GDPR & Data Rights

Last updated: 21 July 2026

This page sets out the legal basis on which Pragaticai processes personal data, your rights as a data subject, our list of sub-processors, and how to exercise your rights. It supplements our Privacy Policy (/privacy).

1. Who This Page Is For

This page applies to individuals whose personal data we process as a "controller" (our own users) or as a "processor" (your customers' data, which you control and we process on your behalf under our Terms of Service). If you are one of our customers' end customers and want to exercise a right below, please contact that business directly — we will assist them in fulfilling your request.

2. Legal Basis for Processing

• **Contract:** account creation, providing the platform's core features, billing. • **Consent:** marketing emails, browser push notifications, optional analytics cookies, AI phone call recording where consent-based law applies. • **Legitimate interest:** fraud/abuse prevention, security logging, product improvement analytics. • **Legal obligation:** tax/invoice record-keeping, responding to lawful requests from authorities.

3. Your Data Subject Rights

Under GDPR (EU/UK residents) and India's Digital Personal Data Protection Act 2023, you may request to: • **Access** — a copy of the personal data we hold about you. • **Rectify** — correct inaccurate or incomplete data. • **Erase** — delete your account and associated personal data (see our Data Deletion page at /data-deletion for the Facebook/Instagram-specific process). • **Restrict/Object** — limit or object to certain processing, including marketing. • **Port** — receive your data in a portable JSON/CSV format (also available directly from Settings → Account → Export Data). • **Withdraw consent** — for anything based on consent (marketing emails, push notifications, call recording), at any time, without affecting processing already carried out. We respond to verified requests within **30 days** (GDPR) or as required by DPDP Act timelines. We may ask you to verify your identity before actioning a request.

4. How to Submit a Request

Email **privacy@localedge.ai** with the subject "Data Subject Request", the right you want to exercise, and the email address on your account. There is no charge for a standard request.

5. Sub-Processors We Use

• **Hosting/Infrastructure:** cloud servers, MySQL database, Redis (task queue). • **Email delivery:** Brevo, SendGrid. • **SMS / WhatsApp:** Twilio, Meta (WhatsApp Business Platform). • **AI voice calling:** Vapi, with transcription via Deepgram and voice synthesis via 11Labs/OpenAI/Azure (per assistant configuration). • **AI content generation:** Google Gemini, Anthropic Claude, or a self-hosted Ollama model (per your AI provider configuration). • **Payments:** Razorpay, Stripe. • **Accounting sync:** Zoho Books (only if you connect your own account). • **Rank tracking:** ValueSERP. • **Image generation/stock media:** Stability AI, Together AI, Pexels. Each sub-processor is contractually bound to process data only as instructed and to apply appropriate security safeguards.

6. International Data Transfers

Our primary infrastructure is hosted in/for the Indian market. Some sub-processors above (e.g. Google, Anthropic, Stripe, Meta) may process data outside India, including in the United States and European Union. Where we transfer personal data internationally, we rely on the sub-processor's own adequacy mechanisms (such as EU Standard Contractual Clauses) where applicable.

7. Data Protection Officer

Contact our Data Protection Officer for any GDPR/DPDP-related query: **Email:** privacy@localedge.ai **Address:** Pragatic AI Pvt. Ltd., Bengaluru, Karnataka, India

8. Complaints

If you are unsatisfied with our response, EU/UK residents may lodge a complaint with their local supervisory authority; Indian residents may approach the Data Protection Board under the DPDP Act 2023.