Privacy Policy

Account Information: When a business registers, we collect the business name, contact email, and password (stored hashed, never in plaintext).

Customer Interaction Data: When end-users interact with AI agents deployed by our business clients, we collect conversation transcripts, voice recordings (for voice calls), and basic metadata such as timestamps and language used.

Contact Form Data: When you submit a contact form, we collect your name, email, phone number, company name, and message.

Technical Data: We collect IP addresses, browser type, and access timestamps for security and rate-limiting purposes.

• To provide and maintain the AI customer service platform
• To process and respond to customer inquiries via AI agents
• To improve AI response quality and accuracy
• To send notifications related to your account or our services
• To enforce our terms of service and protect against misuse
• To comply with legal obligations

Conversation data is processed through third-party AI provider models for generating responses. All AI processing occurs server-side. No API keys, system prompts, or model configurations are exposed to end-users. Data sent to AI models is used solely for generating responses and is not used to train third-party AI models.

• All data is stored in isolated, tenant-specific databases
• Passwords are hashed using bcrypt with 12 rounds of salting
• Integration credentials are encrypted using AES-256-GCM
• All connections are secured with TLS/SSL encryption
• We implement rate limiting, input sanitization, and prompt injection detection
• Access to data is controlled through JWT-based authentication

We do not sell, trade, or rent your personal information. We may share data only in these circumstances:

• AI Processing: Conversation data is sent to a third-party AI provider for response generation
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Conversation data is retained for as long as the business account is active. Businesses may request deletion of their data at any time. Contact form submissions are retained for up to 12 months. Upon account termination, all associated data is deleted within 30 days.

Under the Data Privacy Act of 2012, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete data
• Request erasure or blocking of your data
• Object to the processing of your data
• Data portability
• Lodge a complaint with the National Privacy Commission

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email. The "Last updated" date at the top indicates when the policy was last revised.

If you have questions about this Privacy Policy or wish to exercise your data privacy rights, contact us at [email protected].