Gix by Chatgix
Privacy policy
This policy explains what information Chatgix collects when you use the website at chatgix.com and the Gix mobile app (together, "Gix"), why we collect it, who we share it with, and the choices you have. We wrote it to be read, not skimmed past.
1. Who we are
Gix is built and operated in India under the name Chatgix ("Chatgix", "we", "us"). For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Chatgix is the Data Fiduciary for the personal data described here.
2. What we collect
2.1 On the website
- Waitlist details: your name, email address and mobile number, the version of this policy you agreed to, and where you came from (for example, a referral link label).
- Technical data: our hosting provider processes your IP address and browser details to deliver the site and stop abuse. We use your IP address only to limit repeated sign-ups; we do not store it with your waitlist entry.
- The website does not use cookies, advertising trackers or analytics tools.
2.2 In the Gix app
| Information | When we collect it | Why |
|---|---|---|
| Mobile number and a one-time verification code | When you sign in | To create your account and confirm the number is yours |
| Name and profile preferences | When you set up your profile | To personalise Gix and how it introduces you on calls and messages |
| Contacts | Only if you choose to sync them | So you can ask Gix to call or message someone by name |
| Chats and tasks you give Gix | When you use task chat, by text or voice | To understand and carry out what you ask |
| Call audio, transcripts and summaries | For calls you forward to Gix, and calls Gix makes for you | To show you what was said and what happened |
| WhatsApp messages Gix sends for you, and whether they were delivered and read | Only if you link your WhatsApp account | To send messages you approved and tell you their status. Gix does not read your incoming WhatsApp chats. |
| Gmail and Google Drive data | Only if you connect your Google account | To read, search and act on email and files when you ask (see section 4) |
| Device and diagnostic data | While the app talks to our servers | To keep the service running, secure and debuggable |
The app does not include advertising or third-party analytics tools.
3. How we use your information
- To provide Gix: answer forwarded calls, make calls and send messages you approve, show transcripts, recordings and task progress.
- To contact you about your waitlist spot and important service changes.
- To keep Gix secure, prevent abuse, and fix problems.
- To meet legal obligations.
We do not sell your personal data, and we do not use it for advertising. Gix acts on your behalf (placing a call, sending a message) only after you approve the action.
4. Google user data
If you connect a Google account, Gix asks for permission to read, send, label and archive Gmail messages (it cannot permanently delete email), and to read, create, edit and delete Google Drive files. You see the exact permissions on Google's consent screen before you agree.
- Gix uses this access only to do what you ask in the app, such as finding an email, drafting a reply or saving a file.
- We read email and file content from Google when it is needed and do not keep copies of it on our servers. We store your Google access tokens, encrypted, and a log of when Gix accessed your account.
- People at Chatgix do not read your Gmail or Drive data, except where you separately turn on summary access for that connection, where it is needed for security or to comply with the law, or where the data has been aggregated and anonymised for internal operations. You can turn summary access off at any time.
- We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models.
Gix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google in the app at any time, or revoke access from your Google account permissions page. When you disconnect, we delete the stored tokens.
5. Who we share information with
We use the following service providers to run Gix. They process data on our instructions and only for the purposes below.
| Provider | What they do for Gix |
|---|---|
| Amazon Web Services (Mumbai, India region) | Hosting, databases, file storage including call recordings, and the website |
| OpenAI | Understanding your chats and tasks, and transcribing voice input |
| ElevenLabs | The voice agent that speaks on calls, plus call audio and transcripts |
| Exotel | Connecting phone calls |
| WhatsApp (Meta) | Delivering messages you send through Gix from your linked account |
| Gmail and Drive access you connect, and administrator sign-in | |
| Grafana Labs | Service monitoring and diagnostics |
Some providers process data outside India. Where they do, we rely on their contractual commitments to protect it. We may also disclose information if the law requires it, or to protect the rights and safety of our users or others.
6. How long we keep it
- Waitlist details: until Gix is open to you and for up to 12 months after, or until you ask us to delete them.
- Account data, contacts, chats and tasks: while your account is active.
- Call recordings and transcripts: kept until you delete them or delete your account. Call audio we cannot match to an account is deleted within 24 hours.
- Google tokens: until you disconnect Google or delete your account.
- When you delete your account, we delete your data from our live systems. Limited records may remain in backups for a short period, or where the law requires us to keep them.
7. Your rights and choices
Under the DPDP Act and other applicable laws, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- withdraw consent and ask us to delete it;
- nominate someone to exercise these rights for you if you die or become unable to; and
- raise a grievance with us, and if it is not resolved, with the Data Protection Board of India.
In the app you can disconnect WhatsApp and Google, and delete your account from Privacy & access → Delete my account. To leave the waitlist or make any other request, see section 12. We respond within 30 days.
8. Security
We encrypt data in transit, keep databases on private networks, store login and connection tokens hashed or encrypted, and limit who can access production systems. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
9. Children
Gix is not meant for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Calls with other people
When Gix answers or places a call, the other person speaks with an AI assistant acting for you, and the call may be recorded and transcribed. You are responsible for using these features in line with the laws that apply to you and the people you call.
11. Changes to this policy
If we change this policy, we will update the version date above. For significant changes, we will notify you in the app or by email before they take effect.
12. Contact and grievances
We are setting up a dedicated privacy contact and will publish it on this page. Until then:
- App users can disconnect services or delete their account at any time from Privacy & access in the app.
- Waitlist members can ask to be removed, or make any other privacy request, by replying to any message we send them.