Operated by: DevArc Labs Private Limited Effective Date: 29 October 2026 Last Updated: 29 October 2026
1. Introduction
DevArc Labs Private Limited (“Company”, “we”, “us” or “our”) operates WhisperNet (“WhisperNet”, the “App” or the “Service”).
This Privacy Policy explains how the Company collects, uses, stores, protects and discloses information when individuals use WhisperNet.
WhisperNet is intended exclusively for individuals aged 18 years or older. By using the Service, you acknowledge that you have had the opportunity to review this Policy. Where consent is required by applicable law, the Company will obtain it through an appropriate mechanism.
2. Information We Collect or Process
Depending on how you use WhisperNet, the Company may process the following categories of information.
This may include:
Account IDs and login IDs.
Host–Member associations.
Authentication and account-status information.
Information associated with creating, updating, disabling or removing accounts.
Hosts create Member accounts and assign login credentials. Passwords should be protected through appropriate security measures and should not be retained in readable form where secure authentication methods can be used.
This may include:
Meeting IDs.
Host and Member associations.
Participant information.
Meeting-related timestamps.
Information about meeting availability and access.
Other operational metadata required to provide, secure and maintain the Service.
This information is distinct from the content of live voice conversations.
This may include Subscription plans, participant limits, billing status, payment references and transaction information.
Payment service providers may separately process payment details necessary to complete transactions.
The Service may process technical information required to operate, secure, maintain and troubleshoot WhisperNet, depending on the implemented configuration.
The specific categories collected depend on the features and systems actually in use.
If you contact the Company, we may process the information you provide and relevant details needed to investigate and respond to your request.
3. Live Voice Communication and No Listening to Calls
WhisperNet uses LiveKit technology for live voice communication. Under the intended architecture, LiveKit's Selective Forwarding Unit (SFU) forwards audio between participants.
The Company does not intentionally listen to, monitor or review users' live voice conversations as part of the ordinary operation of WhisperNet.
The Service is designed so that ordinary voice transmission does not result in audio recordings being stored on the Company's servers. The Company does not routinely access or listen to the content of live calls.
The Company may process meeting metadata and relevant technical information to operate, secure and maintain the Service. Processing such metadata does not mean the Company listens to users' conversations.
The technical processing required to transmit audio is distinct from listening to or reviewing the content of conversations.
4. Recordings and Local Storage
Where the recording feature is available and used, recordings are stored locally in an encrypted sandbox on the recording owner's mobile device.
Recordings are intended to be retained on that device for up to 15 days, after which they may be automatically deleted in accordance with the implemented recording-retention mechanism.
Under the intended design, recordings are not routinely uploaded to the Company's servers. The Company does not ordinarily possess or have access to these local recordings.
The Company cannot provide or decrypt audio or recordings that it does not possess or cannot access or decrypt.
Device backups, operating-system functions, exports or other applications may create separate copies outside the App's control. Users should not assume that deletion within the App deletes every copy made elsewhere.
The Company does not guarantee recovery of recordings that have been deleted, lost or rendered inaccessible.
Users are responsible for obtaining any consent required by law before recording, sharing or disclosing another person's communications.
5. How We Use Information
The Company may process information for the following purposes:
Creating and administering Host and Member accounts.
Authenticating users and managing Host-specific access.
Activating meetings automatically when the Host logs in.
Allowing authorized Members to join while their Host is online.
Enforcing Subscription-based participant limits.
Processing Subscription payments, cancellations and refunds.
Operating, maintaining and securing the Service.
Detecting unauthorized access, fraud and misuse.
Responding to support requests and complaints.
Complying with applicable legal obligations.
Establishing, exercising or defending legal claims where necessary.
The Company will process personal data in accordance with applicable law and the purposes communicated to users.
6. Third-Party Providers and Infrastructure
WhisperNet uses the following third-party services and infrastructure:
LiveKit: Live voice communication infrastructure.
Microsoft Azure: Backend and cloud infrastructure.
Supabase: Database services.
Cloudflare Pages: Hosting for the administrative progressive web application (PWA).
These providers may process information necessary to deliver their respective services. The information accessible to each provider depends on the actual technical configuration and integration.
The Company may use additional service providers for payments, security, support or other operational requirements. Where required, appropriate safeguards will be implemented in accordance with applicable law.
7. Disclosure to Government Authorities and Other Competent Bodies
The Company may disclose or provide access to user data held by it, or data it can lawfully access, to government authorities, law-enforcement agencies, courts, regulators or other competent authorities where required or permitted under applicable law.
Disclosure may occur pursuant to a valid legal notice, court order, regulatory direction, lawful request from a competent authority or other legally binding process.
Where legally permitted and reasonably practicable, the Company will assess the validity and scope of a request and disclose only the information required or legally justified for the relevant purpose.
The Company may also preserve available user data for the period necessary to comply with applicable law or a lawful direction from a competent authority, even if that period exceeds the standard retention period stated in this Policy.
Nothing in this section authorizes disclosure beyond what applicable law permits.
8. Information Not Stored or Accessible by the Company
The Company can disclose only information that it possesses or can lawfully access.
Under WhisperNet's intended architecture:
Ordinary live voice transmission is not intended to be stored as audio recordings on the Company's servers.
Recordings are stored locally in an encrypted sandbox on the recording owner's mobile device and are not routinely uploaded to the Company's servers.
The Company does not intentionally listen to or monitor live voice conversations during ordinary operation.
Accordingly, the Company cannot provide audio recordings or decrypt audio or recordings that it does not possess or cannot access or decrypt.
The Company cannot guarantee access to, or disclosure of, information that is not within its possession or technical control.
The Company may provide available account IDs, meeting IDs, participant information, timestamps and other relevant metadata held by it where required or permitted by applicable law.
Nothing in this section limits the Company's obligation to comply with a valid legal requirement concerning information that it possesses or can lawfully access.
9. Data Retention
User data held by the Service is intended to be retained for no more than one year from the date of account inactivation or the last recorded activity, as applicable, after which it will be deleted or anonymized, subject to the exceptions below.
Extended Retention
The Company may retain user data for a longer period where required or permitted by applicable law, a legal notice, court order, regulatory direction, lawful request from a competent authority, or where reasonably necessary to comply with a legal obligation or establish, exercise or defend legal claims.
Where extended retention is no longer required or legally justified, the relevant data will be deleted or anonymized in accordance with applicable law and the Company's data-retention procedures.
The one-year retention period for Service-held user data is separate from the up-to-15-day retention period for recordings stored locally on the recording owner's mobile device.
10. Data Security
The Company will implement reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration or disclosure.
Users must protect their credentials and notify the Company if they suspect unauthorized access.
No electronic system, transmission method or storage environment can be guaranteed to be completely secure. The Company will address security incidents in accordance with applicable legal requirements.
11. Data Location and International Processing
WhisperNet uses third-party cloud and communication providers. Depending on provider configurations, selected service regions and applicable arrangements, information may be processed or stored in different locations.
The Company will address applicable requirements relating to data transfers and processing locations. The actual location of each category of information depends on the infrastructure configuration.
12. User Requests and Privacy Rights
Subject to applicable law, users may request access to, correction of or deletion of personal data, or exercise other applicable rights through the contact details provided in this Policy.
The Company may need to verify a user's identity and authority before acting on a request.
Some information may need to be retained where a lawful exception applies or where retention is required by law, a valid legal notice or another binding direction.
Hosts should use the available account controls to remove Members whose access is no longer authorized. Removing a Member does not necessarily erase information that the Member previously accessed, copied or stored outside the Service.
13. Account Inactivation and Deletion
When an account is inactivated or becomes inactive, the Company will handle the associated Service-held data in accordance with the retention period in Section 9, subject to applicable legal requirements.
Account closure or a deletion request may not immediately erase all information where temporary retention is required for security, payment reconciliation, dispute handling, compliance or legal obligations.
Information will be deleted or anonymized when it is no longer required for a permitted purpose, subject to applicable law.
14. Age Restriction
WhisperNet is intended only for individuals aged 18 years or older. Individuals under 18 must not create or use an account.
If the Company becomes aware that an account is being used by an individual under 18 in violation of this Policy, it may restrict or terminate access and take appropriate steps in accordance with applicable law.
15. Changes to This Privacy Policy
The Company may update this Policy to reflect changes in WhisperNet, its technical arrangements, data practices or applicable law.
The updated version will display a revised “Last Updated” date and will be communicated to users where required by law.
16. Grievance Redressal and Contact
For privacy questions, requests or complaints, contact:
Grievance Officer: Chaitanya, Director Company: DevArc Labs Private Limited Email: grievances@devarclabs.tech Registered Office: H-3/A, Budh Vihar Phase-I, Delhi, North West Delhi, Delhi – 110086 Telephone: 7291003501 Working Hours: 10:00 AM to 4:00 PM, Monday to Friday
Complaints will be acknowledged and addressed within the periods required by applicable law. Where applicable, the Company will aim to acknowledge complaints within 48 hours and resolve them within one month, subject to any different mandatory statutory requirement.
17. Applicable Law
This Policy is governed by the laws of India, including applicable data-protection and consumer-protection legislation.
Any dispute will be handled by a competent court or forum in accordance with applicable law.