Try Free Trial - Click Here!
logo

Privacy Policy

Our Privacy Policy explains how Edysor AI handles your data and outlines the rights
and tools available for managing or deleting your information.

Privacy Policy — Edysor

Edysor Edutech Solutions Private Limited

Last Updated: 16th September 2026

Website: edysor.ai

1. Who We Are

Our company, Edysor Edutech Solutions Private Limited (Edysor, we, our, or us) is an education technology company based in India, incorporated under the Companies Act, 2013. We provide AI based voice technologies, automation and educational technologies.

Company: Edysor Edutech Solutions Private Limited

Website: edysor.ai

Email: info@edysor.ai

Support: support@edysor.ai

Grievance Officer (DPDPA): privacy@edysor.ai

Privacy Enquiries (GDPR): privacy@edysor.ai

Security Issues: security@edysor.ai

This Privacy Policy discusses how we collect, use, store, process, disclose and protect personal information when you engage with edysor.ai. Using our site or submitting information via our site, you consent and accept the practices outlined in the Privacy Policy.

2. What Data We Collect

2.1 Contact Form Submissions

When you complete and submit a contact form on edysor.ai, we may collect the following information:

  • Full Name – to identify and address you appropriately.
  • Email Address – to respond to your enquiry or request.
  • Company Name – to better understand your business requirements.
  • Phone Number – to contact you where you have provided authorization.
  • Message or Enquiry Details – to understand and respond to your request.
  • 2.2 Communication Authorization

    By submitting a contact form, you authorize Edysor to communicate with you through:

  • Email
  • SMS or WhatsApp
  • Telephone calls
  • NDNC / NCPR Compliance (India):

    By voluntarily providing your information, you consent to receiving communications relating to your enquiry through phone, email, SMS, or WhatsApp. We will not send unrelated promotional content unless you have separately consented to receive such communications.

    2.3 Website Analytics

    To improve our website and services, we use analytics technologies that may collect information such as:

  • Pages viewed and duration of visits
  • Browser, operating system, and device information
  • Approximate geographic location
  • Referral or traffic source information
  • Information obtained with analytics is typically generalized and is not specific to users.

    2.4 Cookies

    We operate, secure and enrich our site with cookies and the likes. Some cookies are crucial in preserving the functions of a website whereas others assist in analytics, personalizing, integrating social media, and advertising. Only in case of your agreement, we turn on non-essential cookies. To access our cookie preferences tools, we can adjust our cookie preferences any time.

    2.5 Email Communications

    When you subscribe to our newsletters, product news, or informational messages we may keep such details as your name and email up until the time you unsubscribe.

    2.6 Server Logs

    Our systems automatically record technical information including:

  • IP address
  • Date and time of access
  • Pages requested
  • Browser and user-agent information
  • 3. How We Use Your Data

    Your information may be used to:

    Answer questions and queries posted online.

    Get in touch with you using the official media.

    Give demonstrations, proposals, or information needed.

    Enhance the user experience and performance of websites.

    Protect our systems against fraud and misuse

    Adhere to regulatory, legal and compliance requirements.

    We do not:

  • Sell personal information
  • Share personal data with unrelated parties for marketing purposes
  • Send unsolicited promotional communications without consent
  • Use information for purposes inconsistent with this Policy
  • 4. Data Retention

    We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by law. Data is deleted automatically where noted below; other categories are retained no longer than necessary for the stated purpose and deleted on request.

  • Contact Form Records – retained no longer than necessary; deletion on request
  • SMS / WhatsApp Communications – retained no longer than necessary; deletion on request
  • Call Records – retained no longer than necessary; deletion on request
  • Newsletter Subscription Data – until unsubscribe request
  • Website Analytics – retained no longer than necessary; deletion on request
  • Server / System Logs – automatically pruned after 90 days
  • Mail Logs – automatically pruned per our email provider's default retention
  • Cookie Consent Records – retained no longer than necessary; deletion on request
  • Categories marked "automatically pruned" are deleted by system default. All other categories are deleted upon request, or earlier at our discretion, and in any case no longer than necessary for the purpose described.

    4A. Meta / CRM Data Retention

  • WhatsApp / Meta Lead Ads communications — retained no longer than necessary for the purpose described, or per the client's own CRM retention settings where configured; deletion on request.
  • Clients using Edysor CRM may set their own retention rules for leads and messages within the platform; client-configured settings override the Edysor default.
  • On Meta disconnection, the stored access token is deleted immediately and synchronization stops; previously synced lead/message data is deleted on request and otherwise retained no longer than necessary.
  • 5. Data Sharing & Third Parties

    We do not trade or sell personal information.

    Information may be shared with trusted service providers including:

  • AWS (Amazon Web Services) – hosting and infrastructure
  • Email and CRM providers – communications and customer management
  • Analytics providers – website usage measurement
  • SMS / WhatsApp providers – communication delivery
  • Law enforcement agencies where legally required
  • Business successors in connection with mergers, acquisitions, or reorganizations
  • All service providers are required through contractual obligations to maintain appropriate safeguards and comply with applicable privacy requirements.

    6. Meta Platforms Data (WhatsApp Business Platform & Meta Lead Ads)

    Edysor operates a CRM platform ("Edysor CRM") used by our business clients across industries. Where a client connects their Meta Business assets to Edysor CRM, or uses WhatsApp Business Platform through our CRM, we process the following on the client’s behalf:

  • Meta and Business Manager identifiers, Ad Account IDs, and connected Facebook Page / Instagram account details
  • Campaign, ad, form and lead identifiers
  • Lead-form answers submitted by end users (such as name, email and phone number)
  • Granted permission scopes and connection status
  • Access tokens (stored encrypted at rest)
  • Webhook events, synchronization logs and error logs
  • Conversion events sent back to Meta, where the client has enabled this feature
  • WhatsApp phone numbers, sender names, and the content of messages exchanged, including message template variables and payload content (template definitions themselves do not contain personal data, but the variables and messages sent through them do)
  • Meta Lead Ads flow. When an end user submits a lead form on a Facebook or Instagram ad, Meta does not push that data to Edysor automatically. Instead, Edysor CRM retrieves the lead data through Meta’s official API, using the authorization the connected business has granted, so the business can follow up with the lead inside Edysor CRM.

    How this data is used. We use Meta Platform data to: authenticate the client’s connection; display the client’s authorized Meta assets so they can select the relevant Pages and ad accounts; retrieve Meta Lead Ads enquiries; create or update CRM records; route leads to the client’s authorized users; automate follow-ups the client has approved; monitor and troubleshoot synchronization; and send conversion events back to Meta only where the client has enabled that feature. This data is not sold and is not used for unrelated advertising or profiling.

    Connection and disconnection lifecycle. Clients connect their Meta assets through an OAuth authorization flow and grant only the specific permissions required for the features they use. A client may disconnect Meta at any time from within Edysor CRM. On disconnection, the stored access token is deleted and synchronization stops. Previously imported leads and CRM records are retained per the client’s own CRM retention settings (see Section 4A) unless the client requests earlier deletion. If an Edysor subscription ends, imported Meta data is deleted per the client’s agreed retention terms, or as soon as reasonably practicable after account closure if no separate terms apply.

    Roles. For leads, enquiries and customer communications, the client is the data controller and Edysor Edutech Solutions Private Limited operates the CRM platform as its processor under contract. Edysor separately acts as controller for its own account, billing, security and administrator data.

    Your controls. You can ask us to access, correct or delete the personal data we hold about you, including your WhatsApp messages and any lead you submitted, at any time — see the Data Deletion page (edysor.ai/data-deletion) and Section 9 ("Your Rights"). You can also stop receiving WhatsApp messages at any time by replying STOP to the business.

    7. International Data Transfers

    Data Storage & Processing Regions:

  • Primary storage: AWS Mumbai (India)
  • Processing infrastructure: AWS Mumbai (India)
  • Additional regional options available upon request
  • In the case of users in the EU or the UK, the international transfer is safeguarded by approved Standard Contractual Clause (SCCs) and other justifiable security where necessary. Clients can demand India only, EU only or regional data residency depending on availability.

    8. Security Measures

    We employ technical and organizational measures designed to protect personal information, including:

  • TLS 1.3 encryption for data in transit
  • Encryption of stored information where applicable
  • Access restrictions for authorized personnel only
  • Audit logging and monitoring of system activity
  • Application and infrastructure telemetry with error logging and alerting on critical failures
  • Controls aligned with ISO 27001, GDPR, and DPDPA requirements
  • Security concerns may be reported to security@edysor.ai.

    9. Your Rights

    Under DPDPA 2023 (India), you may have rights relating to:

  • Access to personal information
  • Correction of inaccurate data
  • Deletion of personal information
  • Submission of grievances
  • Nomination rights under applicable law
  • You have rights to under GDPR (EU/UK):

  • Access personal data
  • Rectify inaccurate information
  • Request erasure
  • Restrict processing
  • Obtain portable copies of data
  • Object to processing activities
  • Withdraw consent
  • File complaints with relevant supervisory authorities
  • 10. How to Exercise Your Rights

    To submit a Data Subject Request:

    Email: privacy@edysor.ai

    Subject: “Data Subject Request – [Your Name]”

    Please include:

  • Full name and email address
  • Nature of your request
  • Relevant supporting information
  • Response Timelines:

  • Acknowledgment within 5 business days
  • Fulfillment within 30 days where applicable
  • 11. Grievance & Complaints

    To file a privacy-related complaint:

    Email: privacy@edysor.ai

    Subject: “Privacy Grievance – [Description]”

    Response Commitments:

  • Acknowledgment within 48 hours
  • Resolution target of 30 days
  • Should the complaint not be resolved within 30 days, you can take the issue further with:

    India: Data Protection Board

    EU/UK: Relevant Data Protection Authority in your jurisdiction

    12. Children’s Data

    Edysor.ai and Edysor CRM are intended for business users and individuals who are at least 18 years of age. However, our CRM does not currently perform technical age verification or automatically block records relating to minors — this depends on how each client collects and submits data. If you believe information relating to a minor has been submitted to our systems, please contact privacy@edysor.ai. Upon verification, we will delete the relevant records as quickly as possible.

    13. Data Breach Notification

    If a security incident impacts personal information, we will take appropriate actions which may include:

  • Notifying affected individuals within 72 hours where required by applicable laws
  • Providing information regarding the nature and scope of the incident
  • Explaining remediation measures and available rights
  • Reporting to regulators or authorities where legally mandated
  • Offering relevant guidance and support resources
  • 14. Policy Updates

    We will update this Privacy Policy as required by the laws or to accomplish the changes in our operations, product improvement or security. The changes in materials shall be communicated in advance in form of emails at least 30 days prior to implementation of the changes. The fact that the edysor.ai will continue to be used after the effective date of the changes will demonstrate acceptance of the new Privacy Policy.

    15. Contact Us

    General Enquiries: info@edysor.ai

    Support: support@edysor.ai

    Privacy Enquiries: privacy@edysor.ai

    Grievances: privacy@edysor.ai

    Security Issues: security@edysor.ai

    Acknowledgment:

    By accessing or using edysor.ai and voluntarily providing information, you confirm that you have reviewed, understood, and agreed to the practices outlined in this Privacy Policy regarding the collection, processing, storage, and protection of personal information.

    16. Data Deletion Request

    You can ask us to delete the personal data we hold about you, including any data received through WhatsApp or Meta Lead Ads.

    How to request deletion

    1. Email privacy@edysor.ai from the email or with the phone number you used, with the subject "Data Deletion Request".

    2. Tell us the WhatsApp number and/or email you used so we can locate your data.

    3. We will verify your identity and delete your personal data within 30 days, and confirm by email.

    Deleting your data removes your leads, messages and profile from our CRM. It does not delete data held independently by Meta or by the business you contacted where they are a separate controller; you may also contact them directly. We retain only the minimum record required to prove the deletion was carried out, with no personal content.

    For anything else, contact our Grievance Officer at privacy@edysor.ai.

    Edysor Edutech Solutions Private Limited

    logo

    AI-powered Voice, Chat, Interviews- designed to save time, costs and build efficiency.

    Follow us on

    LinkedInInstagramFacebookTwitter

    Products

    • Voice Agent
    • Chat Agent
    • Offer Letter AI
    • UNI GPT

    Resources

    • Call Yourself
    • Blogs
    • Pricing

    Others

    All rights reserved. Powered by Edysor