At Yal.Ai, our foremost priority is fostering a strong, trust-based relationship with our users. We are deeply committed to safeguarding the security and privacy of our users, and the integrity of our services. This Privacy Policy outlines the measures we take to protect personal information and ensure a safe and secure experience for everyone who uses Yal.Ai Platform.
This website https://www.yal.chat/ (“Website”) and Yal.Ai’s App (“App”) is available on Google Play Store (collectively, the “Platform”). Yal.Ai is a brand owned and operated by ECHELONERA TECHNOLOGIES PRIVATE LIMITED (hereinafter referred as “Yal”, “We” or “Us”) respects the privacy of users (hereinafter referred as “User” or “You” or “Your”) of the Platform and services (collectively, the “Service”) and is committed to protecting information, including collected information. This Privacy Policy (“Policy”) explains how We collect, use, and protect Your personal information when You use our Platform. By using our Platform, you agree to the practices described in this Policy. We are committed to maintaining Your privacy and ensuring the security of Your personal information.
This Policy does not require a physical, electronic, or digital signature. It is a legally binding document between You and Us, becoming effective upon Your acceptance. By clicking the “I Accept” checkbox within the Platform, you acknowledge and consent to Yal collecting, using, processing, and disclosing Your Sensitive Personal Data and other information as outlined in this Policy. Refusal to provide consent may affect our ability to fulfil our obligations to You. This Policy explains what information we collect, how it is collected (whether directly, through third parties, or automatically), and how We use and protect it. This Policy has been prepared in compliance with:
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
Other applicable acts, regulations and rules which requires the publishing of a Policy for handling of or dealing in personal information including sensitive personal data or information and all applicable laws, regulations, guidelines provided by applicable regulatory authorities.
This Policy is incorporated into and at all times is subject to and is to be read in conjunction with the Terms of use of the Platform.
Information we collect
To provide fraud, malicious, and spam SMS detection services, we collect the following
information:
- SMS Log Data (sender details, timestamps, and message metadata) for analysing potential spam and fraudulent messages.
- We do not collect the content of your personal SMS messages.
To deliver a secure and efficient service experience, Yal collects and processes the following
information:
When Yal is set as Your default SMS app, we may collect and store the content of all SMS and MMS messages sent and received by Your device with the User explicit content. This is necessary for core messaging functionality, including:
- Enabling message notifications
- Filtering spam and scam messages
We collect device-specific information, such as:
- Device model and operating system
- IP addresses and mobile network information
- Contact lists and Call logs
This data helps Us provide a seamless experience and troubleshoot technical issues. We do not collect Your biometric data. However, we may take one-time access of Your camera, microphone, location (fine and coarse GPS data), or any other facility solely for the purpose of onboarding, after obtaining Your explicit consent.
To detect spam and scam messages efficiently, we analyze certain message patterns,keywords, and sender information using AI technology. This helps us to:
- Identify and block spam messages
- Provide You with alerts on suspicious activity
First and last names, dates of birth, gender, contact information, email address and other information.
COLLECTION OF CERTAIN NON-PERSONAL INFORMATION
We automatically track certain information about You based upon Your behavior on Our Platform. We use this information to do internal research on Our users’ demographics, interests, and behavior to better understand, protect and serve Our users and improve Our services. This information is compiled and analyzed on an aggregated basis.
We use personal data , SMS log and information in accordance with applicable laws,primarily to provide services and comply with legal obligations. We use Your personal data,SMS log and information only for the purposes outlined below:
- Core Functionality: Providing messaging services, including sending, receiving, and organizing messages.
- Spam and Scam Protection: Using AI-driven algorithms to identify, block, and notify You of potential spam and fraudulent messages.
- Analytics and Improvements: Analyzing user interactions and usage data to improve the App’s features and enhance user experience.
- Security and Fraud Prevention: Detecting and preventing security breaches, fraud, and unauthorized access to Your account.
Data Collection & Storage
Our app does not collect, transmit, or store your SMS logs on external servers.
SMS logs are only stored locally on your device for analysis within the app.
No SMS data is shared with third parties, including advertisers, analytics providers, or external services.
We do not sell or rent Your personal data to third parties. We may share Your data only in the following circumstances:
- With Your Consent: If We seek to share Your data for any purpose not mentioned in this policy, We will request Your explicit consent.
- Service Providers: We may share Your data with trusted third-party service providers that assist Us in operating the app, such as cloud storage providers, as long as they comply with data protection laws.
- Legal Requirements: We may disclose Your data if required to do so by law, or in response to valid legal requests, such as court orders, or government regulations.
We do not disclose personal information or SMS logs to the third parties without Your
consent, except when necessary for normal business operations or legally permitted.
Yal may engage third party service providers to perform functions and provide services to
us, such as hosting and maintaining our servers, websites and mobile applications
management, conducting surveys or contests, third-party solutions for marketing and
analytics, application developers, database storage and management, data hosting, e-mail
management, payments processing, some aspects of our technical and customer support,
collections and recovery. In order to enable these third parties to perform these services for
Us and for You We may share Your personal information, and possibly some non-personal
information, with them after imposing confidentiality obligations on them.
The Platform intends to protect Your information and to maintain its accuracy as confirmed by You. We take reasonable precautions to safeguard Your data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption: Data is encrypted during transmission to prevent unauthorized access.
- Access Controls: Strict access controls are in place to limit who can access Your personal data.
- AI Oversight: Our AI spam detection operates without human intervention, ensuring Your messages remain private.
- Limited Access: Only authorized personnel can access SMS logs for fraud detection.
However, no method of transmission over the internet or electronic storage is 100% secure,
and We cannot guarantee absolute security.
Accessing and Managing Your Data
You can access Your messages and manage preferences directly through App. You
may also delete Your message history at any time.
Retention of Data
We at Yal promise to protect Your personal data from unauthorized access, misuse, and
disclosure using the right security measures based on the type of data and how We are
processing the same. We retain information about You to provide a seamless
experience, to contact You in case of support required and about Your account, to
detect, mitigate, prevent, and investigate fraudulent or illegal activities during the course
of the Services. We retain Your data for as long as necessary to provide You with Our
services. We may also retain and use Your basic personal information inter alia as
name, contact number, email address and other information as necessary to comply
with our legal obligations, resolve disputes, and enforce our agreements which shall
always be in accordance with applicable laws. Subject to this section, We may delete
Your data upon reasonable written request for the same at any stage. However, You
may not be able to use Our services after deletion.
We don’t knowingly collect any personal information from children under the age of 13. If You are under the age of 13, please do not submit any personal information through our Platform. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Platform without their permission. If You have reason to believe that a child under the age of 13 has provided personal information to Us through the Platform, please contact Us at [email protected], and We will delete that information.
- Modifying or rectifying Your information: In the event that any Personal Information provided by You is inaccurate, incomplete or outdated then You shall have the right to provide Us with the accurate, complete and up to date data and have Us rectify such data at Our end immediately. We urge You to ensure that You always provide Us with accurate and correct information/data to ensure Your use of Our Services is uninterrupted.
- Your Privacy Controls: You have certain choices regarding the information We collect and how it is used:
Your device may have controls that determine what information We collect. For example,
You can modify permissions on Your Android/iOS device or Browser to remove any
permissions that may have been given. However, Platform does not provide a guarantee of
Services if any such controls are exercised.
Delete the App from Your device.
You can also request to remove content from Our servers in accordance with Clause C.
Withdrawal/ Denial of consent:
You acknowledge that the Platform has duly
collected the information with Your consent, and You have the option to not provide
such information or deny consent for use of specific information or revoke the
consent already given. However, any withdrawal of such personal information will not
be permitted in case any Service availed by You is active. Where a consent has been
withdrawn the Platform does not guarantee or be liable for providing such Service.
You shall have the following rights pertaining to Your information collected by Us.
Deny Consent:
You shall have the right to deny consent for use of specific data, restrict
disclosure to third parties, data retention, revoke consent already granted to collect personal
data and if required, make the App delete/ forget the data. However, in case of a denial of a
consent, the Platform does not provide a guarantee or will not be liable towards the
continued facilitation of the Services if any such controls are exercised.
Withdraw Consent:
You may withdraw Your consent to contact You, for the continued
collection, use or disclosure of Your information, at any time, or request for deletion of Your
Login account by raising a request on the Platform or by mailing Us at
[email protected].
However, We, shall not retain Your data and information if it is no longer required by Us and
there is no legal requirement to retain the same. Do note that multiple legal bases may exist
in parallel, and We may still have to retain certain data and information at any time.
Report an issue:
You have a right to report a security incident to the Data Protection Officer
and Grievance officer (detailed mentioned hereinbelow). You can also exercise the right at
any time by contacting Us at
[email protected].
Notwithstanding anything to the contrary stated above, the following are specific
scenarios listed below which may have consequences to Your withdrawal of consent:
- Marketing and Communication: The consent for this information be withdrawn if You write an email to the email address provided under this Policy.
- Information/data deletion may not be implemented for ongoing Service.
We have appointed a Data Protection Officer and Grievance Officer for You to contact if You have any questions, concerns or grievances about processing of Your personal and our data protection policies or practices.
We may, at our discretion, make changes to this Policy to reflect updates in our businessprocesses, upgrades in privacy standards and procedures, or legislative or regulatory changes. You acknowledge that any such policy changes will be effective from the date of posting on our Platform, and notification of these changes will be published on the Platform. We keep our Policy under regular review and may amend it from time to time, at our sole discretion. The Users are encouraged to periodically review this Policy for the latest information on its privacy practices. If such changes are material in nature, We will provide You with additional notice (such as adding a statement to the main website page or sending You an email notification).