Privacy Policy
Last updated: 7 November 2026
1. Who we are
NumberTeller is owned and operated by Confiex Data Room Private Limited, Unit 302, Bldg 2, New Sonal Industrial Estate, Kachpada, Link Road, Malad West, Mumbai 400064, Maharashtra, India ("Confiex", "we", "us", "our").
This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what rights you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP law"), and the Information Technology Act, 2000 and its rules.
It applies to https://www.numberteller.com/, the NumberTeller web application and related services (the "Platform").
2. Two kinds of data, two roles
| Data | Whose data | Our role |
|---|---|---|
| Account data: your name, email, phone, billing details, usage of the Platform | You, the practitioner | We are the Data Fiduciary. We decide how it is used, as described in this policy. |
| Client data: the details you enter about your clients, such as names, dates of birth, addresses, mobile or vehicle numbers, business names and the charts and reports produced from them | Your clients | You are the Data Fiduciary. We are your Data Processor and handle it only to provide the Platform to you. |
If you are a practitioner's client and want to exercise your rights over your data, please contact your practitioner first. We will help them respond.
3. Data we collect
Account and profile data: your name, email address, phone or WhatsApp number, practice or business name (optional) and password. Passwords are stored only in hashed form by our authentication provider; we never see or store them in plain text.
Client data you enter: see section 2. We do not ask for, and you should not enter, health, financial account, government ID or other sensitive data that you do not need.
Billing data: plan, invoices, GSTIN (if you provide one), billing address and payment status. Card and bank details are entered on the payment processor's page and are not stored on our servers.
Communications: emails, WhatsApp messages, support requests and demo requests you send us.
Technical and usage data: IP address, browser and device type, pages and tools used, and timestamps and error logs. We use these to run, secure and improve the Platform.
Cookies: see section 8.
4. Why we use your data
We process account data for these purposes:
| Purpose | Basis under the DPDP law |
|---|---|
| Creating and managing your account, running the free trial and providing the tools you choose | Your consent, given at sign-up, and your use of the service you asked for |
| Saving and retrieving your client charts and generating PDF reports | Your consent and your instructions |
| Billing, invoicing, tax records and fraud prevention | Compliance with law (GST, Companies Act, IT Act) and legitimate uses permitted by law |
| Service emails such as trial and renewal reminders, security alerts and policy changes | Your consent, and our legal duty to give you notice |
| Support and responding to your enquiries | Your consent, given when you contact us |
| Improving the Platform using aggregated, de-identified usage information | Your consent |
| Product news and offers, by email or WhatsApp | Separate, optional consent. You can withdraw it at any time with the unsubscribe link or by telling us. |
We do not sell or rent personal data. We do not share client data with any artificial-intelligence provider. Features labelled "AI" run on NumberTeller's own rules-based engine.
5. Who we share data with
We share personal data only with service providers who process it on our behalf under contracts that require appropriate security. Currently these are:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Database and user authentication | Account data and client data |
| Vercel | Website and application hosting | Technical data |
| Resend | Sending service emails | Name and email address |
| Cashfree Payments | Processing payments | Billing data; card, UPI and bank details go to them directly |
| Google Analytics (only if enabled) | Aggregated website statistics | Technical and usage data, via cookies |
| WhatsApp (Meta) | Support chats you start with us | Your messages and phone number |
We may also disclose personal data:
- to comply with law, a court order or a lawful request from a government authority;
- to protect the rights, safety or property of Confiex, our users or others; or
- to a successor in a merger, acquisition or sale of our business, who must protect it under this policy.
6. Where data is stored
Our providers may store and process data on servers outside India. We transfer data only to countries that are not restricted by the Government of India under the DPDP law, and only to providers bound by appropriate security and confidentiality obligations.
7. How long we keep data
| Data | Retention |
|---|---|
| Account data | While your account is active, and for 30 days after you close it |
| Client data and saved charts | While your account is active. After closure you may export it for 30 days; we then delete it. Backups are overwritten within a further 30 days. |
| Inactive accounts (trial ended or plan lapsed, and no sign-in) | 12 months. We email you at least 30 days before deletion. |
| Invoices and billing records | At least 8 years, as required by Indian company and tax law |
| Security and processing logs | At least 1 year, as required by the DPDP Rules |
| Support communications | Up to 3 years |
8. Cookies and similar technologies
We use strictly necessary cookies and local storage to keep you signed in, remember your settings and keep the Platform secure. These cannot be switched off.
If we enable analytics (for example Google Analytics), we will use analytics cookies only after you agree through our cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer.
We do not use advertising or cross-site tracking cookies.
9. Security
We use reasonable security safeguards, including:
- encryption in transit (HTTPS/TLS) and encryption at rest on our database provider;
- row-level security, so each account can access only its own data;
- hashed passwords and secure authentication;
- access to production data limited to authorised personnel on a need-to-know basis; and
- logging and monitoring for unauthorised access.
No system is perfectly secure. Please use a strong, unique password and keep it private.
Data breaches: if a personal data breach affects you, we will inform you and the Data Protection Board of India as required by the DPDP law. Where it affects your client data, we will tell you without undue delay so you can meet your own obligations.
10. Your rights
Under the DPDP law you have the right to:
- access a summary of the personal data we process about you and how it is processed, and the identities of those we share it with;
- correct, complete or update your data;
- erase your data, unless we must keep it by law;
- withdraw consent at any time. This does not affect processing already done. Withdrawing consent needed to run your account means we can no longer provide the service;
- nominate another person to exercise your rights if you die or become incapacitated; and
- seek redress of grievances through our Grievance Officer, and then the Data Protection Board of India.
You can update most account data in the app. For anything else, email privacy@numberteller.com. We may need to verify your identity. We respond within 30 days, and in any case within the time required by law.
11. Children
The Platform is for adults aged 18 and over. We do not knowingly collect personal data from children as users.
Practitioners sometimes enter data about children, for example for baby names or a child's name correction. In that case the practitioner must first obtain the verifiable consent of the child's parent or lawful guardian, as required by the DPDP law, and must use the data only for that service. Practitioners must not use children's data for tracking, behavioural monitoring or targeted advertising.
12. Your duties as a practitioner
Because you are the Data Fiduciary for your client data, you must:
- tell your clients what data you collect, why, and that you use software to process it;
- obtain any consent the law requires;
- enter only the data you need;
- handle your clients' requests to access, correct or erase their data; and
- keep your account secure.
A Data Processing Addendum is available on request at privacy@numberteller.com.
13. Changes to this policy
We may update this policy. For material changes, we will email registered users at least 14 days in advance and update the date at the top of this page.
14. Contact and Grievance Officer
Confiex Data Room Private Limited Unit 302, Bldg 2, New Sonal Industrial Estate, Kachpada, Link Road, Malad West, Mumbai 400064, Maharashtra, India Privacy enquiries: privacy@numberteller.com · Phone / WhatsApp: +91 79000 75531
Grievance Officer: Harvinder Singh, Director Email: grievance@numberteller.com · Address as above We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.