This notice covers information collected through scandum.com and on calls handled by Scandum's AI employees. It is written to the Digital Personal Data Protection Act, 2023 (DPDP): purpose stated, consent recorded, retention stated, a named contact for grievances.

1. Who we are

Scandum, Hyderabad, Telangana, India, is the data fiduciary for information collected through this website and through the demo line. For a business that hires Scandum's AI employees, that business is the data fiduciary for its own customers and Scandum processes on its instructions; the contract between us says so.

2. What we collect

When you write to us, request a callback, send us stale quotes through the home page form, or use a feature on the site, we may collect:

Name
Email address
Phone number
Company name
Your message, and any quotes or records you choose to send us
Which page or form it came from

When you visit, we collect basic technical information: IP address, browser, device, pages visited and usage. When you call the demo line, the AI receptionist collects what you tell it: your name, your phone number, the appointment details and the reason for the visit, and the call is recorded.

3. Why we collect it

To reply to enquiries and requests
To contact you about a callback, a meeting or a demo
To work the quotes you send us and return the outcome rows
To operate, secure and improve the website
To understand how the website is used and how it performs in search
To comply with applicable law

We do not sell personal information. We do not use your records to train models for anyone else.

4. Where a lead goes

A form submission is sent to our contact API, written to our store, and forwarded to an internal notification endpoint so somebody sees it the same day. The forwarded message carries the same fields you typed and nothing else. Phone numbers and email addresses are masked in server logs; a full number is never written to a log.

5. Analytics and cookies

We run three tools on this website:

Google Analytics 4, to understand traffic and visitor interactions.
Microsoft Clarity, to understand how visitors interact with the pages and improve usability.
Vercel Analytics, page-view counts from the hosting platform.

We also use Google Search Console to monitor how the site appears in Google Search; it collects nothing from your visit.

On your first visit a one-line notice lets you accept or decline analytics. Your choice is stored in your browser's local storage, not in a cookie. If you decline, Google Analytics is told not to use analytics storage and Microsoft Clarity does not load. The site also stores your theme choice in local storage. You can clear both through your browser settings.

6. AI calls and recordings

Every call handled by a Scandum AI employee opens by saying it is an AI assistant, in the caller's language; the exact sentence is on the AI disclosure page. Calls are recorded and transcribed so the business you called can act on them and so the call can be quality-scored. Consent, purpose and retention period are recorded on the customer record. Recordings are deleted when the retention period in the business's consent notice ends.

7. Where data lives

The website, its APIs and the records they hold run on servers in the Mumbai region, in India. Analytics providers named above process technical data on their own infrastructure under their own policies.

8. Retention

We keep personal information only as long as needed for the purpose it was collected for, unless the law requires longer. Enquiries are kept while we are in conversation and for a reasonable period after, so we can pick up where we left off. Demo-desk entries on the home page expire within hours and are deleted within 48 hours. Recordings follow the retention period stated at the start of the call.

9. Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure: keys per calendar on the scheduling API, rate limits on every write, masking in logs, and no personal data in any page a crawler is served.

10. Your rights

Under the DPDP Act and other applicable law, you may ask us to:

Tell you what personal information we hold about you
Correct information that is inaccurate or incomplete
Erase your information, where we have no legal reason to keep it
Withdraw consent, where processing was based on it
Nominate a person to exercise these rights on your behalf

Write to contact@scandum.com. We answer within the period the Act allows.

11. Grievance officer

For any grievance about how your personal data is handled, contact the grievance officer at Scandum, Hyderabad, India, by email at contact@scandum.com. If you are not satisfied with our response, you may approach the Data Protection Board of India.

12. Separate services

This notice applies to scandum.com and to calls handled on Scandum's demo line. A business that hires Scandum's AI employees for its own customers publishes its own consent notice to those customers; where its terms and this notice differ for those customers, its notice governs.

13. Changes

We update this notice when our services, providers, practices or the law change, and change the date at the top when we do.

14. Contact

Scandum, Hyderabad, India. Email contact@scandum.com. Our terms and the AI disclosure statement sit alongside this notice.

What we collect, and why.