What we collect, why, who sees it, how long we keep it, and your rights.
Last updated 5 November 2026
This policy explains how ThinkingDBx Private Limited ("thinkingdbx", "we") handles personal information on thinkingdbx.com and its subdomains, and in our products, including VOICEx. We are the controller of the personal information described here, except where we handle information on behalf of a business that uses VOICEx (see "People who call a business that uses VOICEx" below).
ThinkingDBx Private Limited, registered office: Survey No. 6, 2/91/20, Leeway MR Prime, Kondapur, Serilingampally, K.V. Rangareddy, Telangana 500084, India; office: T-Hub 2.0, Plot No 1/C, Sy No 83/1, Raidurgam Panmaktha, Hyderabad Knowledge City, Serilingampally, Hyderabad, Telangana 500081, India. For any privacy question or request, email contact@thinkingdbx.com with "Privacy" in the subject, or call +91 99879 41993.
| Who | What we collect | What we use it for | Legal basis |
|---|---|---|---|
| Visitors to our websites | Pages visited, device and browser, IP address and approximate location, the site or ad that sent you (campaign tags and click IDs) | Delivering and securing the site, understanding how it is used, measuring our advertising | Our legitimate interest in running and improving the site; consent where the law requires it |
| People who book a call, start a VOICEx trial or contact us | Name, email, phone number, business name, city, the plan you chose, your message, the time you booked | Setting up your account, replying to you, holding the call, following up | Steps you ask for before a contract; our legitimate interest in replying |
| Customers and their staff | Name, email, phone number, business details, login and security records (two-factor secrets are stored encrypted), settings and activity in our products | Providing the service, security, support, telling you about changes | Performing our contract with you |
| Payments | Name, email, phone, amounts, payment method type and status, from Razorpay. We never see or store your full card number. | Taking payments, invoices, refunds, preventing fraud | Performing our contract; our legal obligations on tax and accounting |
| People who try the VOICEx browser demo or call the demo line | What you say, as text, and any order details you give | Running the demo, finding and fixing the assistant's mistakes | Our legitimate interest in showing and improving VOICEx |
When VOICEx answers a call for a business, we handle the caller's phone number, what is said in the call (as a transcript), and the order details, such as name and delivery address, on behalf of that business, which is responsible for that information. We use it only to provide the service to that business. We do not keep audio recordings, and transcripts are deleted after 90 days. Callers can read the details in our VOICEx caller privacy notice, and can contact the business they called, or us, about their information.
We do not sell personal information, and we do not share it for other companies' advertising. Mobile phone numbers and text-messaging consent are never shared with third parties or affiliates for marketing; see our SMS policy.
We are based in India, VOICEx runs in Canada, and some of our providers process information in other countries, including the United States and the United Kingdom. Where we transfer personal information across borders, we rely on contractual safeguards, such as the European Commission's standard contractual clauses or the UK international data transfer addendum, or on an adequacy decision, as applicable.
Deleted information leaves our backups as they are replaced.
Depending on where you live, including under India's Digital Personal Data Protection Act, Canada's PIPEDA, and the GDPR in the EU and UK, you can ask to:
Email contact@thinkingdbx.com. We reply within one month. You can also complain to your data protection authority, such as the Data Protection Board of India, the Office of the Privacy Commissioner of Canada, or the supervisory authority where you live in the EU or UK.
We protect personal information with encryption in transit (HTTPS), encryption of stored secrets, two-factor sign-in for staff accounts, access limited to the people who need it, and logging of access to our systems. No system is perfectly secure, and if a breach affects you, we will tell you and the authorities as the law requires.
_ga and _ga_*) on thinkingdbx.com to count visits and see how the site is used.You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google's opt-out add-on. The site works without them; the dashboard needs its sign-in cookie.
Our website and products are for businesses and are not directed at children under 16. We do not knowingly collect their personal information.
We will update this policy when our practices change, and show the date of the latest version at the top. If a change materially affects you, we will tell you by email or on the site.