Privacy Policy

1. Zero Voice Recording Architecture

PurelyTalk does not record, intercept, transcribe, or store your voice conversations.

Spoken audio is transmitted in real time between participants using WebRTC peer-to-peer (P2P) connections and encrypted Metered TURN relay services (utilizing DTLS-SRTP standards). Media flows directly through caller endpoints or transit relay buffers without touching persistent storage on our servers.

2. Anonymous Guest Access & Optional Profiles

PurelyTalk provides anonymous access. You do not need to provide your real name, government identity document, mobile phone number, or biometric data to use the platform:

• Guest Users: Assigned a randomized guest identifier and username stored in your local browser cache (localStorage).
• Registered Users (Optional): If you choose to create an account, we store a chosen handle/username, email address, password hash (salted scrypt), and optional preferences (language, mood, and filters).

3. Information We Collect and Process

To safely deliver the service, maintain network integrity, and comply with statutory obligations, we process:

• Session Signaling Data: Real-time WebSocket connection state, temporary room/match identifiers, and ICE candidates needed to establish WebRTC media channels.
• Safety & Abuse Reports: When a user files a report, we log the report category, optional user notes, participant identifiers, timestamps, and observed connection network IP addresses solely for moderation review and abuse investigation.
• Technical Metadata & Security Logs: Request timestamps, user-agent strings, rate-limit metrics, and client IP addresses required for security monitoring and fraud prevention.

4. Data Retention & Security Logs (180-Day Schedule)

PurelyTalk maintains a structured 180-day retention schedule, distinguishing between mandatory technical cybersecurity logs and platform safety moderation records:

• Technical Connection & System Logs: In accordance with applicable cybersecurity logging directives (including the CERT-In Directions of April 28, 2022, and Rule 3(1)(h) of the Information Technology Intermediary Guidelines Rules, 2021), technical system logs, connection timestamps, and access metadata are maintained for 180 days within India-based infrastructure.
• Safety & Abuse Reports: Abuse reports, moderation actions, and associated investigation metadata are retained under PurelyTalk's internal safety retention policy for up to 180 days to investigate abuse, enforce community guidelines, and prevent repeat harassment.
• Automated Purging: An automated maintenance routine permanently purges call connection records, expired moderation reports, and temporary logs once they exceed the 180-day window.
• Internal-Only Access: Network IP addresses captured during moderation reports and call connection records are strictly restricted to authenticated administrative personnel for safety enforcement and fraud prevention, and are never exposed to end users, public APIs, or client-side profiles.

5. Law Enforcement Due Diligence (Rule 3(1)(j))

PurelyTalk assists lawful authorities in accordance with Rule 3(1)(j) of the IT Rules. Upon receiving a lawful written order or verification request from an authorized government or law enforcement agency for cyber incident investigation or prosecution, PurelyTalk will provide requested technical metadata within seventy-two (72) hours of receipt.

6. Your Rights Under DPDP Act 2023 and GDPR

As a Data Principal, you have specific statutory rights under applicable privacy legislation:

• Right to Access & Summary: You may request a summary of personal data processed about you.
• Right to Correction & Erasure: You may request correction of inaccurate data or deletion of your registered account and profile data.
• Right of Grievance Redressal & Appeal: You have the right to file a grievance with our Grievance Officer regarding any data processing concern, or submit an appeal through your account interface or login screen if your account has been subjected to moderation restrictions.
• Right to Nominate: You have the right to nominate any individual to exercise your data rights in the event of death or incapacity.

To exercise any of these rights, contact our Data Protection and Grievance desk at privacy@purelytalk.com.

7. Security Safeguards

We enforce strict technical and organizational safeguards including Transport Layer Security (TLS 1.3), Content Security Policy (CSP), CORS origin lockdown, HTTP rate-limiting, and constant vulnerability auditing to protect against unauthorized access, loss, or alteration.

8. Grievance Officer Contact Details

In accordance with the IT Rules, 2021 and the DPDP Act, 2023, the details of our Grievance Redressal Officer are as follows:

• Designation: Grievance Redressal Officer & Data Protection Liaison
• Email: grievance@purelytalk.com
• Physical Address: PurelyTalk Operations, New Delhi, India
• Acknowledgment SLA: Within 24 hours
• Resolution SLA: Within 15 days