law, security, privilege and recordkeeping obligations. We will not discriminate against you for exercising a right.
10. Children
The Site is intended for business users and is not directed to children. We do not knowingly collect personal data from children through public demos. If you believe a child submitted data, contact us so we can assess and delete it where appropriate.
12. Updates and contact
We may update this policy as features, providers or law change. We will post the revised policy with a new date and provide additional notice where required.
Privacy contact: xerxes@agenticuniverse.ai.
This document is operational guidance, not legal advice. It should be reviewed by qualified counsel for the jurisdictions, products and customer deployments that apply.